diff --git a/ldap/src/main/java/org/springframework/security/ldap/userdetails/DefaultLdapAuthoritiesPopulator.java b/ldap/src/main/java/org/springframework/security/ldap/userdetails/DefaultLdapAuthoritiesPopulator.java index 7bb89f66e5..fcd30a8a91 100644 --- a/ldap/src/main/java/org/springframework/security/ldap/userdetails/DefaultLdapAuthoritiesPopulator.java +++ b/ldap/src/main/java/org/springframework/security/ldap/userdetails/DefaultLdapAuthoritiesPopulator.java @@ -30,7 +30,6 @@ import javax.naming.directory.SearchControls; import java.util.ArrayList; import java.util.Collection; -import java.util.Collections; import java.util.HashSet; import java.util.List; import java.util.Set; @@ -46,13 +45,13 @@ import java.util.Set; * that they should be assigned that role. The following LDIF sample has the groups stored * under the DN ou=groups,dc=springframework,dc=org and a group called * "developers" with "ben" and "luke" as members: - * + * *
* dn: ou=groups,dc=springframework,dc=org * objectClass: top * objectClass: organizationalUnit * ou: groups - * + * * dn: cn=developers,ou=groups,dc=springframework,dc=org * objectClass: groupOfNames * objectClass: top @@ -73,20 +72,20 @@ import java.util.Set; ** The configuration below shows how the group search might be performed with the above * schema. - * + * *
* <bean id="ldapAuthoritiesPopulator" - * class="org.springframework.security.authentication.ldap.populator.DefaultLdapAuthoritiesPopulator"> + * class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator"> * <constructor-arg ref="contextSource"/> * <constructor-arg value="ou=groups"/> * <property name="groupRoleAttribute" value="ou"/> * <!-- the following properties are shown with their default values --> - * <property name="searchSubTree" value="false"/> + * <property name="searchSubtree" value="false"/> * <property name="rolePrefix" value="ROLE_"/> * <property name="convertToUpperCase" value="true"/> * </bean> *- * + * * A search for roles for user "uid=ben,ou=people,dc=springframework,dc=org" would return * the single granted authority "ROLE_DEVELOPER". *