Acegi and ldap authentication

[templth]

Hi,

I see some posts about an LdapPasswordAuthenticationDaoImpl in the following thread:
http://forum.springframework.org/showthread.php?t=9778

Is this class now included with the distribution?
Thierry

[Ben Alex]

It is still in the sandbox as unit testing an LDAP server is a bit of a challenge, especially on a Windows-only platform. Anyone know of a good approach?

You'll need to checkout Acegi Security from CVS in order to use the sandbox (it's the only item remaining in it, by the way).

[jpoley]

do you know when this might make it into a release?
is this Active Directory LDAP, OpenLDAP or Sun LDAP? or other?

[Ben Alex]

LDAP support is a priority and will be added to either 0.9.0 or 1.0.0 of Acegi Security. We now have unit tests, so it's just a case of refactoring certain aras of the code to maximise flexibility.

[kjk]

I'd like to be able to control the attributes returned by the ldap server. UserSearchBean doesn't expose searchControls and doesn't use SearchControlsFactory. Is there a plan to support this feature?

[Ben Alex]

Due to the flexible nature of LDAP-based authentication, when I get a chance to refactor the existing LDAP classes I will be trying to make the workflow reasonably abstract and then use pluggable interface points (or at worst non-final methods) so that advanced customisation is possible.

[gregorian21]

LDAP support is a priority and will be added to either 0.9.0 or 1.0.0 of Acegi Security. We now have unit tests, so it's just a case of refactoring certain aras of the code to maximise flexibility.

Could you please give an indication as to when 0.9.0 is likely to be released and also whether the LDAP related code is likely to make the release.

Thanks

[Ben Alex]

0.9.0 will not contain LDAP support.

It may be in 1.0.0, which will be out in December, but only if someone volunteers to take it over.

To be honest, LDAP support does not require reengineering of any Acegi Security interfaces or extension points, so it can be added later without breaking backward compatibility. The major issue with LDAP is its significant flexibility and correspondingly wide deployment scenerios.

In the meantime, people can copy what is in the sandbox and adapt their own solution.