Spring LDAP security 3

[Luis Parente]

Hi,

I have the following configuration of LDAP:

<!-- Authentication Provider -->

		<!-- Context Source -->
		<beans:bean id="contextSource"
        	   class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
 			 	<beans:constructor-arg value="ldap://srvldap:389/"/>
 			 	<beans:property name="base" value="OU=ASPHERIA,DC=groupe,DC=aspheria,DC=priv" />
				<beans:property name="userDn" value="ASPHERIA\lparente"/>
				<beans:property name="password" value="lP@12345"/>
		</beans:bean>

		<beans:bean id="ldapAuthProvider" class="org.springframework.security.ldap.authentication.LdapAuthenticationProvider">
		  <beans:constructor-arg>
		    <beans:bean class="org.springframework.security.ldap.authentication.BindAuthenticator">
		      <beans:constructor-arg ref="contextSource"/>
		      <beans:property name="userSearch">
		      	<beans:ref bean="userSearch"/>
		      </beans:property>
		    </beans:bean>
		  </beans:constructor-arg>
		  <beans:constructor-arg>
		    <beans:bean class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator">
		      <beans:constructor-arg ref="contextSource"/>
		      <beans:constructor-arg value="OU=ASPHERIA"/>
		      <beans:property name="groupRoleAttribute" value="ou"/>
		    </beans:bean>
		  </beans:constructor-arg>
		</beans:bean>	
	
		<!-- User Source -->
		<!-- <beans:bean id="userSearch"
    		  class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch">
  			  <beans:constructor-arg index="0" value=""/>
  			  <beans:constructor-arg index="1" value="(uid={0})"/>
  			  <beans:constructor-arg index="2" ref="contextSource" />
		</beans:bean>-->
		
		 <beans:bean id="userSearch" class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch">  
          	<beans:constructor-arg index="0" value="OU=ASPHERIA,DC=groupe,DC=aspheria,DC=priv" />  
          	<beans:constructor-arg index="1" value="(sAMAccountName={0})" />  
            <beans:constructor-arg index="2" ref="contextSource" />  
            <beans:property name="searchSubtree" value="true" />  
        </beans:bean>  

But with this configuration have the exception in InitialDirContaxt.class:

    public NamingEnumeration<SearchResult>
	search(Name name,
	       String filterExpr,
	       Object[] filterArgs,
	       SearchControls cons)
	throws NamingException
    {
	return getURLOrDefaultInitDirCtx(name).search(name, filterExpr, 
						      filterArgs, cons);
    }

javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of:
	'OU=Aspheria,DC=groupe,DC=aspheria,DC=priv'

I have read at this url : http://forum.springsource.org/showthread.php?71203-Active-Directory-LDAP-Authentication-LDAP-Error-32


In AbstractContextSource (parent of LdapContextSource), the Javadoc for the setBase() method says the following:
"Set the base suffix from which all operations should origin. If a base suffix is set, you will not have to (and, indeed, must not) specify the full distinguished names in any operations performed.".
Since you specify the full DN for the userDN, hence you must not specify the base.


I need some help please.


Thanks in advance.