import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
/**
 * Return the DirContextOperations containing the user's information
 *
 * @param dn full DN of the user to search for.
 *
 * @return An DirContextOperations object containing the details of the located user's
 * directory entry
 *
 * @throws UsernameNotFoundException if no matching entry is found.
 */
@Override
public DirContextOperations searchForUser(String dn) {
    log.debug("Searching for dn '{}'.", dn);

    SpringSecurityLdapTemplate template = new SpringSecurityLdapTemplate(getContextSource());

    template.setSearchControls(getSearchControls());

    try {
        return template.retrieveEntry(dn, null);
    } catch (IncorrectResultSizeDataAccessException ex) {
        if (ex.getActualSize() == 0) {
            throw new UsernameNotFoundException("User " + dn + " not found in directory.");
        }
        // Search should never return multiple results if properly configured, so just rethrow
        throw ex;
    }
}
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
public String uid2ext(String uid) {
 	String externalIdAttribute = ApplicationProperty.AuthenticationLdapIdAttribute.value();
 	if ("uid".equals(externalIdAttribute)) return uid; // Nothing to translate
     try {
     	
ContextSource source = (ContextSource)SpringApplicationContextHolder.getBean("unitimeLdapContextSource");

String query = ApplicationProperty.AuthenticationLdapLogin2UserId.value();

SpringSecurityLdapTemplate template = new SpringSecurityLdapTemplate(source);
DirContextOperations user = template.retrieveEntry(query.replaceAll("\\{0\\}", uid), new String[] {externalIdAttribute});

return user == null ? null : user.getStringAttribute(externalIdAttribute);

     } catch (Exception e) {
     	sLog.warn("Unable to translate uid to " + externalIdAttribute + ": " + e.getMessage());
     }
     
     return null;
 }
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
public String ext2uid(String externalUserId) {
 	String externalIdAttribute = ApplicationProperty.AuthenticationLdapIdAttribute.value();
 	if ("uid".equals(externalIdAttribute)) return externalUserId; // Nothing to translate
     try {
     	
     	ContextSource source = (ContextSource)SpringApplicationContextHolder.getBean("unitimeLdapContextSource");

String query = ApplicationProperty.AuthenticationLdapUserId2Login.value().replace("%", externalIdAttribute);

SpringSecurityLdapTemplate template = new SpringSecurityLdapTemplate(source);
DirContextOperations user = template.retrieveEntry(query.replaceAll("\\{0\\}", externalIdAttribute), new String[] {"uid"});

return user == null ? null : user.getStringAttribute("uid");

     } catch (Exception e) {
     	sLog.warn("Unable to translate " + externalIdAttribute + " to uid: " + e.getMessage());
     }
     return null;
 }
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
private DirContextOperations searchForUser(DirContext context, String username)
		throws NamingException {
	SearchControls searchControls = new SearchControls();
	searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);

	String bindPrincipal = createBindPrincipalDomainAlias(username);
	String searchRoot = rootDn != null ? rootDn : searchRootFromPrincipal(bindPrincipal);

	try {
		return SpringSecurityLdapTemplate.searchForSingleEntryInternal(context,
				searchControls, searchRoot, searchFilter,
				new Object[] { bindPrincipal });
	}
	catch (IncorrectResultSizeDataAccessException incorrectResults) {
		// Search should never return multiple results if properly configured - just
		// rethrow
		if (incorrectResults.getActualSize() != 0) {
			throw incorrectResults;
		}
		// If we found no results, then the username/password did not match
		UsernameNotFoundException userNameNotFoundException = new UsernameNotFoundException(
				"User " + username + " not found in directory.", incorrectResults);
		throw badCredentials(userNameNotFoundException);
	}
}
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
/**
 * Return the DirContextOperations containing the user's information
 *
 * @param username the kerberos username to search for.
 *
 * @return An DirContextOperations object containing the details of the located user's
 * directory entry
 *
 * @throws UsernameNotFoundException if no matching entry is found.
 */
public DirContextOperations searchForUser(String username) {
    String[] data = username.split("@");
    eq(data.length, 2, () -> new UsernameNotFoundException("Wrong username format for " + username));

    String accountName = data[0];
    String domainName = data[1];

    String[] domainData = domainName.split("\\.");

    String searchBase = Stream.of(domainData)
                              .map(part -> "dc=" + part)
                              .collect(Collectors.joining(","));

    log.debug("Searching for user '{}' in '{}', with user search {}.", accountName, searchBase, this);


