spring-projects/spring-ldap

I 'll try to be simple with code. Here is my code that's work for me...

// Make a class extends WebSecurityConfigurerAdapter

@Configuration
@EnableWebSecurity
@PropertySources({ @PropertySource("classpath:ldap.properties") })
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

......
......

  @Autowired
  private Environment env;

  @Autowired
  private AppLdapUserDetailsContextMapper appLdapUserDetailsContextMapper;


  @Override
  protected void configure(AuthenticationManagerBuilder auth) throws Exception {

    // Authentication Provider Order

    // 1. LDAP provider
    ldapProvider(auth);

  }



  private void ldapProvider(AuthenticationManagerBuilder auth) throws Exception {

    try {

      // @formatter:off
      auth.ldapAuthentication()
        .userSearchBase(env.getRequiredProperty("ldap.user.search.base"))
        .userSearchFilter(env.getRequiredProperty("ldap.search.filter"))
        .groupSearchBase(env.getRequiredProperty("ldap.group.search.base"))
        .userDetailsContextMapper(appLdapUserDetailsContextMapper)
        .contextSource(contextSource());
      // @formatter:on

    } catch (IllegalStateException e) {
      LOGGER.warn("Some of the required LDAP attributes could not be readed from properties", e);
    }
  }


  @Bean
  public DefaultSpringSecurityContextSource contextSource() {

    DefaultSpringSecurityContextSource contextSource = new DefaultSpringSecurityContextSource(env
        .getRequiredProperty("ldap.url"));
    contextSource.setBase(env.getRequiredProperty("ldap.base.dn"));
    contextSource.setUserDn(env.getRequiredProperty("ldap.user.dn.pattern"));
    contextSource.setPassword(env.getRequiredProperty("ldap.password"));
    contextSource.setReferral(null);
    contextSource.setPooled(true);
    Map<String, Object> baseEnvironmentProperties = new HashMap<>();
    baseEnvironmentProperties.put("com.sun.jndi.ldap.connect.timeout", "5000");
    contextSource.setBaseEnvironmentProperties(baseEnvironmentProperties);
    contextSource.afterPropertiesSet();
    return contextSource;
  }

.....
}


@Component
public class AppLdapUserDetailsContextMapper extends InetOrgPersonContextMapper {

 @Override
  public UserDetails mapUserFromContext(DirContextOperations ctx, String username,
      Collection<? extends GrantedAuthority> authorities) {
    // must be implemented for your own business
    ...
  }
}


properties file:

## zflexldap
ldap.url=ldap://zflexldap.com:389/dc=zflexsoftware,dc=com
ldap.password=zflexpass
ldap.user.dn.pattern=cn=ro_admin,ou=sysadmins,dc=zflexsoftware,dc=com
ldap.base.dn=dc=zflexsoftware,dc=com

## Search
ldap.user.search.base=ou=guests
ldap.search.filter=(uid={0})
ldap.group.search.base=
ldap.group.search.filter=(member={0})

I think this is all.