Need to skip spring/ldap authentication to be able to develop at home

[brannan nu]

So my goal is to be able to continue development on my works application if i have to work from home.
Right now we have it set up to use spring to get authentication from a LDAP server. And of course i get an error when i try to run the app without being connected to the network.
Right now we actually have 2 different applications that both use spring to get authentication from an LDAP server and the are set up slightly different in each instance. But hopefully i can figure out how to fix both once i fix the first one.

one app has a applicationContext-security.xml file which specifies

<bean id="contextSource"
	class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
	<constructor-arg value="location" />
	<property name="userDn" value="pw" />
	<property name="password" value="${ldap.password}" />
</bean>

And there are 2 files that have to do with the authentication.
LdapAuthenticationProvider.java which has an authenticate method:

public Authentication authenticate(Authentication auth) throws AuthenticationException {

		DirContextOperations authAdapter = authenticator.authenticate(auth);

		LdapAuthenticationToken ldapAuth = new LdapAuthenticationToken(auth, "ROLE_USER");
		InitialLdapContext ldapContext = (InitialLdapContext) authAdapter.getObjectAttribute("ldapContext");
		if (ldapContext != null) {
			ldapAuth.setContext(ldapContext);
		}

		return ldapAuth;
	}

LdapAuthenticationToke.java has another authenticate method:

public DirContextOperations authenticate(Authentication authentication) {

		String principal = principalPrefix + authentication.getName();
		String password = "";
		if (authentication.getCredentials() != null) {
			password = authentication.getCredentials().toString();
		}

		if (!("".equals(principal.trim())) && !("".equals(password.trim()))) {
			try {
				InitialLdapContext ldapContext = (InitialLdapContext) contextFactory.getContext(principal, password);

				DirContextOperations authAdapter = new DirContextAdapter();
				authAdapter.addAttributeValue("ldapContext", ldapContext);

				return authAdapter;
			} catch (Exception e) {
				throw new BadCredentialsException("Invalid login / password");
			}

		} else {
			throw new BadCredentialsException("Blank username and/or password!");
		}
	}

Or i could just switch the authentication to pull from oracle since i have a local copy of the database running on my laptop. This would probably be easier than completely removing the authentication.

Any help or suggestions will be greatly appreciated!

[Mark Spritzler]

Your Spring Security setup is all through configuration. So you can create your own spring security config file, where you use the built in security classes and instead of pointing Authenication UserDetailsService to LDAP, point it to a properties file, or even in text in your config file.

I recommend reading the Spring Security documentation to understand that all you need to change is the UserDetailsService that you are using. The UserDetailsService is what looks up your user data wherever it is stored, and can be changed without changing the rest of your configuration.

Mark

[Mark Spritzler]

Matter of fact this was in the thread right next to yours here

<authentication-manager>  
        <authentication-provider>  
            <user-service>  
                <user name="jimi" password="1234" authorities="ROLE_USER, ROLE_ADMIN"/>  
                <user name="john" password="1234" authorities="ROLE_USER"/>  
            </user-service>  
        </authentication-provider>  
    </authentication-manager> 

Mark