ActiveDirectory login without service account

Support
#1

Hi,

I tested the CUBA LDAP integration against a Windows Server domain controller and it works fine.

Unfortunately, one my customers requires AD integration but their corporate rules forbid the creation of a service account to connect to the AD for browsing and checking credentials.

So, is there any way to check if the login credentials are valid in the AD without using a service account (i.e without setting cuba.web.ldap.user and cuba.web.ldap.password properties ?

The CUBA app runs on Tomcat in a Window server joined to the AD domain.

Thanks !

Alejandro

#2

Hi Alejandro,

LdapLoginProvider uses LdapTemplate from Spring LDAP framework. You can refer to its documentation and if you find a solution, replace the LdapLoginProvider bean with a modified version in your project.

Regards,
Konstantin