Summary

This build is based on Spring Authenticating LDAP

This readme describes the solution to the issues encountered with that guide, provides some general notes, and provides steps and notes and deploying in a Docker container

Issues

Issue 1

• The class WebSecurityConfigurerAdapter referenced in that guide is deprecated

• The fix is to use the new LDAP classes defined in this Spring article: Spring Security Without the WebSecurityConfigurerAdapter

• additional information on these classes at: spring-security/pull/10138

• additional information on the WebSecurityConfigurerAdapter can be found at:spring-security/issues/10822

Issue 2

With Spring Boot, the root entry in the ldif file will cause an error that it has already been created so delete the following lines from the ldif:

dn: dc=springframework,dc=org
objectclass: top
objectclass: domain
objectclass: extensibleObject
dc: springframework

This issue is due to line 53 in EmbeddedLdapServerContextSourceFactoryBean already creating the Domain Component

Misc notes

• clicking on .ldif file in Eclipse IDE redirects to native mac contacts right click and edit as text file

• if using Docker, make sure that jdk on your base image is capable of running classes compiled on the jdk you compiled on otherwise you may see 'has been compiled by a more recent version of the Java Runtime' errors

Running with Docker

To build the Docker image, the following command is used: docker build -t authenticatingldap .
The -t switch is for tag and the argument passed will be the name of the Image

To run the image the following can be used:
docker run -d -p 9090:8080 authenticatingldap

This will run the image in detached mode (in the background) Port 8080 on the container is mapped to 9090 on the host machine

Running locally

1. cd into project directory
   
2. run mvn clean package
3. run java -jar target/authenticating-ldap-0.0.1-SNAPSHOT.jar

Using an external LDAP server

• If you wish to use an external LDAP server rather than the embedded ldap server, set the property ldap.useEmbedded=false in application.properties

• You will need to edit the getContextSource() and authenticiationManager() methods in SecurityConfiguration.java to have the correct values for your LDAP server.

Thanks to the following resources on the configurations:

• ldap authentication
• Spring ldap authentication

For the ldap server, I used the following Docker image: bitnami/openldap This image can be run with the following command:

docker run -p 1389:1389 --detach --rm --name openldap \                                                  
  --env LDAP_ADMIN_USERNAME=admin \ 
  --env LDAP_ADMIN_PASSWORD=adminpassword \ 
  --env LDAP_USERS=customuser \ 
  --env LDAP_PASSWORDS=custompassword \
  bitnami/openldap:latest

LDAP troubleshooting

• You can change the logging level of your project to trace to additional logging output by adding --trace as a program argument to the run configurations if using Eclipse or simply add it to the command in step 3 of "Running Locally"

• You can test the LDAP connection by running the following command from the command line on the host (this command references the default values for the bitami openldap image): ldapsearch -x -H ldap://localhost:1389 -b dc=example,dc=org -D "cn=admin,dc=example,dc=org" -w adminpassword