topic Re: Spring Boot Activiti Rest + LDAP but without using LDAP authentication in Alfresco Forum

Spring Boot Activiti Rest + LDAP but without using LDAP authentication

sayantan_sinha — Tue, 30 May 2017 21:41:43 GMT

I am new to activiti bpm (5.22.0 version 5.17.0 activiti-rest) and am using spring boot's activiti integration. I have not done much configuration just the basic maven pom dependencies and the standalone app works with basic authentication that Activiti provides out of the box.Now I need to use LDAP

Re: Spring Boot Activiti Rest + LDAP but without using LDAP authentication

gdharley — Wed, 31 May 2017 19:14:44 GMT

<snip>

Per my understanding, Activiti taps into LDAP to store these user info into it's own tables, is that correct? If yes, how would Activiti know what set of users to store? As I do not want all users in our LDAP to be stored by default.

</snip>

The users that are "cached" are based on the LDAP configuration.
Basically you will define the search base (baseDN) and filter (queryUserByUserId) to determine which user to "cache" in the Activiti tables.

As for Authentication. Activiti (Community Edition) uses straight Spring Authentication so you can add your own authentication filter or overload the LDAPUserManagerFactory and create a custom LDAPUserManager class that implements your own checkPassword() method.

Hope this helps,

Greg

‌

Re: Spring Boot Activiti Rest + LDAP but without using LDAP authentication

sayantan_sinha — Wed, 31 May 2017 20:19:15 GMT

Thanks for the detailed response. This does give some insight. However, I also would like to know how would I configure LDAP for activiti to use within a spring boot app. Is there any documentation for the same? I do not think the activiti user guide says much about this.

Re: Spring Boot Activiti Rest + LDAP but without using LDAP authentication

gdharley — Wed, 31 May 2017 20:36:03 GMT

Yeah, the guide doesnt give much detail with respect to overriding security in Spring Boot/Activiti.
The good news is that it's just a standard Sprint Boot app with the standard overrides.

Check out the spring boot rest (with security config) example here:

Activiti/modules/activiti-spring-boot/spring-boot-samples/spring-boot-sample-rest-api-security at master · Activiti/Acti…

Greg

Re: Spring Boot Activiti Rest + LDAP but without using LDAP authentication

gauravkumar1382 — Mon, 07 Aug 2017 14:18:48 GMT

Not able to access the link

Re: Spring Boot Activiti Rest + LDAP but without using LDAP authentication

dougjohnson — Mon, 07 Aug 2017 16:18:11 GMT

I think Greg Harley‌ meant to use the 6.0-release branch:

Activiti/modules/activiti-spring-boot/spring-boot-samples/spring-boot-sample-rest-api-security at 6.0-release · Activiti…

Hope that helps.