Spring Boot + Spring Security + LDAP from scratch - Java Brains

In this tutorial, we’ll learn how to setup a Spring Boot app with Spring Security that connects to an LDAP server for authentication. Spring Security has authentication providers that come out of the box and it’s super easy to set this up. Let me show you!
Java Brains website: javabrains.io
#JavaBrains #BrainBytes #HowTo #SpringSecurity #Spring #SpringBoot #Java #Tutorial

[@go_better]

I just love you! You explain it so clearly!!! It all seemed to be complicated, but you make it so reachable! Thank you!

[@sanjayujjainkar9810]

Very precise and clear explanation. Spring security and LDAP are complex to understand, but you made it very simple to understand. Thanks for this tutorial.

[@shashikanthc6400]

It feels like I've found a gold mine!!! You're a madlad man!

[@tarunjeetsinghsalh]

Looking forward to JWT tutorial. Please make a video on Spring Oauth 2 and Spring SAML integration too.

[@rcmohanrajcse]

Great Tutorials on Spring Security. Looking forward for JWT tutorial. Please explain spring security with OAuth also. Thank you.

[@manikantgautam5068]

what a way to start weekend . i was waiting for this :)

[@tkbhateja2071]

Hello Sir, Thank you for making this whole series of Spring Security. It guide us the whole deep dive in the concepts of Spring security. I would like to request you, please make a video of multiple authentication provider concept, like in a single app we have multiple Authentication Manager , one for LDAP and other for JPA authentication. Thank you :) :)

[@haythamdahri9321]

Amazing and high valuable information. Thank you so much. wishing for you all the best

[@gunturmanju]

How do i thank you Kaushik ? I have been watching your videos as recap before interviews from years and getting the jobs. You are just amazing and i really thank you from bottom of my heart. You are my guru :)

[@miraj0072004]

Thanks Koushik! You are an amazing teacher!

[@vanitapatel6109]

Thanks for making these videos , by far these are so detailed and to the point...

[@bartek8094]

Big thumbs up for reading comments and doing the content viewers want! 👍👍

[@cryptodeveloper]

Just when I needed it. Thank you!!

[@dimimurik3970]

Great, amazingly clear and fine explanations!

[@suddewar]

Simply superb presentation Kaushik. Thanks a lot.

[@fexmak]

awesome, thanks for always sharing your knowledge!

[@apoorvnigam2282]

Thanks sir for your wonderful teaching

[@vivekguptacs]

Thank you so much for this video:-)

[@santoshkumarverma8443]

Awesome explanations.

[@CHANDRU419]

Thalaa ! Again maasu maasu ! Springboot security Oauth2 jwt kind of tutorials please next. Hats of to your explanation

[@uma_r]

😂

[@Aks-rd1ir]

Hi, I have one question. So for each user, we have to keep adding information in .ldif file? If yes, then don't you think it is too much manual work. Because basically, we store user information in DB with privileges and load those values dynamically. So it is possible in case of LDAP?

[@shashankjain7116]

Sir!!! U r just amazing... 👍🏻👌🏻

[@Victor-xl4ru]

Hey, thank you for the tutorial. But when I finish everything and run, I dont get a web page that comes up. Any answer is appreciate, thank you!

[@patnamirchi]

Very good crisp and simple understanding. Although not using but many times asked in interview. Another good thing to know it may come some legacy project. Thanks for your nice explanation. Sir, when you are going to post JWT . I am impatiently waiting for that. Please say when that is coming. Thanks🙂

[@StefanSchade721229]

Great content, thank you

[@vikuna979]

Hi Koushik, Thanks a lot for all your videos. I always use your videos for quick refreshers. :) My question - Lets say I have APIs for various modules of a project like user management, products, cart, inventory etc. So should I pass user credentials for every HTTP request, if the authentication method is LDAP? Is it a good idea to issue a JWT tokens to the client after the first LDAP authentication is completed, let the client send the token in headers for every request, server validate the token, and then route either to the resource endpoint or return a 403 HTTP response code. If issuing JWT tokens is not a good solution, whats the alternate solution? Please advise.

[@sg-hl8eg]

minimum 1 million subscribers you should get. thanks for the videos.

[@aashishshrestha8180]

Thank you So much.. you have the best tutorial video

[@MuztabaHasanat]

What are the advantages using LADP over RDBMS in the case of authentication and authorization?

