Examples with DirContextOperations org.springframework.ldap.core.DirContextOperations used on opensource projects

Example 1 with DirContextOperations

use of org.springframework.ldap.core.DirContextOperations in project opennms by OpenNMS.

the class KerberosServiceLdapAuthenticationProvider method authenticate.

@Override
public Authentication authenticate(Authentication authentication) throws AuthenticationException {
    KerberosServiceRequestToken auth = (KerberosServiceRequestToken) authentication;
    byte[] token = auth.getToken();
    LOG.debug("Try to validate Kerberos Token");
    KerberosTicketValidation ticketValidation = m_kerberosTicketValidator.validateTicket(token);
    LOG.debug("Succesfully validated " + ticketValidation.username());
    /*
         * The incoming username will be in the form of a Kerberos user principal name,
         * e.g. user@EXAMPLE.ORG. We typically need to strip off the realm name before
         * doing any LDAP operations with the username.
         */
    String validatedUsername = trimRealmFromUsername(ticketValidation.username());
    DirContextOperations ldapUserEntry = m_ldapUserSearch.searchForUser(validatedUsername);
    Collection<? extends GrantedAuthority> grantedAuthorities = m_ldapAuthoritiesPopulator.getGrantedAuthorities(ldapUserEntry, validatedUsername);
    UserDetails userDetails = new User(validatedUsername, "notUsed", true, true, true, true, grantedAuthorities);
    m_userDetailsChecker.check(userDetails);
    additionalAuthenticationChecks(userDetails, auth);
    KerberosServiceRequestToken responseAuth = new KerberosServiceRequestToken(userDetails, ticketValidation, userDetails.getAuthorities(), token);
    return responseAuth;
}

Example 2 with DirContextOperations

use of org.springframework.ldap.core.DirContextOperations in project perun by CESNET.

the class LdapConnectorImpl method updateUsersLibraryIds.

public void updateUsersLibraryIds(String userId, String[] libraryIDs) {
    DirContextOperations context = ldapTemplate.lookupContext(getUserDN(userId));
    context.setAttributeValues("libraryIDs", libraryIDs);
    ldapTemplate.modifyAttributes(context);
    log.debug("Entry modified in LDAP: UserId {}.", userId);
}

Example 3 with DirContextOperations

use of org.springframework.ldap.core.DirContextOperations in project perun by CESNET.

the class LdapConnectorImpl method updateUsersCertSubjects.

public void updateUsersCertSubjects(String userId, String[] certSubjects) {
    DirContextOperations context = ldapTemplate.lookupContext(getUserDN(userId));
    context.setAttributeValues("userCertificateSubject", certSubjects);
    ldapTemplate.modifyAttributes(context);
    log.debug("Entry modified in LDAP: UserId {}.", userId);
}

Example 4 with DirContextOperations

use of org.springframework.ldap.core.DirContextOperations in project gocd by gocd.

the class LdapUserSearchTest method shouldLogErrorsDueToInvalidSearchBaseWhenAuthenticating.

@Test
public void shouldLogErrorsDueToInvalidSearchBaseWhenAuthenticating() {
    final FilterBasedLdapUserSearch filter1 = mock(FilterBasedLdapUserSearch.class);
    final FilterBasedLdapUserSearch filter2 = mock(FilterBasedLdapUserSearch.class);
    LdapConfig ldapConfig = setLdapConfig(new BasesConfig(new BaseConfig("base1"), new BaseConfig("base2")));
    doReturn(filter1).when(spy).getFilterBasedLdapUserSearch(ldapConfig.getBasesConfig().get(0).getValue(), ldapConfig.searchFilter());
    doReturn(filter2).when(spy).getFilterBasedLdapUserSearch(ldapConfig.getBasesConfig().get(1).getValue(), ldapConfig.searchFilter());
    DirContextOperations foundUser = mock(DirContextOperations.class);
    RuntimeException runtimeException = new RuntimeException("Invalid search base");
    when(filter1.searchForUser("username")).thenThrow(runtimeException);
    when(filter2.searchForUser("username")).thenReturn(foundUser);
    assertThat(spy.searchForUser("username"), is(foundUser));
    verify(filter1).searchForUser("username");
    verify(filter2).searchForUser("username");
    verify(logger).warn("The ldap configuration for search base 'base1' is invalid", runtimeException);
}

Example 5 with DirContextOperations

use of org.springframework.ldap.core.DirContextOperations in project gocd by gocd.

the class LdapUserSearchTest method shouldReturnUserFoundInSecondSearchBase.

@Test
public void shouldReturnUserFoundInSecondSearchBase() {
    final FilterBasedLdapUserSearch filter1 = mock(FilterBasedLdapUserSearch.class);
    final FilterBasedLdapUserSearch filter2 = mock(FilterBasedLdapUserSearch.class);
    LdapConfig ldapConfig = setLdapConfig(new BasesConfig(new BaseConfig("base1"), new BaseConfig("base2")));
    doReturn(filter1).when(spy).getFilterBasedLdapUserSearch(ldapConfig.getBasesConfig().get(0).getValue(), ldapConfig.searchFilter());
    doReturn(filter2).when(spy).getFilterBasedLdapUserSearch(ldapConfig.getBasesConfig().get(1).getValue(), ldapConfig.searchFilter());
    when(filter1.searchForUser("username")).thenThrow(new UsernameNotFoundException("User username not found in directory."));
    DirContextOperations foundUser = mock(DirContextOperations.class);
    when(filter2.searchForUser("username")).thenReturn(foundUser);
    assertThat(spy.searchForUser("username"), is(foundUser));
    verify(filter1).searchForUser("username");
    verify(filter2).searchForUser("username");
}