Por si te sirve de algo, me costo un monton, aun estoy detras de una configuración hibrida, medio LDAP medio Base de Datos, pero por ahora les dejo una configuración básica del LDAP con el Nuevo Acegi.
<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:s="http://www.springframework.org/schema/security" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation=" http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.5.xsd http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-2.0.1.xsd"> <s:http> <s:intercept-url pattern="/" access="IS_AUTHENTICATED_ANONYMOUSLY" /> <s:intercept-url pattern="/j_spring_security_switch_user" access="ROLE_SUPERVISOR" /> <s:intercept-url pattern="/web/**" access="ROLE_USER" /> <s:intercept-url pattern="/web/templates/**" access="ROLE_ADMIN" /> <s:intercept-url pattern="/" access="IS_AUTHENTICATED_ANONYMOUSLY" /> <s:intercept-url pattern="/login.do" access="IS_AUTHENTICATED_ANONYMOUSLY" /> <s:form-login login-page="/login.do" default-target-url='/web/index.do' authentication-failure-url="/login.do?login_error=1" /> <s:logout logout-success-url="/" /> <s:http-basic /> <s:anonymous /> <s:logout /> </s:http> <s:ldap-server id="ldapServer" url="ldap://localhost:389/ou=system" manager-dn="uid=admin,ou=system" manager-password="test" /> <!-- grop srch base was groups --> <s:ldap-authentication-provider server-ref="ldapServer" user-search-filter="sAMAccountName={0}" user-search-base="" group-role-attribute="cn" group-search-filter="memberOf={0}" group-search-base="ou=groups" /> <!-- sAMAccountName java.naming.referrel follow --> <bean id="contextSource" class="org.springframework.security.ldap.DefaultSpringSecurityContextSource"> <constructor-arg value="ldap://localhost:389/ou=system" /> <property name="userDn" value="uid=admin,ou=system" /> <property name="password" value="test" /> </bean> <bean id="ldapAuthenticationProvider" class="org.springframework.security.providers.ldap.LdapAuthenticationProvider"> <constructor-arg> <bean class="org.springframework.security.providers.ldap.authenticator.BindAuthenticator"> <constructor-arg ref="contextSource" /> <property name="userSearch" ref="userSearch" /> </bean> </constructor-arg> <constructor-arg> <bean class="org.springframework.security.ldap.populator.DefaultLdapAuthoritiesPopulator"> <constructor-arg ref="contextSource" /> <constructor-arg value="cn=users,dc=development,dc=somecompany,dc=com" /> <property name="convertToUpperCase" value="true" /> <property name="defaultRole" value="Authenticated" /> <property name="rolePrefix" value="" /> <property name="searchSubtree" value="true" /> <property name="groupSearchFilter" value="(memberUid={0})" /> <property name="groupRoleAttribute" value="cn" /> </bean> </constructor-arg> </bean> <bean id="userSearch" class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch"> <constructor-arg index="0" value="ou=Users" /> <constructor-arg index="1" value="(sAMAccountName={0})" /> <constructor-arg index="2" ref="contextSource" /> <property name="searchSubtree" value="true" /> </bean> </beans>


