org.opendaylight.aaa.shiro.realm.ODLActiveDirectoryRealm Maven / Gradle / Ivy
/*
* Copyright (c) 2016, 2017 Brocade Communications Systems, Inc. and others. All rights reserved.
*
* This program and the accompanying materials are made available under the
* terms of the Eclipse Public License v1.0 which accompanies this distribution,
* and is available at http://www.eclipse.org/legal/epl-v10.html
*/
package org.opendaylight.aaa.shiro.realm;
import org.apache.shiro.realm.activedirectory.ActiveDirectoryRealm;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
/**
* Wraps the generic ActiveDirectoryRealm
provided by Shiro. This
* allows for enhanced logging as well as isolation of all realms in a single
* package, org.opendaylightaaa.shiro.realm
, which enables easier
* import by consuming servlets.
*
*
* To enable the ODLActiveDirectoryRealm
, modify the realms
* declaration in etc/shiro.ini
as follows:
* adRealm = ODLActiveDirectoryRealm
* adRealm.searchBase = "CN=Users,DC=example,DC=com"
* adRealm.systemUsername = [email protected]
* adRealm.systemPassword = adpassword
* adRealm.url = ldaps://adserver:636
* adRealm.groupRolesMap = "CN=sysadmin,CN=Users,DC=example,DC=com":"sysadmin",\
* "CN=unprivileged,CN=Users,DC=example,DC=com":"unprivileged"
* ...
* securityManager.realms = $tokenAuthRealm, $adRealm
*/
public class ODLActiveDirectoryRealm extends ActiveDirectoryRealm {
private static final Logger LOG = LoggerFactory.getLogger(ODLActiveDirectoryRealm.class);
public ODLActiveDirectoryRealm() {
LOG.info("ODLActiveDirectoryRealm created");
}
}