Search:

After some further investigation I appear to have solved this.

I created a bean implementing ProviderManager in my configuration, and lo and behold it was automatically picked up and used as the...

Hi all,

Pretty straightforward question here. I note that as per SEC-438 one can now easily configure custom exception mappings on the ProviderManager.

However, the namespace-based...

If anyone is still being stung by this, I found that the errors were output to $CATALINA_BASE/logs/localhost-YYYY-mm-dd.log (subtituting the actual date in the filename, of course).

One approach I took in my project is to have my own implementation of AuthenticationEntryPoint too, that works on a conditional basis. Since the entry point gets to see the exception that caused it...

While there are multiple places you could do this, it seems like the most natural place would be in the authentication - when the user provides their credentials (including password), you can...

Since you get to control the implementation of the UserDetails object that is returned, it is entirely up to the object itself whether the authorities are pre-populated or not. So in fact it is...

As for the no provider found exception - your provider manager needs to have an AuthenticationProvider registered that knows how to handle this type of authentication. I thought that the...

There is a fairly elegant way you can acheive this - I'm not sure if it's the "by the book" way to acheive these things but it feels nice, and it's been working for me for a similar thing (enforcing...

I don't have anything to offer on your first issue, but I can see what's happening with the second.

Look at the BindAuthenticator.authenticate() method. bindWithDn() gets called multiple times...

You'll need to create a instance of Authentication that behaves appropriately in your situation, which might be as simple as ensuring getAuthorities() returns the appropriate result. The easiest way...

Hi all,

I am using Spring Security for a current project that allows a hybrid authentication environment - NTLM is the preferred default, but for users that do not have valid NTLM credentials, the...

I think you're going to have to specify your intentions a little more clearly - or at least, I am not sure what exactly you are after.

Are you looking to have the ability to POST an XML document...