如何在Spring Boot中绕过BindAuthenticator handleBindException用于Spring LDAP身份验证设置

Question

对于Spring启动中的Spring Security设置。LDAP身份验证提供程序默认配置为使用BindAuthenticator类。

该类包含方法

/**
* Allows subclasses to inspect the exception thrown by an attempt to bind         with a
* particular DN. The default implementation just reports the failure to     the debug
* logger.
*/
protected void handleBindException(String userDn, String username,     Throwable cause) {
if (logger.isDebugEnabled()) {
logger.debug("Failed to bind as " + userDn + ": " + cause);
}
}

此方法用于处理与身份验证相关的异常，如无效凭据。

null

Answer 1

我通过定义LDAP上下文而不是使用Spring BootLDAPAuthenticationProviderConfigurer解决了这个问题。

然后创建FilterBasedLdapUserSearch并用my ConnectBindAuthenticator覆盖BindAuthentication。

我为Spring Boot配置创建了一个单独的LDAPConfiguration类，并将所有这些自定义对象注册为bean。

 @Bean
 public DefaultSpringSecurityContextSource contextSource() {
     DefaultSpringSecurityContextSource contextSource = new DefaultSpringSecurityContextSource(env.getProperty("ldap.url"));
     contextSource.setBase(env.getProperty("ldap.base"));
     contextSource.setUserDn(env.getProperty("ldap.managerDn"));
     contextSource.setPassword(env.getProperty("ldap.managerPassword"));
     return contextSource;
 }

 @Bean
 public ConnectBindAuthenticator bindAuthenticator() {
     ConnectBindAuthenticator connectBindAuthenticator = new ConnectBindAuthenticator(contextSource());
     connectBindAuthenticator.setUserSearch(ldapUserSearch());
     connectBindAuthenticator.setUserDnPatterns(new String[]{env.getProperty("ldap.managerDn")});
     return connectBindAuthenticator;
 }

 @Bean
 public LdapUserSearch ldapUserSearch() {
     return new FilterBasedLdapUserSearch("", env.getProperty("ldap.userSearchFilter"), contextSource());
 }