/
Security STS LDAP Claims Handler

Security STS LDAP Claims Handler

Owned by Shaun Morris
Jun 29, 2013

Description

The DDF Security STS LDAP Claims Handler bundle adds functionality to the STS server that allows it to retrieve claims from an LDAP server. Additionally, it also adds mappings for the LDAP attributes to the STS SAML claims.

Configuration

Installation

This bundle is not installed by default and can be added by installing the security-sts-server feature.

Settings

Settings can be found in the webconsole under Configuration -> Security STS LDAP and Roles Claims Handler.

Configuration NameDefault ValueAdditional Information
LDAP URLldap://localhost:1389 
LDAP Bind User DNcn=admin 
LDAP Bind User PasswordsecretThis password value is encrypted by default using the Security Encryption application
LDAP Username Attributeuid 
LDAP Base User DNou=users,dc=example,dc=com 
LDAP Base Group DNou=groups,dc=example,dc=com 
User Attribute Map Fileetc/ws-security/attributeMap.propertiesProperties file that contains mappings from Claim=LDAP attribute.

Implementation Details

Imported Services

Registered InterfaceAvailabilityMultiple
ddf.security.encryption.EncryptionServiceoptionalfalse

Exported Services 

Registered InterfaceImplementation ClassProperties Set

org.apache.cxf.sts.claims.ClaimsHandler

ddf.security.sts.claimsHandler.LdapClaimsHandler

Properties from the settings

org.apache.cxf.sts.claims.ClaimsHandler

ddf.security.sts.claimsHandler.RoleClaimsHandler

Properties from the settings