    SpringSecurityLdapTemplate template = new SpringSecurityLdapTemplate(getContextSource());

    template.setSearchControls(getSearchControls());

    try {
        return template.searchForSingleEntry(searchBase, getSearchFilter(), new String[] { accountName });

    } catch (IncorrectResultSizeDataAccessException ex) {
        if (ex.getActualSize() == 0) {
            throw new UsernameNotFoundException("User " + username + " not found in directory.");
        }
        // Search should never return multiple results if properly configured, so just rethrow
        throw ex;
    }
}
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
@Override
public UserInfo doLookup(String uid) throws Exception {
	try {
		ContextSource source = (ContextSource)SpringApplicationContextHolder.getBean("unitimeLdapContextSource");
		
		String query = ApplicationProperty.AuthenticationLdapIdentify.value(); 
		String idAttributeName = ApplicationProperty.AuthenticationLdapIdAttribute.value();

		SpringSecurityLdapTemplate template = new SpringSecurityLdapTemplate(source);
		DirContextOperations user = template.retrieveEntry(query.replaceAll("\\{0\\}", uid), new String[] {"uid", idAttributeName, "cn", "givenName", "sn", "mail"});

		if (user == null || user.getStringAttribute(idAttributeName) == null)
			return null;
           
       	UserInfo info = new UserInfo();
       	info.setExternalId(user.getStringAttribute(idAttributeName));
       	
       	info.setUserName(user.getStringAttribute("uid"));
       	if (info.getUserName() == null) info.setUserName(uid);
       	info.setName(user.getStringAttribute("cn"));
       	info.setFirstName(user.getStringAttribute("givenName"));
       	info.setLastName(user.getStringAttribute("sn"));
       	info.setEmail(user.getStringAttribute("mail"));

       	if (info.getEmail() == null) {
           	String email = info.getUserName() + "@";
       		for (String x: user.getNameInNamespace().split(","))
       			if (x.startsWith("dc=")) email += (email.endsWith("@") ? "" : ".") + x.substring(3);
           	if (!email.endsWith("@")) info.setEmail(email);
       	}
       	
       	return info;
	} catch (Exception e) {
		sLog.warn("Lookup for " + uid + " failed: " + e.getMessage());
	}

	return null;
}
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
@Bean
SpringSecurityLdapTemplate springSecurityLdapTemplate() throws Exception {
  DefaultSpringSecurityContextSource contextSource = new DefaultSpringSecurityContextSource(configProps.url);
  contextSource.setUserDn(configProps.managerDn);
  contextSource.setPassword(configProps.managerPassword);
  contextSource.afterPropertiesSet();

  return new SpringSecurityLdapTemplate(contextSource);
}
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
/**
 * {@inheritDoc}
 */
@Override
public DirContextOperations searchForUser(String username) {
    SpringSecurityLdapTemplate template = new SpringSecurityLdapTemplate(
            initialDirContextFactory);
    List<LdapSearchBaseDefinition> searchBaseDefs = userSearchConfig.getSearchBases();
    String[] params = { LdapUtils.escapeLdapSearchFilterValue(username) };
    SearchControls searchControls = new SearchControls();
    template.setSearchControls(searchControls);
    searchControls.setReturningAttributes(userAttributesMapper.getMappedLdapAttributeNames());
    for (LdapSearchBaseDefinition searchBase : searchBaseDefs) {
        searchControls
        .setSearchScope(searchBase.isSearchSubtree() ? SearchControls.SUBTREE_SCOPE
                : SearchControls.ONELEVEL_SCOPE);
        try {
            return template.searchForSingleEntry(searchBase.getSearchBase(), userSearchFilter,
                    params);
        } catch (IncorrectResultSizeDataAccessException e) {
            // ignore no results case to allow checking other search bases
            if (e.getActualSize() != 0) {
                // Search should never return multiple results if properly configured, so just
                // rethrow
                throw e;
            }
        }
    }
    throw new UsernameNotFoundException("User " + username + " not found in directory.");
}
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
@Autowired
public CHUserDetailsService(LdapContextSource contextSource) {
    ldapTemplate = new SpringSecurityLdapTemplate(contextSource);
    SearchControls searchControls = new SearchControls();
    searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);
    ldapTemplate.setSearchControls(searchControls);
}
 

import org.springframework.security.ldap.SpringSecurityLdapTemplate; //导入依赖的package包/类
public UserGroupLdapAuthoritiesPopulator(ContextSource contextSource, String groupSearchBase) {
	super(contextSource, groupSearchBase);
	this.ldapTemplate = new SpringSecurityLdapTemplate(contextSource);
	this.ldapTemplate.setSearchControls(searchControls);
}