This document describes updating to BellaDati 2.7.4.1 or higher when you are using LDAP authentication with BellaDati 2.7.4 or lower.

In 2.7.4.1 the beans-common.xml configuration file has been removed. LDAP-related configuration has been moved to the application.properties. As a result, you need to move the parameter values to application.properties as part of the update.

XML Tag / Attribute

Properties Attribute

key

application.login.domains (separate multiple domains by comma)

url

adauth.<domain>.spec.url

bindDN

adauth.<domain>.spec.bindDN

bindPassword

adauth.<domain>.spec.bindPassword

loginAttribute

adauth.<domain>.spec.loginAttribute

Additionally, you can specify these properties:

  • adauth.createNotExistingAccounts
  • adauth.domainId

Please refer to the BellaDati WAR Configuration Overview for more information.

Example

Consider following beans-common.xml:

<bean id="userAuthenticityVerifier" class="cz.trgiman.belladati.auth.ADUserAuthenticityVerifier" autowire="byType">
        <property name="createNotExistingAccounts" value="true"/>
        <property name="workspaceId" value="1"/>
        <property name="domains">
            <map>
                <entry>
                    <key><value>domain1</value></key>
                    <bean class="cz.trgiman.belladati.auth.DomainSpecification">
                        <property name="url" value="LDAP://host1:389/dc=xyz"/>
                        <property name="bindDN" value="bindUser"/>
                        <property name="bindPassword" value="bindUserPassword"/>
                        <property name="loginAttribute" value="sAMAccountName"/>
                    </bean>
                </entry>
            </map>
        </property>
      </bean>

The appropriate application.properties configuration should look like:

application.login.domains=domain1
adauth.createNotExistingAccounts=true
adauth.domainId=1

adauth.domain1.spec.url=LDAP://host1:389/dc=xyz
adauth.domain1.spec.bindDN=bindUser
adauth.domain1.spec.bindPassword=bindUserPassword
adauth.domain1.spec.loginAttribute=sAMAccountName
  • No labels