I just love you! You explain it so clearly!!! It all seemed to be complicated, but you make it so reachable! Thank you!

Very precise and clear explanation. Spring security and LDAP are complex to understand, but you made it very simple to understand. Thanks for this tutorial.

Looking forward to JWT tutorial. Please make a video on Spring Oauth 2 and Spring SAML integration too.

Great Tutorials on Spring Security. Looking forward for JWT tutorial. Please explain spring security with OAuth also. Thank you.

It feels like I've found a gold mine!!! You're a madlad man!

Hello Sir, Thank you for making this whole series of Spring Security. It guide us the whole deep dive in the concepts of Spring security. I would like to request you, please make a video of multiple authentication provider concept, like in a single app we have multiple Authentication Manager , one for LDAP and other for JPA authentication. Thank you :) :)

what a way to start weekend . i was waiting for this :)

How do i thank you Kaushik ? I have been watching your videos as recap before interviews from years and getting the jobs. You are just amazing and i really thank you from bottom of my heart. You are my guru :)

Amazing and high valuable information. Thank you so much. wishing for you all the best

Thanks Koushik! You are an amazing teacher!

Thanks for making these videos , by far these are so detailed and to the point...

Big thumbs up for reading comments and doing the content viewers want! 👍👍

Just when I needed it. Thank you!!

Great, amazingly clear and fine explanations!

Simply superb presentation Kaushik. Thanks a lot.

Very good crisp and simple understanding. Although not using but many times asked in interview. Another good thing to know it may come some legacy project. Thanks for your nice explanation. Sir, when you are going to post JWT . I am impatiently waiting for that. Please say when that is coming. Thanks🙂

awesome, thanks for always sharing your knowledge!

Thalaa ! Again maasu maasu ! Springboot security Oauth2 jwt kind of tutorials please next. Hats of to your explanation

@uma_r

4 жыл бұрын

😂

Thanks sir for your wonderful teaching

Awesome explanations.

Thank you so much for this video:-)

Sir!!! U r just amazing... 👍🏻👌🏻

Great content, thank you

Thank you So much.. you have the best tutorial video

minimum 1 million subscribers you should get. thanks for the videos.

Great work.. thanks

Great video. Would be nice if you made some remarks as to how to connect to remote LDAP server

Thank You So Much

Wow you are using IntelliJ IDEA .. my favourite IDE.. 😍 By the way you could have used inbuilt spring initializr

Like always very useful tutorial, if you could use intellij's white theme it would be more useful. thanks

Thanks good video

Hey, thank you for the tutorial. But when I finish everything and run, I dont get a web page that comes up. Any answer is appreciate, thank you!

Nice video sir.if possible plz make video on how to add ldaps in spring security.

very nice Sir

Hi Koushik, Thanks a lot for all your videos. I always use your videos for quick refreshers. :) My question - Lets say I have APIs for various modules of a project like user management, products, cart, inventory etc. So should I pass user credentials for every HTTP request, if the authentication method is LDAP? Is it a good idea to issue a JWT tokens to the client after the first LDAP authentication is completed, let the client send the token in headers for every request, server validate the token, and then route either to the resource endpoint or return a 403 HTTP response code. If issuing JWT tokens is not a good solution, whats the alternate solution? Please advise.

You're working on intellij idea community or ultimate edition?

Hi... this may be irrelevant but still, this video should be listed under playlist Spring Security under your channel and it is not the case now... Kindly look into this... this arrangement might be useful to ppl, lik me, who follow your channel extensively.... Thanks a lot for all the effort that you are puttin in to help ppl like me.... Hatsoff to you...

some more indepth authorization would be nice, but great tutorial on authentication!

Nice ide theme 😎

Can you please create a video on LDAP + SPRING SECURITY + SSO (With Kerberos/SPNEGO)

Hi, I have one question. So for each user, we have to keep adding information in .ldif file? If yes, then don't you think it is too much manual work. Because basically, we store user information in DB with privileges and load those values dynamically. So it is possible in case of LDAP?

Hi Koushik, can you explain how ROLE based authorization works with LDAP as in this video you have 'fullyAuthenticated anyRequest'. Is there a tag in the .ldif file which we can use to supply the role (couldn't find such a tag in the spring IO guide's sample ldif code). If yes, then how can we configure the 'configure(HttpSecurity http)' method to read the roles as we did in previous lectures?

@MoJoMe13

4 жыл бұрын

Hi Koushik,I have the same question, how can we do role based authentication for LDAP,yes we can definitely google but it will be great if you can add that section too in the LDAP video

Great tutor, Koshik could you show how to add custom login jsp Thanks

Can you have video explaining topic : spring boot + jpa(with mysql or any other database) + redis cache which will talk about providing crud operations efficently?

Be ready for new video tomorrow (my assumption). New video means great start of weekend :)

what is the themes name that you are using in your intellij ide... it looks cool

What are the advantages using LADP over RDBMS in the case of authentication and authorization?

