CAS与LDAP整合的实现.docVIP

在做SOA项目或者单点登录的时候，用户目录往往都是通过LDAP来完成的，那么CAS与LDAP整合的问题是必须要做的，这里采用OpenLDAP和CAS来记录一下自己的配置过程 下载CAS Server 下载CAS Client 下载OpenLDAP 都安装完成配置完成后，下面做CAS+OpenLDAP整合（至于配置过程，见我的另一篇博客文章：【推荐】单点登录的实现 ），在cas的web项目下打开：deployerConfigContext.xml，配置文件修改如下： Xml代码 ? ?xml?version=1.0?encoding=UTF-8??? !DOCTYPE?beans?PUBLIC??-//SPRING//DTD?BEAN//EN?/dtd/spring-beans.dtd?? !-- ?? ????|?deployerConfigContext.xml?centralizes?into?one?file?some?of?the?declarative?configuration?that ?? ????|?all?CAS?deployers?will?need?to?modify. ?? ????| ?? ????|?This?file?declares?some?of?the?Spring-managed?JavaBeans?that?make?up?a?CAS?deployment.?? ?? ????|?The?beans?declared?in?this?file?are?instantiated?at?context?initialization?time?by?the?Spring? ?? ????|?ContextLoaderListener?declared?in?web.xml.??It?finds?this?file?because?this ?? ????|?file?is?among?those?declared?in?the?context?parameter?contextConfigLocation. ?? ????| ?? ????|?By?far?the?most?common?change?you?will?need?to?make?in?this?file?is?to?change?the?last?bean ?? ????|?declaration?to?replace?the?default?SimpleTestUsernamePasswordAuthenticationHandler?with ?? ????|?one?implementing?your?approach?for?authenticating?usernames?and?passwords. ?? ????+--?? beans?? ????!-- ?? ????????|?This?bean?declares?our?AuthenticationManager.??The?CentralAuthenticationService?service?bean ?? ????????|?declared?in?applicationContext.xml?picks?up?this?AuthenticationManager?by?reference?to?its?id,? ?? ????????|?authenticationManager.??Most?deployers?will?be?able?to?use?the?default?AuthenticationManager ?? ????????|?implementation?and?so?do?not?need?to?change?the?class?of?this?bean.??We?include?the?whole ?? ????????|?AuthenticationManager?here?in?the?userConfigContext.xml?so?that?you?can?see?the?things?you?will ?? ????????|?need?to?change?in?context. ?? ????????+--?? ????bean?id=authenticationManager?? ????????class=org.jasig.cas.authentication.AuthenticationManagerImpl?? ????????!-- ?? ????????????|?This?is?the?List?of?CredentialToPrincipalResolvers?that?identify