diff --git a/src/docbkx/namespace-config.xml b/src/docbkx/namespace-config.xml index b3e73272b1..6053a288bc 100644 --- a/src/docbkx/namespace-config.xml +++ b/src/docbkx/namespace-config.xml @@ -115,7 +115,7 @@
- Getting Started with Security Namespace Cofiguration + Getting Started with Security Namespace Configuration In this section, we'll look at how you can build up a namespace configuration to use some of the main features of the framework. Let's assume you initially want to get up and running as quickly as possible @@ -229,7 +229,18 @@ These other elements are responsible for setting up form-login, anonymous authentication, basic authentication, logout handling and remember-me services respectively. They each have attributes which can be used to alter their behaviour. + + + <literal>auto-config</literal> Requires a UserDetailsService + An error can occur when using auto-config without a UserDetailsService in + your application context (for example, if you are using LDAP authentication). + This is because remember-me is automatically enabled when auto-config="true" and it requires + an authentication mechanism which uses a UserDetailsService to function (see + the Remember-me chapter for more details). If you have an error caused + by a missing UserDetailsService then try removing the auto-config + setting (and any remember-me setting you might have). +
Form and Basic Login Options @@ -324,6 +335,11 @@
Advanced Web Features + +
+ Remember-Me Authentication + See the separate Remember-Me chapter for information on remember-me namespace configuration. +
Adding HTTP/HTTPS Channel Security diff --git a/src/docbkx/remember-me-authentication.xml b/src/docbkx/remember-me-authentication.xml index a68ca8b1f0..72f3c10b5a 100644 --- a/src/docbkx/remember-me-authentication.xml +++ b/src/docbkx/remember-me-authentication.xml @@ -14,7 +14,13 @@ these operations to take place, and has two concrete remember-me implementations. One uses hashing to preserve the security of cookie-based tokens and the other uses a database or other persistent storage - mechanism to store the generated tokens. + mechanism to store the generated tokens. + + Note that both implemementations require a UserDetailsService. + If you are using an authentication provider which doesn't use a UserDetailsService + (for example, the LDAP provider) then it won't work unless you also have a UserDetailsService + bean in your application context. +
@@ -52,10 +58,9 @@ ]]> It is automatically enabled for you if you are using the auto-config setting. - Note that remember-me requires a UserDetailsService. If you are using an authentication - provider which doesn't use a UserDetailsService (for example, the LDAP provider) then it won't work - unless you also have a UserDetailsService bean in your application context. If you have more than one, - you need to specify which one should be used with the user-service-ref attribute. + The UserDetailsService will normally be selected automatically. If you have more than one in + your application context, you need to specify which one should be used with the user-service-ref attribute, + where the value is the name of your UserDetailsService bean.
@@ -78,7 +83,7 @@ create table persistent_logins (username varchar(64) not null, series varchar(64) primary key, token varchar(64) not null, last_used timestamp not null) - +