Grails spring security LDAP从LDAP base获取角色

Question

plugin:
    springsecurity:
    #LDAP configuration
        logout.postOnly: false
        securityConfigType: 'InterceptUrlMap'
        debug:
            useFilter: true
        #useBasicAuth: true
        providerNames: ['ldapAuthProvider', 'anonymousAuthenticationProvider'] 
        ldap:
            context:
                managerDn: '****'
                managerPassword: '**password**'
                server: 'ldap://**my server**'
            authorities:
                ignorePartialResultException: true # typically needed for Active Directory
                groupSearchFilter: 'member={0}' # Active Directory specific - the example settings will
                retrieveGroupRoles: true # to get Roles from LDAP
                groupRoleAttribute: 'cn'
            search:
                base: DC=HQ,DC=ROOT,DC=AD
                filter: 'sAMAccountName={0}' # for Active Directory you need this
                searchSubtree: true
                attributesToReturn: ['mailNickName','name','mail','extensionAttribute13','extensionAttribute14','extensionAttribute15','company'] # extra attributes you want returned
            auth:
                hideUserNotFoundExceptions: false

你能告诉我如何向控制台或视图显示用户角色以进行测试吗？我可以通过从ldap中的用户列中获取用户角色来重新定义（默认情况下从ldap'cn'获取角色）用户角色吗？

谢谢你。

Answer 1

将以下服务注入控制器：

def springSecurityService 

然后访问如下角色：

def roles = springSecurityService.getPrincipal().getAuthorities()

同样，在使用application.yml时，您应该像这样指定providerNames&而不是列表样式：

providerNames:
    - ldapAuthProvider
    - anonymousAuthenticationProvider

attributesToReturn:
    - mailNickName
....