[@vivekguptacs]

Hi Sir, Could you please explain LTPA (lightweight third party authentication) how its works?

[@coding_ss632]

You're working on intellij idea community or ultimate edition?

[@davorinkocbek4779]

Great tutorial. Is it possible to load groups which ldap user is member of (attribute memberOf in ldap) to Roles or Authorities? I can authenticate with my ldap credentials, but I would like to restrict the access with roles and authorities. But I dont know how to "load" an attribute "memberOf" from my ldap to roles/authorities. Is that even possible?

[@amit57890]

Can you please create a video on LDAP + SPRING SECURITY + SSO (With Kerberos/SPNEGO)

[@fstreamdl1631]

what is the themes name that you are using in your intellij ide... it looks cool

[@dhanushkakumarage1889]

Great work.. thanks

[@anshgyl]

Can you please add a video in which we can use a custom login page, instead of a default one, how do we call the login API from our own form?

[@Luther_Luffeigh]

Will this work with azure active directory authentication?

[@cristianoronaldo-md1fz]

Hello do you have example with Front End Angular thank you

[@ykelizarov2934]

Great tutor, Koshik could you show how to add custom login jsp Thanks

[@hyperborean72]

Great video. Would be nice if you made some remarks as to how to connect to remote LDAP server

[@shivraj777]

Can you have video explaining topic : spring boot + jpa(with mysql or any other database) + redis cache which will talk about providing crud operations efficently?

[@franjovideos]

Does this work for AD connection? Or is there another built in provider?

[@vikasrh]

Is there a way to fetch some user details like Employee ID, email, city and process the values / pass it to the UI.

[@isharha]

Thanks for the video..I tried and is working fine with local ldap.I replaced with our organization ldap but it gives me below error [LDAP: error code 50 - Insufficient Access Rights]; nested exception is javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient Access Rights]; remaining name 'uid=pmerla,ou=people'. Any help on this appreciated!!

[@ananthakrishnathantri9072]

Hi..Once a user is logged in with LDAP as shown in this example, will his session expire? In other words, is it possible to integrate LDAP based authentication with token based authentication?

[@mehrabkor8591]

Thank You So Much

[@sunitanair1907]

In order to connect to existing LDAP directory do we have to make any changes in configuration or it's all same what is shown in video

[@chepaiytrath]

Hi Koushik, can you explain how ROLE based authorization works with LDAP as in this video you have 'fullyAuthenticated anyRequest'. Is there a tag in the .ldif file which we can use to supply the role (couldn't find such a tag in the spring IO guide's sample ldif code). If yes, then how can we configure the 'configure(HttpSecurity http)' method to read the roles as we did in previous lectures?

[@MoJoMe13]

Hi Koushik,I have the same question, how can we do role based authentication for LDAP,yes we can definitely google but it will be great if you can add that section too in the LDAP video

[@shashankjain7116]

Be ready for new video tomorrow (my assumption). New video means great start of weekend :)

[@zeparsan4370]

Could you make tutorial how to use LDAP with token as response when the authentication is valid ?

[@sathwikchintalapudi1243]

Thanks good video

[@chieninh1334]

How can I validate a field username or password in spring security. Thank you.

[@maryemanane2461]

Can you do exactly the same video but with node.js ?

[@rjs7256]

How to Authorize user using ldap like we did using inMemoryAuthentication

[@srikanthsetti5645]

need to implement authenticaiton with ldap once authentication done need to get groups where user is member in ldap,if user configured for ldap authentication otherwise authenticate with database using springboot applicaiton

[@mehdicharife2335]

What is the purpose of specifying "ou=groups" under the groupSearchBase() even though users are under the ou people?

[@nelsonfernando699]

Wow you are using IntelliJ IDEA .. my favourite IDE.. 😍 By the way you could have used inbuilt spring initializr

[@KishoreKumar-sl6fk]

Hi... this may be irrelevant but still, this video should be listed under playlist Spring Security under your channel and it is not the case now... Kindly look into this... this arrangement might be useful to ppl, lik me, who follow your channel extensively.... Thanks a lot for all the effort that you are puttin in to help ppl like me.... Hatsoff to you...

