SpringLDAP 简单的用户登陆认证

今天主要实验了下用户的登录验证，在PersonDaoImpl类中增加了验证方法

具体代码：还是PersonDaoImpl类

1. public class PersonDaoImpl implements PersonDao { 2. 3. private LdapTemplate ldapTemplate; 4. 5. public static void main(String[] args) { 6. ApplicationContext cxt = new ClassPathXmlApplicationContext( 7. "applicationContext.xml"); 8. PersonDaoImpl personDao = (PersonDaoImpl) cxt.getBean("personDao"); 9. 10. // List users = personDao.getAllPersonNames(); 11. // System.out.println(users.size()); 12. String userName = "10010a"; 13. String passWord = "2039729"; 14. String userDn = personDao.getDnForUser(userName); 15. System.out.println("userDn:" + userDn); 16. boolean bl=personDao.authenticate(userDn, passWord); 17. System.out.println("验证结果:" + bl); 18. 19. 20. 21. } 22. 23. /** 24. * 根据CN属性取得用户DN（当然你可以根据自己情况换成别的属性来操作） 25. * @param cn 26. * @return 27. */ 28. private String getDnForUser(String cn) { 29. EqualsFilter f = new EqualsFilter("cn", cn); 30. List result = ldapTemplate.search(DistinguishedName.EMPTY_PATH, f 31. .toString(), new AbstractContextMapper() { 32. protected Object doMapFromContext(DirContextOperations ctx) { 33. return ctx.getNameInNamespace(); 34. } 35. }); 36. if (result.size() != 1) { 37. throw new RuntimeException("User not found or not unique"); 38. } 39. return (String) result.get(0); 40. } 41. /** 42. * 根据用户名密码验证 43. * @param userDn 44. * @param credentials 45. * @return 46. */ 47. public boolean authenticate(String userDn, String credentials) { 48. DirContext ctx = null; 49. try { 50. ctx = ldapTemplate.getContextSource().getContext(userDn, 51. credentials); 52. return true; 53. } catch (Exception e) { 54. // Contextcreationfailed-authenticationdidnotsucceed 55. 56. return false; 57. } finally { 58. // ItisimperativethatthecreatedDirContextinstanceisalwaysclosed 59. LdapUtils.closeContext(ctx); 60. } 61. }

 备注：我们注意到在用用户名密码验证前，我先去目录中取到了它的DN，这是因为getContext方法中参数userDn必须是一个完整的全路径DN。否则它不知道去哪找这个用户，而且登录的用户也不一定都统一放在一个目录路径下