ldap

src/main/java/cn/quantgroup/cashloanflowboss/api/login/auth/LDAPAuthentication.java

@@ -25,12 +25,13 @@ public class LDAPAuthentication {
     private void ldapConnect() {
         Hashtable<String, String> env = new Hashtable<String, String>();
         env.put(Context.INITIAL_CONTEXT_FACTORY, FACTORY);
-        env.put(Context.PROVIDER_URL, URL);
+        env.put(Context.PROVIDER_URL, URL+BASEDN);
         env.put(Context.SECURITY_AUTHENTICATION, "simple");
 
-        String root = "cn=common_auth_query,cn=users,DC=quantgroup,DC=cn";// root
+        String root = "cn=common_auth_query,cn=users,dc=quantgroup,dc=cn";// root
         env.put(Context.SECURITY_PRINCIPAL, root);
         env.put(Context.SECURITY_CREDENTIALS, "Quantgroup.com@2o17");
+        env.put("java.naming.ldap.attributes.binary", "objectSid objectGUID");
         // 此处若不指定用户名和密码,则自动转换为匿名登录
         try {
             ctx = new InitialLdapContext(env, connCtls);
@@ -49,7 +50,9 @@ public class LDAPAuthentication {
         try {
             SearchControls constraints = new SearchControls();
             constraints.setSearchScope(SearchControls.SUBTREE_SCOPE);
-            NamingEnumeration<SearchResult> en = ctx.search("", "uid=" + uid, constraints);
+            String returnedAtts[] = { "cn","sn","description","title","uid","displayName","mail"};
+            constraints.setReturningAttributes(returnedAtts);
+            NamingEnumeration<SearchResult> en = ctx.search("ou=北京量科邦信息技术有限公司", "sn=" + uid, constraints);
             if (en == null || !en.hasMoreElements()) {
                 log.info("未找到该用户,uid={}", uid);
             }