This repository contains 2 projects:
- sample-ldap-login-base
- sample-ldap-login-totp
sample-ldap-login-base implements base requirements (login form to authenticate users through a LDAP server).
sample-ldap-login-totp implements bonus feature (OTP authentication).
- Microsoft Windows 10 Pro 32bit
- java version "1.8.0_171" (build 1.8.0_171-b11)
- ApacheDS - v. apacheds-2.0.0-M24 (http://directory.apache.org/apacheds/downloads.html)
- Spring Framework (Spring boot 2.0.0-RELEASE)
- FreeOTP Authenticator version 1.5 (17)
ApacheDS has been configured to use the provided LDIF:
- New Context Entry -> dc=myorg,dc=test
- Import LDIF file (test.ldif)
By default programs use configuration settings defined in the application.yml file embedded into the project (jar file).
# "C:\Program Files\Java\jre1.8.0_171\bin\java" -jar sample-ldap-login-1.0-SNAPSHOT.jar
If you would like use another configuration file, you could specify its path with --spring.config.location parameter.
# "C:\Program Files\Java\jre1.8.0_171\bin\java" -jar sample-ldap-login-1.0-SNAPSHOT.jar --spring.config.location="C:\tmp\sample-ldap-login\application.yml"
If you would like overwrite embedded/default configuration file with a file in the same folder of the JAR program you could place a file named application.yml in its folder.
# dir
... sample-ldap-login-1.0-SNAPSHOT.jar
... application.yml
# "C:\Program Files\Java\jre1.8.0_171\bin\java" -jar sample-ldap-login-1.0-SNAPSHOT.jar
Programs use Spring Framework, so more combination are allowed. (e.g it is also possible to overwrite only a single configuration parameter). See references for more details.
When JAR program is running you could browse to http://localhost:8080.
By default programs use settings defined in the application.yml file embedded into the project (jar file).
# app name
app:
name: sample-ldap-login
# web server's port
server:
port: 8080
# LDAP settings
# managerDn and managerPassword are the username/password used by the application to LDAP connections, as _system_ user.
# if you use anonymous LDAP connection comment managerDn and managerPassword settings.
ldap:
#managerDn: uid=test1,ou=People,dc=myorg,dc=test
#managerPassword: Password123!
url: ldap://localhost:10389/dc=myorg,dc=test
This project implements login form to authenticate users through a LDAP server and the OTP authentication. In order to simplify tests and implementation I created a simple POC that uses 3 web pages:
- /login: Login form with username/password
- /qrcode: QR code visualization (each user has a secret) and TOTP code verification
- /home: Protected resource
Step bypass should be avoided thanks to Spring Security and its User's Roles feature used in com.example.ldap.infrastructure.WebSecurityConfig.
/login:
/qrcode:
