?<?xml version="1.0" encoding="UTF-8"?>
?<beans xmlns=" http://www.springframework.org/schema/beans "
?????? xmlns:xsi=" http://www.w3.org/2001/XMLSchema-instance "
?????? xmlns:p=" http://www.springframework.org/schema/p "
?????? xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd ">
? ?<bean id="authenticationManager"
??class="org.jasig.cas.authentication.AuthenticationManagerImpl">
?? ??<property name="credentialsToPrincipalResolvers">
???<list>
???? ????<bean
?????class="org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver" />
???? ????<bean
?????class="org.jasig.cas.authentication.principal.HttpBasedServiceCredentialsToPrincipalResolver" />
???</list>
??</property>

?? ??<property name="authenticationHandlers">
???<list>
???? ????<bean class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"
?????p:httpClient-ref="httpClient" />
???? ????<!--<bean
?????class="org.jasig.cas.authentication.handler.support.SimpleTestUsernamePasswordAuthenticationHandler" />-->

?????<bean? class="org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler" >
?????????????????????????????? <property name="filter" value="uid=%u" />?
????????? <!--seem must have ou node-->
?????????????????????????????? <!--<property name="searchBase" value="ou=nsc,dc=nhncdev,dc=com" />? -->
????????? <property name="searchBase" value="ou=nsc,dc=nhncdev,dc=com" />?
?????????????????????????????? <property name="contextSource" ref="contextSource" />
</bean>

???</list>
??</property>
?</bean>

? ?<bean id="userDetailsService" class="org.springframework.security.userdetails.memory.InMemoryDaoImpl">
??<property name="userMap">
???<value>
???
????? </value>
??</property>
?</bean>?
?
?? <bean id="attributeRepository"
??class="org.jasig.services.persondir.support.StubPersonAttributeDao">
??<property name="backingMap">
???<map>
????<entry key="uid" value="uid" />
????<entry key="eduPersonAffiliation" value="eduPersonAffiliation" />
????<entry key="groupMembership" value="groupMembership" />
???</map>
??</property>
?</bean>?
?
? ?<bean
??id="serviceRegistryDao"
??class="org.jasig.cas.services.InMemoryServiceRegistryDaoImpl" />

?<bean id="contextSource" class="org.jasig.cas.adaptors.ldap.util.AuthenticatedLdapContextSource">
????????
?? <property name="anonymousReadOnly" value="false" />?
????? ??
?? <property name="userName" value="cn=zhenyu wang,ou=nsc,dc=nhncdev,dc=com" />
???????? <property name="password" value="Hello123" />?
??? ?????
?????
???????? <property name="pooled" value="true" />
???????? <property name="urls">
???????????????? <list>?
??????????????????????? ????????????<value>ldap://10.34.114.54:389/</value>
???????????????? </list>
???????? </property>

???????? <property name="baseEnvironmentProperties">
???????????????? <map>
??????????????????????? <entry>
???????????????????????????????? <key><value>java.naming.security.authentication</value></key>
???????????????????????????????? <value>simple</value>
??????????????????????? </entry>
???????????????? </map>
???????? </property>
</bean>

</beans>

?

說明:在微軟活動目錄中建立一個用戶節(jié)點(diǎn),帳號為wangzhenyu,cn為zhenyu wang,并設(shè)置登陸口令,這時候在cas中用wangzhenyu的帳號登陸失敗,解決辦法是:安裝apache directory studio,建立一個到微軟活動目錄的連接,連接時使用微軟活動目錄所在的windows2003服務(wù)器的超級用戶帳號,連接成功后,在LDAP樹中找從ou=nsc下找i到CN=zhengyu wang這個節(jié)點(diǎn),給這個節(jié)點(diǎn)手工添加一個uid屬性，設(shè)置uid的值為wangzhenyu,添加成功后，在cas登陸頁面中再使用wangzhenyu帳號及ad中設(shè)置的口令就可以成功登錄了．

?

--openjweb作者 ldap ad?

?

?

?

CAS連接微軟活動目錄的配置方法