How to configure OpenDJ LDAP with spring boot app with embedded activiti rest module

[kanchan_ghosh]

Hi,

I am new to activiti bpm (5.19.0 version) and Spring, and I am developing a spring boot app which has embedded activiti rest module. The sole purpose of the spring boot app is to initiate the activiti rest module (as activiti rest lib are configured in maven pom of this project). This app is running fine with Basic authentication based on activiti (kermit/kermit). This project does not have any xml based process engine configuration. I do not have any annotation based configuration also, just including the activiti rest lib initiates the process engine when the spring boot app is running.

Now I need to configure the project to use LDAP ( OpenDJ ) Authentication and I have to exclude the Activiti owned authentication (kermit/kermit).

1.  I have seen the Activiti User Guide (Chapter 17) about configuring the LDAP in processEngineConfiguration, but that is XML based, Can anyone tell me how to configure the LDAP setting by annotation based configuration, and as my project uses activiti rest module as lib in maven dependency, How will I get the handle of processEngine which gets initiated automatically and its configuration in Spring.

2. how to exclude the default authentication of activiti.

Thanks,
Kanchan

[jbarrez]

1. The xml is Spring XML, so writing a bean counterpart should be easy. The LDAP Configuration is enabled using a ProcessEngineConfigurator injected into the ProcessEngineConfiguration. Now, this was mainly written for use in Activiti Explorer. What you need here is probable a way to hook in Spring Security to the REST layer (using an LdapProvider in Spring).

2. You will probably need to create your own @Configuration and don't use the default SecurityConfiguration: https://github.com/Activiti/Activiti/blob/master/modules/activiti-webapp-rest2/src/main/java/org/act.... Using Spring Boot, this should be docced in Spring Boot I assume.

[sayantan_sinha]

Hi, I am also trying to do the same thing and just wanted to check, is there a configuration that can be done through YMLs to achieve this? This should be configurable item I feel, is it not it? I am using activiti version 5.22.0 and activiti rest version 5.17.0