没有任何注释，表怪我(?_?)
在本地用户验证，Windows域验证，公司单点登录服务器测试通过
<span><?</span>
<span>xml version="1.0" encoding="UTF-8"</span>
<span>?></span>
<span><</span>
<span>beans:beans </span>
<span>xmlns</span>
<span>="http://www.springframework.org/schema/security"</span>
<span>
xmlns:beans</span>
<span>="http://www.springframework.org/schema/beans"</span>
<span>
xmlns:xsi</span>
<span>="http://www.w3.org/2001/XMLSchema-instance"</span>
<span>
xsi:schemaLocation</span>
<span>="http://www.springframework.org/schema/beans
http://www.springframework.org/schema/beans/spring-beans-4.2.xsd
http://www.springframework.org/schema/security
http://www.springframework.org/schema/security/spring-security-4.0.xsd"</span>
<span>></span>
<span><</span>
<span>global-method-security </span>
<span>pre-post-annotations</span>
<span>="enabled"</span>
<span> order</span>
<span>="0"</span>
<span>
proxy-target-class</span>
<span>="true"</span>
<span>></span>
<span></</span>
<span>global-method-security</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="sessionRegistry"</span>
<span>
class</span>
<span>="org.springframework.security.core.session.SessionRegistryImpl"</span>
<span>/></span>
<span><</span>
<span>http </span>
<span>security</span>
<span>="none"</span>
<span> pattern</span>
<span>="/resources/**"</span>
<span>/></span>
<span><</span>
<span>beans:beans </span>
<span>profile</span>
<span>="local,ldap"</span>
<span>></span>
<span><</span>
<span>http </span>
<span>use-expressions</span>
<span>="true"</span>
<span>></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/login"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/login/**"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/logout"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/webapi/**"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/**"</span>
<span> access</span>
<span>="isFullyAuthenticated()"</span>
<span>/></span>
<span><</span>
<span>form-login </span>
<span>login-page</span>
<span>="/login"</span>
<span> login-processing-url</span>
<span>="/login"</span>
<span>
authentication-failure-url</span>
<span>="/login?error"</span>
<span>
default-target-url</span>
<span>="/"</span>
<span> username-parameter</span>
<span>="username"</span>
<span>
password-parameter</span>
<span>="password"</span>
<span>/></span>
<span><</span>
<span>logout </span>
<span>logout-url</span>
<span>="/logout"</span>
<span> logout-success-url</span>
<span>="/login?loggedOut"</span>
<span>
invalidate-session</span>
<span>="true"</span>
<span> delete-cookies</span>
<span>="JSESSIONID"</span>
<span>/></span>
<span><</span>
<span>session-management </span>
<span>invalid-session-url</span>
<span>="/login"</span>
<span>
session-fixation-protection</span>
<span>="migrateSession"</span>
<span>></span>
<span><</span>
<span>concurrency-control </span>
<span>max-sessions</span>
<span>="1"</span>
<span>
error-if-maximum-exceeded</span>
<span>="true"</span>
<span>
session-registry-ref</span>
<span>="sessionRegistry"</span>
<span>/></span>
<span></</span>
<span>session-management</span>
<span>></span>
<span><</span>
<span>csrf </span>
<span>disabled</span>
<span>="true"</span>
<span>/></span>
<span></</span>
<span>http</span>
<span>></span>
<span></</span>
<span>beans:beans</span>
<span>></span>
<span><</span>
<span>beans:beans </span>
<span>profile</span>
<span>="local"</span>
<span>></span>
<span><</span>
<span>authentication-manager</span>
<span>></span>
<span><</span>
<span>authentication-provider </span>
<span>user-service-ref</span>
<span>="userDetailsService"</span>
<span>></span>
<span><</span>
<span>password-encoder </span>
<span>ref</span>
<span>="passwordEncoder"</span>
<span>/></span>
<span></</span>
<span>authentication-provider</span>
<span>></span>
<span></</span>
<span>authentication-manager</span>
<span>></span>
<span></</span>
<span>beans:beans</span>
<span>></span>
<span><</span>
<span>beans:beans </span>
<span>profile</span>
<span>="ldap"</span>
<span>></span>
<span><</span>
<span>authentication-manager</span>
<span>></span>
<span><</span>
<span>authentication-provider </span>
<span>ref</span>
<span>="ldapAuthenticationProvider"</span>
<span>/></span>
<span></</span>
<span>authentication-manager</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="ldapAuthenticationProvider"</span>
<span>
class</span>
<span>="org.springframework.security.ldap.authentication.LdapAuthenticationProvider"</span>
<span>></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>index</span>