[@br4676]

very nice Sir

[@sonatamajor431]

Like always very useful tutorial, if you could use intellij's white theme it would be more useful. thanks

[@bathulanagendra4621]

Nice video sir.if possible plz make video on how to add ldaps in spring security.

[@ShajeerMarakkar]

I would like to know how to implement X.509 between micro services.

[@MrPaulbm100]

Would love an oauth example

[@monu5594]

Hi #JavaBrains, There are several ways to authenticate, authorize app can sm1 plz help which is the best mechanism as per today's trend. Should I use ldap? Should I use SAML? should I use JWT? should I use oAuth2, okata etc? Should I use mixture of all? Any other mixture of security to secure services as per companies standards? Kindly help, I am very much confuse in the best combination. Thanks in advance

[@sachinjadhav7957]

How we can call Rest API which is protected by LDAP authentication using postman or curl ?

[@muralimandava425]

I am trying to use this same like but except spring security.. So I am unable to get properly. Like I am getting exception :::- unable to bind in order to bind

[@lequocthinh8992]

can anyone tell me what theme did he use?

[@adigoppulakumar3673]

Hi Sir, Can you plz help me , How to delete the token from spring boot security,If some one stolen the jwt token.

[@Jksevend]

some more indepth authorization would be nice, but great tutorial on authentication!

[@rohitkesarwani1506]

Hi, I am facing a problem connecting to the LDAP server running on port 8399. Anyone faced the same. It would be a great help if you can share how did you fix it.

[@srinub523]

Nice ide theme 😎

[@iamcrypticcoder]

What are the benefits of using LDAP?

[@huonsothon2354]

how can I connect with real ldap server without ldif file?, becasue in production we can not use embedded server

[@mamathaap7572]

how can we get userid and password after logged in succssfully

[@sidnaazlovefairytale2152]

WebSecurityConfigurerAdapter is deprecated!!!!!!!!!!! In spring security 5.7 version.. can you kindly please upload video for the latest changes for ldap authentication

[@TheDheerendraJaiswal]

Waiting for o auth 2 tutorial, sir..

[@user-bq8wq2ni9q]

Very good video, but i got an exception when i tried to log in as ben "localhost:8389; nested exception is javax.naming.CommunicationException: localhost:8389 [Root exception is java.net.ConnectException: Connection refused]" and don't know how to correct it.

[@sanalsz]

did you fix it? I am getting this error! Edit: it was a typo in application.proerties file, I mispelled "spring" and then had to replace LdapShaPasswordEncoder with BCryptPasswordEncoder

[@anilkinikar]

Hope this works on Active Directory as well

[@marioemad8000]

I need to ask what if I need to change the username and password, specially the password? you using the username and password from the page in the internet but you didn't show how we can change our specific password

[@santhoshvaggu9901]

Hi Koushik I tried the example in the video. The application was up and running. However when I enter the credentials I am getting below exception. org.springframework.security.authentication.InternalAuthenticationServiceException: localhost:8399; nested exception is javax.naming.CommunicationException: localhost:8399 [Root exception is java.net.ConnectException: Connection refused: connect]

[@muditshukla]

You could have a typo in application.properties. Change the entry spring.ldap.embedded.base.dn=dc=springframework,dc=org TO spring.ldap.embedded.base-dn=dc=springframework,dc=org Mine worked after this change.

[@mezeee]

@@muditshukla doesnt work for me. Same error with this solution :S

[@sanalsz]

did you fix it? I am getting this error! Edit: it was a typo in application.proerties file, I mispelled "spring" and then had to replace LdapShaPasswordEncoder with BCryptPasswordEncoder

[@raghavendrageethardhbhamid8900]

I didn't notice setting up the login page that was shown in the video, can you please include that as well? If you can provide a link to the repo (eg : GitHub)where you saved this code that'll be great. Overall I thank you for the detailed explanation.

[@abhimanyukumar9606]

The login and logout page is provided by spring security by default.

[@raghavendrageethardhbhamid8900]

@@abhimanyukumar9606 Got it thanks

[@kakollunaveen4944]

I'm getting connection timed out error ..can anyone help me

[@ericlawrenceq]

hmmm, i can't make it work. No matter what i fill in the login form it just refreshes. can i get this to work in eclipse? is the following print in console ok: Property 'userDn' not set - anonymous context will be used for read-write operations

[@mrunalizode3328]

Good to see someone also facing same issues. I'm not sure why this is not working even though I copied each and every word including the class names! Maybe some newer versions require different configurations. Let me know if it works for you.

