authentication - How to disable LDAP users by default in JasperServer? -
i have jasperserver 6.4.0 ldap authentication. looking possibility disable new ldap users default restricting access. users must approved , enabled manually admin.
now users created after first logon default role role_user.
is possible? whether there property example in externalusersetupprocessor
?
applicationcontext-externalauth-ldap.xml
<beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/xmlschema-instance" xsi:schemalocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd"> <!-- ############ ldap authentication ############ --> <bean id="proxyauthenticationprocessingfilter" class="com.jaspersoft.jasperserver.api.security.encryptionauthenticationprocessingfilter" parent="authenticationprocessingfilter"> <property name="authenticationmanager"> <ref local="ldapauthenticationmanager"/> </property> <property name="authenticationsuccesshandler" ref="externalauthsuccesshandler" /> </bean> <bean id="proxyauthenticationsoapprocessingfilter" class="com.jaspersoft.jasperserver.api.security.externalauth.defaultauthenticationsoapprocessingfilter"> <property name="authenticationmanager" ref="ldapauthenticationmanager"/> <property name="authenticationsuccesshandler" ref="externalauthsuccesshandler" /> <property name="filterprocessesurl" value="/services"/> </bean> <bean id="proxyauthenticationrestprocessingfilter" class="com.jaspersoft.jasperserver.api.security.externalauth.defaultauthenticationrestprocessingfilter"> <property name="authenticationmanager"> <ref local="ldapauthenticationmanager"/> </property> <property name="authenticationsuccesshandler" ref="externalauthsuccesshandler" /> <property name="filterprocessesurl" value="/rest/login"/> </bean> <bean id="proxyrequestparameterauthenticationfilter" class="com.jaspersoft.jasperserver.war.util.externalrequestparameterauthenticationfilter" parent="requestparameterauthenticationfilter"> <property name="authenticationmanager"> <ref local="ldapauthenticationmanager"/> </property> <property name="externaldatasynchronizer" ref="externaldatasynchronizer"/> </bean> <bean id="externalauthsuccesshandler" class="com.jaspersoft.jasperserver.api.security.externalauth.jrsexternalauthenticationsuccesshandler" parent="successhandler"> <property name="externaldatasynchronizer"> <ref local="externaldatasynchronizer"/> </property> </bean> <bean id="proxybasicprocessingfilter" class="com.jaspersoft.jasperserver.api.security.externalauth.externalauthbasicprocessingfilter" parent="basicprocessingfilter"> <property name="authenticationmanager" ref="ldapauthenticationmanager"/> <property name="externaldatasynchronizer" ref="externaldatasynchronizer"/> </bean> <bean id="ldapauthenticationmanager" class="com.jaspersoft.jasperserver.api.security.externalauth.wrappers.spring.jsprovidermanager"> <property name="providers"> <list> <ref local="ldapauthenticationprovider"/> <ref bean="${bean.daoauthenticationprovider}"/> </list> </property> </bean> <bean id="ldapauthenticationprovider" class="com.jaspersoft.jasperserver.api.security.externalauth.wrappers.spring.ldap.jsldapauthenticationprovider"> <constructor-arg> <bean class="com.jaspersoft.jasperserver.api.security.externalauth.wrappers.spring.ldap.jsbindauthenticator"> <constructor-arg><ref local="ldapcontextsource"/></constructor-arg> <property name="usersearch" ref="usersearch"/> </bean> </constructor-arg> </bean> <bean id="usersearch" class="com.jaspersoft.jasperserver.api.security.externalauth.wrappers.spring.ldap.jsfilterbasedldapusersearch"> <constructor-arg index="0"><value></value></constructor-arg> <constructor-arg index="1"><value>(samaccountname={0})</value></constructor-arg> <constructor-arg index="2"><ref local="ldapcontextsource"/></constructor-arg> <property name="searchsubtree"><value>true</value></property> </bean> <bean id="ldapcontextsource" class="com.jaspersoft.jasperserver.api.security.externalauth.ldap.jsldapcontextsource"> <constructor-arg value="ldap://ad-server:389/dc=domain,dc=local"/> <property name="userdn" value="cn=ad-user,dc=domain,dc=local"/> <property name="password" value="******"/> </bean> <!-- ############ ldap authentication ############ --> <!-- ############ jrs synchronizer ############ --> <bean id="externaldatasynchronizer" class="com.jaspersoft.jasperserver.api.security.externalauth.externaldatasynchronizerimpl"> <property name="externaluserprocessors"> <list> <ref local="externalusersetupprocessor"/> </list> </property> </bean> <bean id="abstractexternalprocessor" class="com.jaspersoft.jasperserver.api.security.externalauth.processors.abstractexternaluserprocessor" abstract="true"> <property name="repositoryservice" ref="${bean.repositoryservice}"/> <property name="userauthorityservice" ref="${bean.userauthorityservice}"/> <property name="tenantservice" ref="${bean.tenantservice}"/> <property name="profileattributeservice" ref="profileattributeservice"/> <property name="objectpermissionservice" ref="objectpermissionservice"/> </bean> <bean id="externalusersetupprocessor" class="com.jaspersoft.jasperserver.api.security.externalauth.processors.externalusersetupprocessor" parent="abstractexternalprocessor"> <property name="userauthorityservice"> <ref bean="${bean.internaluserauthorityservice}"/> </property> <property name="defaultinternalroles"> <list> <value>role_user</value> </list> </property> </bean>
Comments
Post a Comment