Spring Boot Security/LDAP direct bind with user credentials - spring-boot

Question

Is there a way to authenticate a user with Spring Boot Security/LDAP using the credentials instead of first binding with some functional credentials and then trying to bind the user?
I want to not need to use managerDn and managerPassword like in:
auth.ldapAuthentication()
.userSearchBase("")
.userSearchFilter("(samAccountName={0})")
.contextSource()
.url("ldap://<url>/<root>")
.managerDn("functionUser")
.managerPassword("password")

Answer 1

In my application, I implemented a custom UsernamePasswordAuthenticationProvider to authenticate a user against my own database or a remote LDAP depending on a flag set in the user record.
To authenticate against the remote LDAP, I used the code below. It worked for me, perhaps, it will work for you too :).
protected void validateCredentialsAgainstActiveDirectory(UserDetails userDetails, UsernamePasswordAuthenticationToken authentication) {
try {
LdapConfiguration config = ...;
/*
* We will create a new LDAP connection on the fly each time an AD user logs in.
* Hence we must disable caching properties to avoid NullPointerException later
* in AbstractContextSource.getAuthenticatedEnv().
*
*/
DefaultSpringSecurityContextSource contextSource = new DefaultSpringSecurityContextSource(config.getUrl());
contextSource.setCacheEnvironmentProperties(false);
// Authenticate the user against the pre-configured userDnTemplate
BindAuthenticator bindAuthenticator = new BindAuthenticator(contextSource);
bindAuthenticator.setUserDnPatterns(new String[] { config.getUserDnTemplate() });
bindAuthenticator.authenticate(authentication);
} catch (BadCredentialsException ex) {
// Catch downstream exception to return our own message
throw new BadCredentialsException(SpringUtils.getMessage("security.login.error.bad-credentials"));
}
}
FYI, LdapConfiguration is my own custom class for reading configurations from a .yml file. In this file, I configured the url and the DN template of the LDAP server as following. You need to change that to fit your environment.
url: ldap://10.10.10.231:10389/dc=mycompany,dc=com
userDnTemplate: uid={0},ou=people
Don't forget to import the necessary dependencies in your project too.
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-ldap</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.ldap</groupId>
<artifactId>spring-ldap-core</artifactId>
</dependency>