Questions tagged [spring-security-ldap]

285 questions
5
votes
2 answers

Customize LdapAuthoritiesPopulator in configuration

The DefaultLdapAuthoritiesPopulator sets a search scope of "ONE_LEVEL", but I need to search "SUBSCOPE" to get the list of groups a user is a member of. I've been following the "configuration" style Spring setup (code, not XML). While there's tons…
Jarrod Carlson
  • 1,967
  • 4
  • 16
  • 20
5
votes
0 answers

Is Spring Security safe or vulnerable against LDAP Injection?

Authenticating to the LDAP by Using the JNDI Can the ldap injection can be done using these parameters Context.SECURITY_PRINCIPAL="user1" Context.SECURITY_CREDENTIALS="password"
Manav Dewan
  • 161
  • 5
4
votes
0 answers

How to use Active directory docker image for authorization in spring boot application

This is my first time to work with Docker and AD. I am implementing a spring boot application that uses Active directory for authorization. I have gone through LDAP tutorial https://spring.io/guides/gs/authenticating-ldap/ I have downloaded a docker…
4
votes
3 answers

Spring not able to load ldif

I'm currently tryin to build a small webapplication with Spring Boot 1.4.2.RELEASE. For that I'm also using Spring Boot LDAP with embedded LDAP and ldif loaded. If I'm starting that it always tells me that there is no DN set as you will see…
4
votes
1 answer

Access is denied (user is anonymous); redirecting to authentication entry point in Spring

I am new to Spring Security. I am trying to add LDAP authentication to a Spring Web app. I set up a test LDAP server and trying to authenticate the web app using it. But somehow, when I enter username and password in the login page, I keep getting…
4
votes
2 answers

How to get additional user attributes from LDAP in Spring Security?

I'm currently trying to develop a Spring Boot application whose purpose it will be to manage user entries in our LDAP directory. LDAP login already works; so does the lookup of groups a user is member of. Additionally, I'd like to populate the…
4
votes
2 answers

Spring Security - Switch between Authentication Providers at Runtime (local database OR remote LDAP)

im currently working of a Spring MVC web application and we have been using authtication via a local database with an impl of the AbstractUserDetailsAuthenticationProvider class provided by spring security. However, to secure the app further, we…
4
votes
1 answer

Spring Security Java Config Multiple Group Search Base

I am using Spring Security 3.2.5 with Java config and LDAP authentication/authorization. We have a requirement to search for groups in two separate trees in LDAP. ou=groups and ou=Groups,ou=webapps,ou=Applications I have searched and have been…
Sean Newby
  • 41
  • 3
4
votes
2 answers

Grails Spring Security LDAP plugin with multiple Active Directory servers

I have the Grails Spring Security plugin connecting to one Active Directory server with no problems. However, I need to connect to multiple servers. We have some users on one AD server and other users on a different server, so we need to try looking…
4
votes
2 answers

How to authenticate against Active Directory via LDAP over TLS?

I have a working proof-of-concept application which can successfully authenticate against Active Directory via LDAP on a test server, but the production application will have to do so over TLS -- the domain controller closes any connection which…
3
votes
1 answer

Configure 2 LDAP server

I would like to know how to configure 2 ldap server in spring xml or java config. I mean I'm not referring to using the @Primary. I have 2 different LDAP servers. User will authenticate to which server depending on which domain they are in. For…
3
votes
1 answer

How to properly configure ldap authentication in spring boot? Every time I log in, it redirects to /login after calling /auth

NOTE Suggested answer didn't work. I have the following configuration in WebSecurityConfigurerAdapter: @Override protected void configure(AuthenticationManagerBuilder auth) throws Exception { auth.ldapAuthentication() …
iPhoneJavaDev
  • 821
  • 5
  • 33
  • 78
3
votes
1 answer

Spring boot Ldap Authentication failing with LDAP error code 49 - 80090308 data 52e

I am trying to use LDAP User authentication in my web application with spring security but getting error 52e, below is my spring security ldap authentication code: protected void configure(AuthenticationManagerBuilder auth) throws Exception { …
3
votes
3 answers

How to connect with an external/online LDAP server using Spring Boot?

I am trying to integrate LDAP based login in my Spring Boot application. As initial step, I am trying to use this LDAP server (http://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/). But, I am unable to successfully…
3
votes
1 answer

Spring security Ldap get username password from a encoded cookie for Authentication

Currently I've written a Spring Ldap authentication and authorization module with http basic login but now I need to get the username and password from a cookie in request and bind them to ldap for authentication. Below is my websecurity config…
1
2
3
18 19