使用具有Spring Security的LDAP用户搜索查询无法通过LDAP服务器对用户进行身份验证

Question

LDAP Server Hierarchy as retrieved via Apache Directory Studio:

Root DSE:

DC=company,DC=com

OU=Offices

OU=Region Offices

OU=Region1 Office

OU=Users

CN=Jayesh Mulwani

WebSecurity is enabled as a part of below class:

public class LDAPSecurityConfig extends WebSecurityConfigurerAdapter{
    protected void configure(AuthenticationManagerBuilder authenticationManagerBuilder) throws Exception {                  
            authenticationManagerBuilder.ldapAuthentication()
            .contextSource().url("ldap://server-url/CN=auth_support,OU=Misc,DC=company,DC=com")
            .managerDn("username").managerPassword("password")
            .and()
            .userSearchBase("OU=Offices,DC=company,DC=com")
            .userSearchFilter("(&(objectClass=user)(cn={0}))");
    }
}

Once the application is setup on tomcat, i enter the username along with its password but the authentication fails and no error is prompted.

Can someone please assist me with the approach or specify if i'm missing something here ?

Answer 1

I have fixed the problem by adding the below two conditions

.groupSearchFilter("(&(objectClass=group)(AccountName={0}))")
.groupSearchBase("CN=DEPT_All_Employees,OU=DepartmentSecurityGroups,OU=Resources,DC=company,DC=com")

I referred this example to fix the issue http://www.jcombat.com/spring/spring-security-ldap-authentication