diff --git a/core/src/main/java/org/acegisecurity/providers/ldap/populator/DefaultLdapAuthoritiesPopulator.java b/core/src/main/java/org/acegisecurity/providers/ldap/populator/DefaultLdapAuthoritiesPopulator.java index 196c34921f..cadfdc9ac6 100644 --- a/core/src/main/java/org/acegisecurity/providers/ldap/populator/DefaultLdapAuthoritiesPopulator.java +++ b/core/src/main/java/org/acegisecurity/providers/ldap/populator/DefaultLdapAuthoritiesPopulator.java @@ -40,23 +40,19 @@ import javax.naming.directory.SearchControls; /** * The default strategy for obtaining user role information from the directory.
It obtains roles by - *
If the userRolesAttributes property is set, any matching attributes amongst those retrieved for the - * user will have their values added to the list of roles. If userRolesAttributes is null, no attributes will - * be mapped to roles.
*A typical group search scenario would be where each group/role is specified using the groupOfNames * (or groupOfUniqueNames) LDAP objectClass and the user's DN is listed in the member (or * uniqueMember) attribute to indicate that they should be assigned that role. The following LDIF sample has * the groups stored under the DN ou=groups,dc=acegisecurity,dc=org and a group called "developers" with - * "ben" and "marissa" as members:
dn: ou=groups,dc=acegisecurity,dc=orgobjectClass: top + * "ben" and "marissa" as members: + *+ * *dn: ou=groups,dc=acegisecurity,dc=orgobjectClass: top * objectClass: organizationalUnitou: groupsdn: cn=developers,ou=groups,dc=acegisecurity,dc=org * objectClass: groupOfNamesobjectClass: topcn: developersdescription: Acegi Security Developers * member: uid=ben,ou=people,dc=acegisecurity,dc=orgmember: uid=marissa,ou=people,dc=acegisecurity,dc=orgou: developer - *+ *
The group search is performed within a DN specified by the groupSearchBase property, which should * be relative to the root DN of its InitialDirContextFactory. If the search base is null, group searching is * disabled. The filter used in the search is defined by the groupSearchFilter property, with the filter