[@noortech254]

Thank you Kaushik Sir for the awesome video. Could you please provide the github link :)

[@akashverma7881]

Hi, while trying to login I'm getting below exception: org.springframework.security.authentication.InternalAuthenticationServiceException: localhost:8389; nested exception is javax.naming.CommunicationException: localhost:8389 [Root exception is java.net.ConnectException: Connection refused (Connection refused)]. Basically, my LDAP server instance is not running. How do I verify that it is up before trying to access it. Any suggestion would be appreciated.

[@muditshukla]

You could have a typo in application.properties. Change the entry spring.ldap.embedded.base.dn=dc=springframework,dc=org TO spring.ldap.embedded.base-dn=dc=springframework,dc=org Mine worked after this change.

[@sanalsz]

did you fix it? I am getting this error! Edit: it was a typo in application.proerties file, I mispelled "spring" and then had to replace LdapShaPasswordEncoder with BCryptPasswordEncoder

[@ashwinneo]

When i give username as ben and password as benspassword. I'm getting Bad Credentials error. Can anyone tell me why is that coming?

[@RaghunandanChakravarthy]

In your configure method, use ".passwordEncoder(new BCryptPasswordEncoder())" instead of the deprecated API. If you check the ldif file, you can see that the {SHA} is removed from the password field. So SHA might not work now

[@kisgatyas]

It is possible that this example is no longer works with LdapShaPasswordEncoder, you might want to try with BCryptPasswordEncoder.

[@sunilpatra5557]

it did not work for me it is showing bad credential

[@rangawanigathunga3707]

Use .passwordEncoder(new BCryptPasswordEncoder()) in SecurityConfiguration

@@rangawanigathunga3707 God bless you, man. I was getting crazy about that

[@somewhere8]

This is a good video. But it only mentioned LDAP authentication. It did not say how to do LDAP authorization, mapping the AD group to the role.

[@ahsansiddiqui4263]

how to define admin roles

[@pranshuc]

Reference or codebase link pls?

[@abyeeskie9766]

Great stuff thenk u java brains, but the intro bgm could u🤏👌

[@mrunalizode3328]

I have followed this tutorial and it has some amazing information. But I am unable to login. The login page just refreshes after entering the username and password. I am not sure why it is so. I have replaced the password encoder to BCryptPasswordEncoder since the LdapPasswordEncoder is deprecated. Can anyone help? Is the newer version have some configuration changes that I am missing?

[@bookread5208]

I am facing same issue :(

[@IvanRandomDude]

Well, this was 6 months ago but for those who have the same problem now: The problem was that you changed password encoder but still used the same hashes and passwords that were generated by Ldap password encoder. Every encoder generates hashes in different way so benpassword encoded by BCrypt is totally different than one you get from ldap encoder. The solution was to generate new password hashes using BCrypt and replace old hashes. But at this point official tutorial on spring.io is updated to use BCrypt so new learners should not have this issue anyway.

[@mrunalizode3328]

@@IvanRandomDude thank you!

[@sammaiahgunje946]

@@IvanRandomDude yes you are correct initially i was used the old password encoder and faced Bad credentials issue. Later I replaced with BCryptPasswordEncoder instead of LdapShaPasswordEncoder and it is working fine now. Thanks for your information @ivan

[@Nature-ze2hr]

getting Bad Credentials error when try to login

[@DennisKingsman]

great, but that ctr+c -> ctl+v thing is not that good when you watch tutorial, it's more interesting when it's written with video or at least with provided github link where you can do ctr+c -> ctr+v thing too

[@ryantapfumaneyi6683]

May you please share your code after these tutorials. They are so good but we need the code

[@nameshd658]

Whole Code : github.com/NameshDilshan/spring-security-ldap-example

[@ihorvus976]

Waiting for JWT tutorial

[@Java.Brains]

Check out the Spring Security playlist on my channel. I’ve already put out a few tutorials on JWT and its implementation

[@inclinedscorpio]

If anyone is trying, the code won't work !! How it will work is by : Replacing new "LdapShaPasswordEncoder()" with "new BCryptPasswordEncoder()"