Spring Security 3.0 and Active Directory LDAP: DOMAIN\user login

Question

I would like to have users authenticate against an ActiveDirectory LDAP server using the DOMAIN\\user.name syntax. I think that should be possible with SpringSec 3.0 since the docs mention an alternative syntax which I guess refers to the DOM\\user syntax instead of a bind DN, but the docs don't elaborate further.

Is there some way to configure Spring Sec 3 LDAP to use "the MS way" or do I have to write my own Authenticator implementation (against eg the java.naming.directory package, which I've tested to be able to use the MS syntax as its SECURITY_PRINCIPAL)?

Answer 1

使用Spring Security 3.1，它内置了对AD绑定的支持。