Browse Source

RBAC: LDAP: Support group search filter filter alongside with base

Roman Zabaluev 2 năm trước cách đây
mục cha
commit
32e8d3cba3

+ 1 - 0
kafka-ui-api/src/main/java/com/provectus/kafka/ui/config/auth/LdapProperties.java

@@ -15,6 +15,7 @@ public class LdapProperties {
   private String userFilterSearchBase;
   private String userFilterSearchFilter;
   private String groupFilterSearchBase;
+  private String groupFilterSearchFilter;
 
   @Value("${oauth2.ldap.activeDirectory:false}")
   private boolean isActiveDirectory;

+ 1 - 0
kafka-ui-api/src/main/java/com/provectus/kafka/ui/config/auth/LdapSecurityConfig.java

@@ -99,6 +99,7 @@ public class LdapSecurityConfig {
   @Primary
   public LdapAuthoritiesPopulator ldapAuthoritiesPopulator(BaseLdapPathContextSource contextSource) {
     var authoritiesPopulator = new DefaultLdapAuthoritiesPopulator(contextSource, props.getGroupFilterSearchBase());
+    authoritiesPopulator.setGroupSearchFilter(props.getGroupFilterSearchFilter());
     authoritiesPopulator.setRolePrefix("");
     authoritiesPopulator.setConvertToUpperCase(false);
     return authoritiesPopulator;