Hi..Once a user is logged in with LDAP as shown in this example, will his session expire? In other words, is it possible to integrate LDAP based authentication with token based authentication?

Hi Sir, Could you please explain LTPA (lightweight third party authentication) how its works?

Great tutorial. Is it possible to load groups which ldap user is member of (attribute memberOf in ldap) to Roles or Authorities? I can authenticate with my ldap credentials, but I would like to restrict the access with roles and authorities. But I dont know how to "load" an attribute "memberOf" from my ldap to roles/authorities. Is that even possible?

Can you please add a video in which we can use a custom login page, instead of a default one, how do we call the login API from our own form?

Thanks for the video..I tried and is working fine with local ldap.I replaced with our organization ldap but it gives me below error [LDAP: error code 50 - Insufficient Access Rights]; nested exception is javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient Access Rights]; remaining name 'uid=pmerla,ou=people'. Any help on this appreciated!!

Does this work for AD connection? Or is there another built in provider?

In order to connect to existing LDAP directory do we have to make any changes in configuration or it's all same what is shown in video

Will this work with azure active directory authentication?

it did not work for me it is showing bad credential

@rangawanigathunga3707

4 жыл бұрын

Use .passwordEncoder(new BCryptPasswordEncoder()) in SecurityConfiguration

4 жыл бұрын

@@rangawanigathunga3707 God bless you, man. I was getting crazy about that

Could you make tutorial how to use LDAP with token as response when the authentication is valid ?

Thank you Kaushik Sir for the awesome video. Could you please provide the github link :)

Is there a way to fetch some user details like Employee ID, email, city and process the values / pass it to the UI.

Hello do you have example with Front End Angular thank you

Great stuff thenk u java brains, but the intro bgm could u🤏👌

Waiting for o auth 2 tutorial, sir..

I didn't notice setting up the login page that was shown in the video, can you please include that as well? If you can provide a link to the repo (eg : GitHub)where you saved this code that'll be great. Overall I thank you for the detailed explanation.

@abhimanyukumar9606

4 жыл бұрын

The login and logout page is provided by spring security by default.

@raghavendrageethardhbhamid8900

4 жыл бұрын

@@abhimanyukumar9606 Got it thanks

Would love an oauth example

I am trying to use this same like but except spring security.. So I am unable to get properly. Like I am getting exception :::- unable to bind in order to bind

Hope this works on Active Directory as well

WebSecurityConfigurerAdapter is deprecated!!!!!!!!!!! In spring security 5.7 version.. can you kindly please upload video for the latest changes for ldap authentication

Can you do exactly the same video but with node.js ?

Very good video, but i got an exception when i tried to log in as ben "localhost:8389; nested exception is javax.naming.CommunicationException: localhost:8389 [Root exception is java.net.ConnectException: Connection refused]" and don't know how to correct it.

@sanalsz

Жыл бұрын

did you fix it? I am getting this error! Edit: it was a typo in application.proerties file, I mispelled "spring" and then had to replace LdapShaPasswordEncoder with BCryptPasswordEncoder

Hi #JavaBrains, There are several ways to authenticate, authorize app can sm1 plz help which is the best mechanism as per today's trend. Should I use ldap? Should I use SAML? should I use JWT? should I use oAuth2, okata etc? Should I use mixture of all? Any other mixture of security to secure services as per companies standards? Kindly help, I am very much confuse in the best combination. Thanks in advance

How can I validate a field username or password in spring security. Thank you.

Hi Koushik I tried the example in the video. The application was up and running. However when I enter the credentials I am getting below exception. org.springframework.security.authentication.InternalAuthenticationServiceException: localhost:8399; nested exception is javax.naming.CommunicationException: localhost:8399 [Root exception is java.net.ConnectException: Connection refused: connect]

@muditshukla

4 жыл бұрын

You could have a typo in application.properties. Change the entry spring.ldap.embedded.base.dn=dc=springframework,dc=org TO spring.ldap.embedded.base-dn=dc=springframework,dc=org Mine worked after this change.

@mezeee

4 жыл бұрын

@@muditshukla doesnt work for me. Same error with this solution :S

@sanalsz

Жыл бұрын

did you fix it? I am getting this error! Edit: it was a typo in application.proerties file, I mispelled "spring" and then had to replace LdapShaPasswordEncoder with BCryptPasswordEncoder

need to implement authenticaiton with ldap once authentication done need to get groups where user is member in ldap,if user configured for ldap authentication otherwise authenticate with database using springboot applicaiton

What is the purpose of specifying "ou=groups" under the groupSearchBase() even though users are under the ou people?

How to Authorize user using ldap like we did using inMemoryAuthentication

I would like to know how to implement X.509 between micro services.

How we can call Rest API which is protected by LDAP authentication using postman or curl ?

how can I connect with real ldap server without ldif file?, becasue in production we can not use embedded server

Hi Sir, Can you plz help me , How to delete the token from spring boot security,If some one stolen the jwt token.

