mirror of
https://github.com/nicolabs/ldap-plugin.git
synced 2025-09-07 05:14:24 +02:00
3459fc18c0
git-svn-id: https://hudson.dev.java.net/svn/hudson/trunk/hudson/main@10468 71c3de6d-444a-0410-be80-ed276b4c234a Originally-Committed-As: adbccfee4f7229843f8b53fd5cee40a072f271e3
58 lines
2 KiB
Groovy
58 lines
2 KiB
Groovy
import org.acegisecurity.providers.ProviderManager
|
|
import org.acegisecurity.providers.anonymous.AnonymousAuthenticationProvider
|
|
import org.acegisecurity.providers.ldap.LdapAuthenticationProvider
|
|
import org.acegisecurity.providers.ldap.authenticator.BindAuthenticator2
|
|
import org.acegisecurity.ldap.DefaultInitialDirContextFactory
|
|
import org.acegisecurity.ldap.search.FilterBasedLdapUserSearch
|
|
import org.acegisecurity.providers.rememberme.RememberMeAuthenticationProvider
|
|
import hudson.model.Hudson
|
|
import hudson.security.DeferredCreationLdapAuthoritiesPopulator
|
|
|
|
/*
|
|
Configure LDAP as the authentication realm.
|
|
|
|
Authentication is performed by doing LDAP bind.
|
|
The 'instance' object refers to the instance of LDAPSecurityRealm
|
|
*/
|
|
|
|
initialDirContextFactory(DefaultInitialDirContextFactory, instance.getLDAPURL() ) {
|
|
if(instance.managerDN!=null) {
|
|
managerDn = instance.managerDN;
|
|
managerPassword = instance.getManagerPassword();
|
|
}
|
|
}
|
|
|
|
ldapUserSearch(FilterBasedLdapUserSearch, instance.userSearchBase, instance.userSearch, initialDirContextFactory) {
|
|
searchSubtree=true
|
|
}
|
|
|
|
bindAuthenticator(BindAuthenticator2,initialDirContextFactory) {
|
|
// this is when you the user name can be translated into DN.
|
|
// userDnPatterns = [
|
|
// "uid={0},ou=people"
|
|
// ]
|
|
// this is when we need to find it.
|
|
userSearch = ldapUserSearch;
|
|
}
|
|
|
|
authoritiesPopulator(DeferredCreationLdapAuthoritiesPopulator,initialDirContextFactory,"ou=groups") {
|
|
// groupRoleAttribute = "ou";
|
|
}
|
|
|
|
authenticationManager(ProviderManager) {
|
|
providers = [
|
|
// talk to LDAP
|
|
bean(LdapAuthenticationProvider,bindAuthenticator,authoritiesPopulator),
|
|
|
|
// these providers apply everywhere
|
|
bean(RememberMeAuthenticationProvider) {
|
|
key = Hudson.getInstance().getSecretKey();
|
|
},
|
|
// this doesn't mean we allow anonymous access.
|
|
// we just authenticate anonymous users as such,
|
|
// so that later authorization can reject them if so configured
|
|
bean(AnonymousAuthenticationProvider) {
|
|
key = "anonymous"
|
|
}
|
|
]
|
|
} |