[JAMES-1569] LDAP group authentication filter to authenticate users by LDAP group

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 3.0.0-beta5
• Fix Version/s: 3.0.0-beta5
• Environment: issue is not platform dependent.
• Assignee: Eric Charles
• Reporter: Robert Munn
• Created: 05/Mar/15 09:29
• Updated: 08/Mar/15 16:42
• Resolved: 08/Mar/15 16:42

Description

I created a small filter in the LDAP authentication system to allow user authentication to be filtered by additional criteria in a filter attribute of the repository in the xml config.

<repository name="LocalUsers" class="org.apache.james.user.ldap.ReadOnlyUsersLDAPRepository" ldapHost="<host>" principal="<authuser>" credentials="<password>" userBase="<ou>" userObjectClass="<object class, e.g. inetOrgPerson>" userIdAttribute="<userid attribute name, e.g. cn>" filter="(<filter>)">

example:

<repository name="LocalUsers" class="org.apache.james.user.ldap.ReadOnlyUsersLDAPRepository" ldapHost="ldaps://mail.domain.com:636" principal="cn=admin,dc=domain,dc=com" credentials="password" userBase="ou=people,dc=domain,dc=com" userObjectClass="inetOrgPerson" userIdAttribute="cn" filter="(memberOf=CN=EmailUsers,ou=groups,DC=domain,DC=com)">