<span>="0"</span>
<span>
ref</span>
<span>="ldapAuthenticator"</span>
<span>/></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>index</span>
<span>="1"</span>
<span>
ref</span>
<span>="ldapAuthoritiesPopulator"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="ldapAuthenticator"</span>
<span>
class</span>
<span>="org.springframework.security.ldap.authentication.BindAuthenticator"</span>
<span>></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>ref</span>
<span>="ldapContextSource"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="userSearch"</span>
<span> ref</span>
<span>="ldapUserSearch"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="ldapUserSearch"</span>
<span>
class</span>
<span>="org.springframework.security.ldap.search.FilterBasedLdapUserSearch"</span>
<span>></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>index</span>
<span>="0"</span>
<span>
value</span>
<span>="${ldap.searchBase}"</span>
<span>/></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>index</span>
<span>="1"</span>
<span>
value</span>
<span>="${ldap.searchFilter}"</span>
<span>/></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>index</span>
<span>="2"</span>
<span>
ref</span>
<span>="ldapContextSource"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="ldapContextSource"</span>
<span>
class</span>
<span>="org.springframework.security.ldap.DefaultSpringSecurityContextSource"</span>
<span>></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>value</span>
<span>="${ldap.url}"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="userDn"</span>
<span> value</span>
<span>="${ldap.userDN}"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="password"</span>
<span> value</span>
<span>="${ldap.password}"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="ldapAuthoritiesPopulator"</span>
<span>
class</span>
<span>="org.springframework.security.ldap.authentication.UserDetailsServiceLdapAuthoritiesPopulator"</span>
<span>></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>ref</span>
<span>="userDetailsService"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span></</span>
<span>beans:beans</span>
<span>></span>
<span><</span>
<span>beans:beans </span>
<span>profile</span>
<span>="cas"</span>
<span>></span>
<span><</span>
<span>http </span>
<span>use-expressions</span>
<span>="true"</span>
<span> auto-config</span>
<span>="false"</span>
<span> entry-point-ref</span>
<span>="casEntryPoint"</span>
<span> servlet-api-provision</span>
<span>="true"</span>
<span>></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="${cas.localSystemLoginUrl}"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/login"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/login/**"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/logout"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/webapi/**"</span>
<span> access</span>
<span>="permitAll"</span>
<span>/></span>
<span><</span>
<span>intercept-url </span>
<span>pattern</span>
<span>="/**"</span>
<span> access</span>
<span>="isFullyAuthenticated()"</span>
<span>/></span>
<span><</span>
<span>custom-filter </span>
<span>position</span>
<span>="FORM_LOGIN_FILTER"</span>
<span> ref</span>
<span>="casFilter"</span>
<span>/></span>
<span><</span>
<span>custom-filter </span>
<span>ref</span>
<span>="singleLogoutFilter"</span>
<span> before</span>
<span>="CAS_FILTER"</span>
<span>/></span>
<span><</span>
<span>custom-filter </span>
<span>ref</span>
<span>="requestSingleLogoutFilter"</span>
<span> before</span>
<span>="LOGOUT_FILTER"</span>
<span>/></span>
<span><</span>
<span>logout </span>
<span>logout-url</span>
<span>="/logout"</span>
<span> logout-success-url</span>
<span>="/"</span>
<span>
invalidate-session</span>
<span>="true"</span>
<span> delete-cookies</span>
<span>="JSESSIONID"</span>
<span>/></span>
<span><</span>
<span>session-management </span>
<span>invalid-session-url</span>
<span>="/login"</span>
<span>
session-fixation-protection</span>
<span>="migrateSession"</span>
<span>></span>
<span><</span>
<span>concurrency-control </span>
<span>max-sessions</span>
<span>="1"</span>
<span>
error-if-maximum-exceeded</span>
<span>="true"</span>
<span>/></span>
<span></</span>
<span>session-management</span>
<span>></span>
<span><</span>
<span>csrf </span>
<span>disabled</span>
<span>="true"</span>
<span>/></span>
<span></</span>
<span>http</span>
<span>></span>
<span><</span>
