Ldap + Dao

[stanley1610]

Is it possible to use LDAP to check against account/password and to use RDBMS to check against authorized permission or role, under the framework of ACEGI? Thanks.

[karldmoore]

I don't see why not, you'd just have to take a look at the code for the relevent points to override for your custom behaviour.

[asifsh7]

LdapAuthenticationProvider uses LdapAuthoritiesPopulator to retrieve Roles/Authorities. The defualt implementation comes with Acegi Security is DefaultLdapAuthoritiesPopulator that interacts with Directory to retrieve user's roles.

If you want to get roles/authorities information from database. You just need to implement LdapAuthoritiesPopulator interface.

You will write your JDBC logic in LdapAuthoritiesPopulator's method "GrantedAuthority[] getGrantedAuthorities(LdapUserDetails userDetails)".

If you still have problem, do a post again.
Asif Shahzad

[stanley1610]

If you want to get roles/authorities information from database. You just need to implement LdapAuthoritiesPopulator interface.

You will write your JDBC logic in LdapAuthoritiesPopulator's method "GrantedAuthority[] getGrantedAuthorities(LdapUserDetails userDetails)".

Thanks a lot for your information. This means that I have to code a new class to implement LdapAuthoritiesPopulator.