Using Spring Security in Grails with CAS and LDAP -


i trying set spring security in grails authenticating against cas , authorizing against ldap. have found examples several examples (i have 20 browser tabs open right now), none of them answer whole question. of examples grails + cas or grails + ldap, no examples of grails + cas + ldap.

so got working, , isn't bad, wish had seen @cantoni's example first. have made easy. setup little more simple his, i'll add here.

install spring security core, cas, , ldap plugins. important: until spring-security-cas:1.0.5 updated, wouldn't try use new spring-security-core:2.0-rc2 , spring-security-ldap:2.0-rc2. cas plugin doesn't seem work them.

    plugins {     ....     //security     compile ":spring-security-core:1.2.7.3"     compile ":spring-security-cas:1.0.5"     compile ":spring-security-ldap:1.0.6"     ...     }

you don't need run quickstart command if you're not using daoauthenticationprovider, not.

configure core , cas plugins in config.groovy

//spring security core config grails.plugins.springsecurity.providernames = ['casauthenticationprovider']  grails.plugins.springsecurity.rejectifnorule = true grails.plugins.springsecurity.securityconfigtype = "intercepturlmap" grails.plugins.springsecurity.intercepturlmap = [     '/js/**': ['is_authenticated_anonymously'],     '/css/**': ['is_authenticated_anonymously'],     '/images/**': ['is_authenticated_anonymously'],     '/login/**': ['is_authenticated_anonymously'],     '/logout/**': ['is_authenticated_anonymously'],     '/**': ['hasanyrole("role_operator","role_admin")'] ]  //spring security cas config grails.plugins.springsecurity.cas.loginuri = '/login' grails.plugins.springsecurity.cas.serviceurl = 'http://server.company.com:8080/app-name/j_spring_cas_security_check' grails.plugins.springsecurity.cas.serverurlprefix = 'https://sso.company.com/cas' grails.plugins.springsecurity.cas.proxycallbackurl = 'http://server.company.com:8080/app-name/secure/receptor' grails.plugins.springsecurity.cas.proxyreceptorurl = '/secure/receptor'

you can leave off rejectifnorule, securityconfigtype, , intercepturlmap if want use annotations instead of interceptor map.

configure userdetailsservice delegate ldap in resources.groovy

// load ldap roles spring security initialdircontextfactory(org.springframework.security.ldap.defaultspringsecuritycontextsource,     "ldap://123.45.67.89:389"){     userdn = "myldapuser"     password = "myldappwd" }  ldapusersearch(org.springframework.security.ldap.search.filterbasedldapusersearch,     "dc=foo,dc=company,dc=com", "samaccountname={0}", initialdircontextfactory){  }  ldapauthoritiespopulator(org.springframework.security.ldap.userdetails.defaultldapauthoritiespopulator,     initialdircontextfactory,"ou=foo,dc=bar,dc=company,dc=com"){       grouproleattribute = "cn"       groupsearchfilter = "member={0}"       searchsubtree = true       roleprefix = "role_"       converttouppercase = true       ignorepartialresultexception = true }  userdetailsservice(org.springframework.security.ldap.userdetails.ldapuserdetailsservice,ldapusersearch,ldapauthoritiespopulator){ }

Comments

Post a Comment

Popular posts from this blog

curl - PHP fsockopen help required -

i trying work on cloudflare api , have found in documentation. unfortunately have no idea how can use in fsockopen or through curl. here example of post request. need know how can make request below data post using curl or fsockopen curl https://www.cloudflare.com/api_json.html -d 'a=cache_lvl' \ -d 'tkn=8afbe6dea02407989af4dd4c97bb6e25' \ -d 'email=sample@example.com' \ -d 'z=example.com' \ -d 'v=agg' here link cloudflare https://www.cloudflare.com/docs/client-api.html#s4.2 try one: $ch = curl_init("https://www.cloudflare.com/api_json.html"); curl_setopt($ch, curlopt_returntransfer,1); curl_setopt($ch, curlopt_followlocation, 1); curl_setopt($ch, curlopt_ssl_verifypeer,false); // handling of -d curl parameter here. $param = array( 'a' => 'cache_lvl', 'tkn' => '8afbe6dea02407989af4dd4c97bb6e25', 'email' => 'sample@example.com', 'z' =...
Read more

HTTP/1.0 407 Proxy Authentication Required PHP -

i working in restricted network/limited access internet. since have use proxy make web service call. here php code calling web service , response . $client = new soapclient("http: //www.xyz.com/abc/wsdls/login.wsdl", array("trace" => 1, "exceptions" => 1, 'proxy_host' => $proxy_host, 'proxy_port' => $proxy_port, 'proxy_login' => $proxy_login, 'proxy_password' => $proxy_password)); response is fatal error: uncaught soapfault exception: [wsdl] soap-error: parsing wsdl: couldn't load ' http://www.xyz.com/abc/wsdls/login.wsdl ' : failed load external entity if copy url error message , paste in browser(with same proxy settings) works. 2nd scenario is, if pass values instead of variables giving me diffarant response $client = new soapclient("http: //www.xyz.com/abc/wsdls/login.wsdl", array("trace" => 1, "exceptions" => 1, 'proxy_host' ...
Read more

c# - Resource not found error -

i have problem accessing method on homecontroller. show code of method : [httpget] public actionresult decriptidentifiantetredirige(string login_crypter, string mdp_crypter) { string loginacrypter = _globalmanager.protegemotdepasse(login_crypter); string mdpacrypter = _globalmanager.protegemotdepasse(mdp_crypter); user userapp = new models.user(login_crypter, mdp_crypter); if (userapp.authentificationvalidee(userapp.userlogin, userapp.password)) { session["name"] = userapp.userlogin; return redirecttoaction("accueil", "home"); } else { return redirecttoaction("validerauthentification", "home"); } } then in routeconfig.cs wrote route : routes.maproute( name: "authentificationapresdecryptage", url: "{controller}/{action}/{login_crypter}/{mdp_crypter}", defaults: new...
Read more