Hi, I am facing a problem connecting to the LDAP server running on port 8399. Anyone faced the same. It would be a great help if you can share how did you fix it.

hmmm, i can't make it work. No matter what i fill in the login form it just refreshes. can i get this to work in eclipse? is the following print in console ok: Property 'userDn' not set - anonymous context will be used for read-write operations

@mrunalizode3328

4 жыл бұрын

Good to see someone also facing same issues. I'm not sure why this is not working even though I copied each and every word including the class names! Maybe some newer versions require different configurations. Let me know if it works for you.

This is a good video. But it only mentioned LDAP authentication. It did not say how to do LDAP authorization, mapping the AD group to the role.

When i give username as ben and password as benspassword. I'm getting Bad Credentials error. Can anyone tell me why is that coming?

@RaghunandanChakravarthy

4 жыл бұрын

In your configure method, use ".passwordEncoder(new BCryptPasswordEncoder())" instead of the deprecated API. If you check the ldif file, you can see that the {SHA} is removed from the password field. So SHA might not work now

I need to ask what if I need to change the username and password, specially the password? you using the username and password from the page in the internet but you didn't show how we can change our specific password

how can we get userid and password after logged in succssfully

can anyone tell me what theme did he use?

What are the benefits of using LDAP?

It is possible that this example is no longer works with LdapShaPasswordEncoder, you might want to try with BCryptPasswordEncoder.

Hi, while trying to login I'm getting below exception: org.springframework.security.authentication.InternalAuthenticationServiceException: localhost:8389; nested exception is javax.naming.CommunicationException: localhost:8389 [Root exception is java.net.ConnectException: Connection refused (Connection refused)]. Basically, my LDAP server instance is not running. How do I verify that it is up before trying to access it. Any suggestion would be appreciated.

@muditshukla

4 жыл бұрын

You could have a typo in application.properties. Change the entry spring.ldap.embedded.base.dn=dc=springframework,dc=org TO spring.ldap.embedded.base-dn=dc=springframework,dc=org Mine worked after this change.

@sanalsz

Жыл бұрын

did you fix it? I am getting this error! Edit: it was a typo in application.proerties file, I mispelled "spring" and then had to replace LdapShaPasswordEncoder with BCryptPasswordEncoder

If anyone is trying, the code won't work !! How it will work is by : Replacing new "LdapShaPasswordEncoder()" with "new BCryptPasswordEncoder()"

I'm getting connection timed out error ..can anyone help me

I tried to follow your example using LdapShaPasswordEncoder() and got bad credentials. As an update to this excellent video tutorial, I just want to point out that nowadys we've to use other password encoder to make the login system work at all. Thank you and keep up the good work!

@hiddenstranger00

Жыл бұрын

pls use .passwordEncoder(new BCryptPasswordEncoder())

for those still having bad credentials errors even after switching to bcrypt in the config class try to replace the password for ben in the ldif file by a bcrypt hash you can make from "benspassword" at bcrypt-generator.com, worked for me let's hope it does for y'all

@pramodkumar-fo5sy

2 жыл бұрын

Thanks man, this is worked for me.:)

Waiting for JWT tutorial

@Java.Brains

4 жыл бұрын

Check out the Spring Security playlist on my channel. I’ve already put out a few tutorials on JWT and its implementation

great, but that ctr+c -> ctl+v thing is not that good when you watch tutorial, it's more interesting when it's written with video or at least with provided github link where you can do ctr+c -> ctr+v thing too

For people getting the Bad Credential error change the password encoder to BCryptPasswordEncoder. follow link - spring.io/guides/gs/authenticating-ldap/

I have followed this tutorial and it has some amazing information. But I am unable to login. The login page just refreshes after entering the username and password. I am not sure why it is so. I have replaced the password encoder to BCryptPasswordEncoder since the LdapPasswordEncoder is deprecated. Can anyone help? Is the newer version have some configuration changes that I am missing?

@bookread5208

3 жыл бұрын

I am facing same issue :(

@IvanRandomDude

3 жыл бұрын

Well, this was 6 months ago but for those who have the same problem now: The problem was that you changed password encoder but still used the same hashes and passwords that were generated by Ldap password encoder. Every encoder generates hashes in different way so benpassword encoded by BCrypt is totally different than one you get from ldap encoder. The solution was to generate new password hashes using BCrypt and replace old hashes. But at this point official tutorial on spring.io is updated to use BCrypt so new learners should not have this issue anyway.

@mrunalizode3328

3 жыл бұрын

@@IvanRandomDude thank you!

@sammaiahgunje946

2 жыл бұрын

@@IvanRandomDude yes you are correct initially i was used the old password encoder and faced Bad credentials issue. Later I replaced with BCryptPasswordEncoder instead of LdapShaPasswordEncoder and it is working fine now. Thanks for your information @ivan

May you please share your code after these tutorials. They are so good but we need the code

When I entered uid and password. it gives bad credentials..please solve my issue

@Anirban931

3 жыл бұрын

hey, was your issue resolved? I too am facing the same

@pramodkumar-fo5sy

2 жыл бұрын

@@Anirban931 i am facing same issue, very bad.