diff --git a/src/docbkx/namespace-config.xml b/src/docbkx/namespace-config.xml
index b3e73272b1..6053a288bc 100644
--- a/src/docbkx/namespace-config.xml
+++ b/src/docbkx/namespace-config.xml
@@ -115,7 +115,7 @@
- Getting Started with Security Namespace Cofiguration
+ Getting Started with Security Namespace Configuration
In this section, we'll look at how you can build up a namespace configuration to use some of the main
features of the framework. Let's assume you initially want to get up and running as quickly as possible
@@ -229,7 +229,18 @@
These other elements are responsible for setting up form-login,
anonymous authentication, basic authentication, logout handling and remember-me services
respectively. They each have attributes which can be used to alter their behaviour.
+
+
+ auto-config Requires a UserDetailsService
+ An error can occur when using auto-config without a UserDetailsService in
+ your application context (for example, if you are using LDAP authentication).
+ This is because remember-me is automatically enabled when auto-config="true" and it requires
+ an authentication mechanism which uses a UserDetailsService to function (see
+ the Remember-me chapter for more details). If you have an error caused
+ by a missing UserDetailsService then try removing the auto-config
+ setting (and any remember-me setting you might have).
+ Form and Basic Login Options
@@ -324,6 +335,11 @@
Advanced Web Features
+
+
+ Remember-Me Authentication
+ See the separate Remember-Me chapter for information on remember-me namespace configuration.
+ Adding HTTP/HTTPS Channel Security
diff --git a/src/docbkx/remember-me-authentication.xml b/src/docbkx/remember-me-authentication.xml
index a68ca8b1f0..72f3c10b5a 100644
--- a/src/docbkx/remember-me-authentication.xml
+++ b/src/docbkx/remember-me-authentication.xml
@@ -14,7 +14,13 @@
these operations to take place, and has two concrete
remember-me implementations. One uses hashing to preserve the security of
cookie-based tokens and the other uses a database or other persistent storage
- mechanism to store the generated tokens.
+ mechanism to store the generated tokens.
+
+ Note that both implemementations require a UserDetailsService.
+ If you are using an authentication provider which doesn't use a UserDetailsService
+ (for example, the LDAP provider) then it won't work unless you also have a UserDetailsService
+ bean in your application context.
+
@@ -52,10 +58,9 @@
]]>
It is automatically enabled for you if you are using the auto-config setting.
- Note that remember-me requires a UserDetailsService. If you are using an authentication
- provider which doesn't use a UserDetailsService (for example, the LDAP provider) then it won't work
- unless you also have a UserDetailsService bean in your application context. If you have more than one,
- you need to specify which one should be used with the user-service-ref attribute.
+ The UserDetailsService will normally be selected automatically. If you have more than one in
+ your application context, you need to specify which one should be used with the user-service-ref attribute,
+ where the value is the name of your UserDetailsService bean.
@@ -78,7 +83,7 @@
create table persistent_logins (username varchar(64) not null, series varchar(64) primary key, token varchar(64) not null, last_used timestamp not null)
-
+