Roles are now: (activeDirectory)

[hingerl]

Hi,

 

how can i make it, that only "ROLE*"-roles from ActiveDirectory get imported, when i log in JI?

 

Code:

12:20:04,451  WARN UserAuthorityServiceImpl,http-8080-Processor24:612 - Updated user: hingerl. Roles are now:
ADMINISTRATOREN
REMOTEDESKTOPBENUTZER
ROLE_ADMINISTRATOR
GRUPPE-EDV
LOKALE-ADMINISTRATOREN
ROLE_USER
ROLE_FIBU

 

thanks

a.Hingerl

[swood]

You will have to extend UserAuthorityServiceImpl to make your own implementation and replace the userAuthorityService bean reference in the applicationContext. The alignInternalAndExternalUser method in there does this. we should make this more pluggable.

 

 

Sherman

JasperSoft

[hingerl]

Thanks,

 

i think, i have solved it.

 

 

applicationContext-security.xml

groupSearchFilter (&(description=JASPER)(member={0}))

Code:

<bean id="defaultLdapAuthoritiesPopulator" class="org.acegisecurity.providers.ldap.populator.DefaultLdapAuthoritiesPopulator"> 
	<constructor-arg> <ref local="initialDirContextFactory" /> </constructor-arg> 
	<constructor-arg> <value></value> </constructor-arg> 
		<property name="convertToUpperCase"> <value>true</value> </property>
 			<property name="rolePrefix"> <value></value> </property> 
			<property name="searchSubtree"> <value>true</value> </property>
 			<property name="groupSearchFilter"> <value></value> </property>
 			<property name="groupRoleAttribute"> <value>cn</value> </property> 
</bean> 

 

, so only AD-Groups with Description "JASPER" will get imported.

 

Thanks.

 

Post edited by: hingerl, at: 2007/05/03 16:10

Post edited by: hingerl, at: 2007/05/03 16:12