<span>authentication-manager </span>
<span>alias</span>
<span>="authenticationManager"</span>
<span>></span>
<span><</span>
<span>authentication-provider </span>
<span>ref</span>
<span>="casAuthenticationProvider"</span>
<span>/></span>
<span></</span>
<span>authentication-manager</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="serviceProperties"</span>
<span>
class</span>
<span>="org.springframework.security.cas.ServiceProperties"</span>
<span>></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="service"</span>
<span>
value</span>
<span>="${cas.localSystemUrl}${cas.localSystemLoginUrl}"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="sendRenew"</span>
<span> value</span>
<span>="false"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="casEntryPoint"</span>
<span>
class</span>
<span>="org.springframework.security.cas.web.CasAuthenticationEntryPoint"</span>
<span>></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="loginUrl"</span>
<span> value</span>
<span>="${cas.loginUrl}"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="serviceProperties"</span>
<span> ref</span>
<span>="serviceProperties"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="casAuthenticationProvider"</span>
<span>
class</span>
<span>="org.springframework.security.cas.authentication.CasAuthenticationProvider"</span>
<span>></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="userDetailsService"</span>
<span> ref</span>
<span>="userDetailsService"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="serviceProperties"</span>
<span> ref</span>
<span>="serviceProperties"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="ticketValidator"</span>
<span>></span>
<span><</span>
<span>beans:bean
</span>
<span>class</span>
<span>="org.jasig.cas.client.validation.Cas20ServiceTicketValidator"</span>
<span>></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>index</span>
<span>="0"</span>
<span>
value</span>
<span>="${cas.url}"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span></</span>
<span>beans:property</span>
<span>></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="key"</span>
<span>
value</span>
<span>="an_id_for_this_auth_provider_only"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="casFilter"</span>
<span>
class</span>
<span>="org.springframework.security.cas.web.CasAuthenticationFilter"</span>
<span>></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="authenticationManager"</span>
<span> ref</span>
<span>="authenticationManager"</span>
<span>/></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="filterProcessesUrl"</span>
<span> value</span>
<span>="${cas.localSystemLoginUrl}"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="singleLogoutFilter"</span>
<span>
class</span>
<span>="org.jasig.cas.client.session.SingleSignOutFilter"</span>
<span>/></span>
<span><</span>
<span>beans:bean </span>
<span>id</span>
<span>="requestSingleLogoutFilter"</span>
<span>
class</span>
<span>="org.springframework.security.web.authentication.logout.LogoutFilter"</span>
<span>></span>
<span><</span>
<span>beans:constructor-arg </span>
<span>value</span>
<span>="${cas.logoutUrl}"</span>
<span>/></span>
<span><</span>
<span>beans:constructor-arg</span>
<span>></span>
<span><</span>
<span>beans:bean
</span>
<span>class</span>
<span>="org.springframework.security.web.authentication.logout.SecurityContextLogoutHandler"</span>
<span>/></span>
<span></</span>
<span>beans:constructor-arg</span>
<span>></span>
<span><</span>
<span>beans:property </span>
<span>name</span>
<span>="filterProcessesUrl"</span>
<span> value</span>
<span>="/logout"</span>
<span>/></span>
<span></</span>
<span>beans:bean</span>
<span>></span>
<span></</span>
<span>beans:beans</span>
<span>></span>
<span></</span>
<span>beans:beans</span>
<span>></span>
随附配置文件内容
cas.localSystemUrl=<span>http://www.example.com<br />cas.localSystemLoginUrl=/j_spring_security_cas_check
cas.url</span>=<span>http://cas.server.com/cas
cas.loginUrl</span>=<span>http://cas.server.com/cas/login
cas.logoutUrl</span>=http://cas.server.com/cas/logout?service=<span>http://www.example.com/logoutPage
ldap.url</span>=ldap://XXX.XXX.XXX.XXX:389<span>
ldap.userDN</span>=CN=XXX,OU=XXX,DC=XXX,DC=<span>XXX
ldap.password</span>=<span>XXX
ldap.searchBase</span>=DC=XXX,DC=<span>XXX
ldap.searchFilter</span>=(sAMAccountName={0})
原文：http://www.cnblogs.com/cfrost/p/5491394.html
【说明】：本文章由站长整理发布，文章内容不代表本站观点，如文中有侵权行为，请与本站客服联系(QQ:254677821)！