I have a problem to login in OpenKm, though the OpenKM ldap groups exists .
Over the frontend in openKM I get all the user from my ldap.
But it was not possible to modify the OpenKM.xml in the right way:
When I added the line <beans:property name="defaultRole" value="ROLE_USER"
the user can login
But then, I haven't any admin User
Here my OpenKm.xml
Over the frontend in openKM I get all the user from my ldap.
But it was not possible to modify the OpenKM.xml in the right way:
When I added the line <beans:property name="defaultRole" value="ROLE_USER"
the user can login
But then, I haven't any admin User
Here my OpenKm.xml
Code: Select all
I will hope someone can help me <security:authentication-manager alias="authenticationManager">
<security:authentication-provider ref="ldapAuthProvider" />
</security:authentication-manager>
<beans:bean id="contextSource" class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
<beans:constructor-arg value="ldaps://IP:636/ou=yy,o=yyyy"/>
<beans:property name="userDn" value="cn=yyy,ou=admin,ou=yy,o=yyyy"/>
<beans:property name="password" value="xx"/>
</beans:bean>
<beans:bean id="ldapAuthProvider" class="org.springframework.security.ldap.authentication.LdapAuthenticationProvider">
<beans:constructor-arg>
<beans:bean class="org.springframework.security.ldap.authentication.BindAuthenticator">
<beans:constructor-arg ref="contextSource"/>
<beans:property name="userSearch" ref="userSearch"></beans:property>
</beans:bean>
</beans:constructor-arg>
<beans:constructor-arg>
<beans:bean class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator">
<beans:constructor-arg ref="contextSource"/>
<beans:constructor-arg value="ou=groups"/>
<beans:property name="groupSearchFilter" value="objectclass=posixGroup"/>
<beans:property name="groupRoleAttribute" value="cn"/>
<beans:property name="searchSubtree" value="true" />
<beans:property name="convertToUpperCase" value="true" />
<beans:property name="rolePrefix" value="" />
</beans:bean>
</beans:constructor-arg>
</beans:bean>
<beans:bean id="userSearch" class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch">
<beans:constructor-arg index="0" value="ou=users" />
<beans:constructor-arg index="1" value="(&(uid={0})(|(groupMembership=cn=ROLE_USER,ou=groups,ou=yy,o=yyyy)(groupMemberShip=cn=ROLE_ADMIN,ou=groups,ou=yy,o=yyyy)))" />
<beans:constructor-arg index="2" ref="contextSource" />
<beans:property name="searchSubtree" value="true" />
</beans:bean>