custom in shiro.ini

2016-08-22 Thread Gabriel Titerlea
Hi, What is the "custom" variable in the shiro.ini? I am trying to use buji-pac4j and I see that in a demo application [1] it uses a "custom" variable. Where is this variable defined? What is it used for? I see that it is used like this: custom:$customAuthorizer. And the variable customAuthor

Re: custom in shiro.ini

2016-08-22 Thread Brian Demers
In this case both 'customAuthorizer' and 'config' define which class is used. After 'config' is instantiated config.setAuthorizers(Map) would be called. In this case the map contains two entries with keys 'admin' and 'custom'. (with values being the instances represented by '$requireRoleAdmin' an

Re: custom in shiro.ini

2016-08-22 Thread Gabriel Titerlea
Yes, perfect explanation. Thank you! On 22-Aug-16 17:05, Brian Demers wrote: In this case both 'customAuthorizer' and 'config' define which class is used. After 'config' is instantiated config.setAuthorizers(Map) would be called. In this case the map contains two entries with keys 'admin' and

Re: Anonymous binding issue while searching LDAP roles

2016-08-22 Thread Brian Demers
That is how it should work if you do not set the system user/password. Can you confirm that your configuration does not set them ? On Mon, Aug 22, 2016 at 12:17 AM, vlhf刘海峰 wrote: > Hi all, > > As some AD forbid search operation with anonymous binding, > org.apache.shiro.realm.activedirectory.Act

Re: Anonymous binding issue while searching LDAP roles

2016-08-22 Thread vlhf刘海峰
I didn’t give any manager account. And I doubt that without manager account it works that way. I’ve browsed the source code, doGetAuthenticationInfo and doGetAuthorizationInfo are two relatively independent processes, they don’t use the same ldapContext. 在 16/8/22 下午10:15,“Brian Demers” 写入:

Re: Anonymous binding issue while searching LDAP roles

2016-08-22 Thread Brian Demers
Ahh, I understand now. Take a look at this thread: http://shiro-user.582556.n2.nabble.com/How-to-set-a-custom-principal-object-td1090270.html You could possibly build and attach an AuthorizationInfo object to your principal when the user logs in. There are a couple scenarios that this would proba