Content Comparison

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
  xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
  xmlns:sec="http://www.springframework.org/schema/security"
  xsi:schemaLocation="http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security.xsd
    http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
    http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context-3.2.xsd">

  <!-- ThisConfiguration configuration uses SPNEGO by default -->
  <sec:http use-expressions="true" entry-point-ref="spnegoEntryPoint" >
    <sec:intercept-url pattern="/login*" access="permitAll" />
    <sec:intercept-url pattern="/secure/login/**" access="permitAll" />
    <sec:intercept-url pattern="/security/**" access="IS_AUTHENTICATED_FULLYpermitAll" />
    <sec:intercept-url pattern="/**" access="IS_AUTHENTICATED_FULLYauthenticated" />
    <sec:custom-filter ref="spnegoAuthenticationProcessingFilter"
      position="BASIC_AUTH_FILTER" />
    <sec:form-login login-page="/login.html" default-target-url="/index.html"/>
  </sec:http>

  <!-- Spnego Kerberos configuration -->
  <bean id="spnegoEntryPoint"     class="org.springframework.security.extensions.kerberos.web.authentication.SpnegoEntryPoint" />

  <bean id="spnegoAuthenticationProcessingFilter"
    class="org.springframework.security.extensions.kerberos.web.authentication.SpnegoAuthenticationProcessingFilter">
    <property name="authenticationManager" ref="authenticationManager" />
  </bean>

  <sec:authentication-manager alias="authenticationManager">
	<!-- Used with SPNEGO -->
    <sec:authentication-provider ref="kerberosServiceAuthenticationProvider" />
  </sec:authentication-manager>
  
  <bean id="kerberosServiceAuthenticationProvider"
    class="org.springframework.security.extensionskerberos.kerberosauthentication.KerberosServiceAuthenticationProvider">
    <property name="ticketValidator">
      <bean
        class="org.springframework.security.kerberos.extensionsauthentication.kerberossun.SunJaasKerberosTicketValidator">
        <property name="servicePrincipal" value="HTTP/example.org@EXAMPLE" />
        <!-- Setting keyTabLocation to a classpath resource will most likely not work in a Java EE application Server -->
    
   <!-- See the Javadoc for more information on that -->
        <property name="keyTabLocation" value="weave.keytab" />
        <property name="debug" value="true" />
      </bean>
    </property>
    <property name="userDetailsService" ref="userDetailsServiceldapUserDetailsService" />
  </bean>


  
<!-- LDAP -->
This bean definition enables a very detailed Kerberos logging -->
  <bean<bean id="ldapUserDetailsService" class="org.springframework.security.ldap.userdetails.LdapUserDetailsService">
    <constructor-arg>
      <bean class="org.springframework.security.extensionsldap.kerberos.GlobalSunJaasKerberosConfig">search.FilterBasedLdapUserSearch">
        <constructor-arg index="0" value="dc=example,dc=org"/>
      <property name  <constructor-arg index="debug1" value="true(| (userPrincipalName={0}) (sAMAccountName={0}))"/>
        <constructor-arg index="2" ref="ldapContextSource" />
      </bean>
    </constructor-arg>
    <constructor-arg>
      <bean id="userDetailsServiceldapAuthoritiesPopulator" class="org.springframework.security.coreldap.userdetails.memory.InMemoryDaoImplDefaultLdapAuthoritiesPopulator">
        <property<constructor-arg nameref="userPropertiesldapContextSource"/>
        <constructor-arg value="CN=Users,DC=example,DC=org"/>
    <bean class="org.springframework.beans.factory.config.PropertiesFactoryBean">    <property name="groupRoleAttribute" value="cn"/>
        <property name="searchSubtree" value="true" />
        <property name="locationgroupSearchFilter" value="users.properties"(member={0})" />
       </bean>
    </bean>constructor-arg>
  </bean>

  <sec:ldap-server  </property>
  </bean>
</beans>id="ldapContextSource" url="ldap://example.org:389/" manager-dn="CN=Administrator,CN=Users,DC=example,DC=org" manager-password="yourPassword" />

</beans>