Allowing filtering of LDAP groups
This commit is contained in:
parent
7142138dcc
commit
e546fe3bc0
|
@ -92,6 +92,8 @@ public class DefaultLdapRoleMapper
|
||||||
|
|
||||||
private String groupsDn;
|
private String groupsDn;
|
||||||
|
|
||||||
|
private String groupFilter;
|
||||||
|
|
||||||
private String baseDn;
|
private String baseDn;
|
||||||
|
|
||||||
private String ldapGroupMember = "uniquemember";
|
private String ldapGroupMember = "uniquemember";
|
||||||
|
@ -120,6 +122,8 @@ public class DefaultLdapRoleMapper
|
||||||
this.groupsDn = this.baseDn;
|
this.groupsDn = this.baseDn;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
this.groupFilter = userConf.getString( UserConfigurationKeys.LDAP_GROUPS_FILTER, this.groupFilter );
|
||||||
|
|
||||||
this.useDefaultRoleName =
|
this.useDefaultRoleName =
|
||||||
userConf.getBoolean( UserConfigurationKeys.LDAP_GROUPS_USE_ROLENAME, this.useDefaultRoleName );
|
userConf.getBoolean( UserConfigurationKeys.LDAP_GROUPS_USE_ROLENAME, this.useDefaultRoleName );
|
||||||
|
|
||||||
|
@ -145,6 +149,11 @@ public class DefaultLdapRoleMapper
|
||||||
|
|
||||||
String filter = "objectClass=" + getLdapGroupClass();
|
String filter = "objectClass=" + getLdapGroupClass();
|
||||||
|
|
||||||
|
if ( !StringUtils.isEmpty( this.groupFilter ) )
|
||||||
|
{
|
||||||
|
filter = "&(" + filter + ")(" + this.groupFilter + ")";
|
||||||
|
}
|
||||||
|
|
||||||
namingEnumeration = context.search( getGroupsDn(), filter, searchControls );
|
namingEnumeration = context.search( getGroupsDn(), filter, searchControls );
|
||||||
|
|
||||||
List<String> allGroups = new ArrayList<String>();
|
List<String> allGroups = new ArrayList<String>();
|
||||||
|
|
|
@ -84,6 +84,8 @@ public interface UserConfigurationKeys
|
||||||
|
|
||||||
String LDAP_GROUPS_BASEDN = "ldap.config.groups.base.dn";
|
String LDAP_GROUPS_BASEDN = "ldap.config.groups.base.dn";
|
||||||
|
|
||||||
|
String LDAP_GROUPS_FILTER = "ldap.config.groups.filter";
|
||||||
|
|
||||||
String LDAP_GROUPS_MEMBER = "ldap.config.groups.member";
|
String LDAP_GROUPS_MEMBER = "ldap.config.groups.member";
|
||||||
|
|
||||||
String LDAP_GROUPS_ROLE_START_KEY = "ldap.config.groups.role.";
|
String LDAP_GROUPS_ROLE_START_KEY = "ldap.config.groups.role.";
|
||||||
|
|
Loading…
Reference in New Issue