authenticationUserDetailsS​​ervice使用Spring安全篩選與CAS的錯誤

Question

我是Spring安全新手，我在web.xml文件中設置了DelegatingFilterProxy Spring安全篩選器。 我想在沒有受限制的頁面或目錄時設置CAS認證的彈簧安全過濾器。 每個網頁有兩個部分受保護（登錄可以看到它）和不受保護（匿名），並且頁面頂部還有一個登錄鏈接（到CAS遠程服務器）。 我越來越嚴重：由 的AuthenticationUserDetailsS​​ervice來做錯誤listenerStart必須設置錯誤

我使用Spring MVC 3.0 +（+的tomcat6 + APACHE2.2 jk_module）網，其實現的Spring Security + CAS工作過良好的應用
感謝， MK

錯誤

org.apache.catalina.core.StandardContext listenerStart 
      SEVERE: Exception sending context initialized event 
     to listener instance of class org.springframework.web.context.ContextLoaderListener 
      org.springframework.beans.factory.BeanCreationException: 
     Error creating bean with name 'casFilter' defined in ServletContext resource [/WEB-INF/service-context.xml]: 
    Cannot resolve reference to bean 'authManager' while setting bean property 'authenticationManager'; 
     nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 
'org.springframework.security.authenticationManager': Cannot resolve reference to bean 'casAuthProvider' while setting bean property 'providers' 
with key [0]; nested exception is org.springframework.beans.factory.BeanCreationException: 
Error creating bean with name 'casAuthProvider' defined in ServletContext resource [/WEB-INF/service-context.xml]: Invocation of init method failed; nested exception is java.lang.IllegalArgumentException: An authenticationUserDetailsService must be set 

的web.xml文件：

<?xml version="1.0" encoding="UTF-8"?> 
<web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" 
xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" 
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5"> 

    <context-param> 
    <param-name>contextConfigLocation</param-name> 
    <param-value> 
    /WEB-INF/service-context.xml 
    /WEB-INF/security-context.xml 
    </param-value> 
    </context-param> 

    <listener> 
    <listener-class> 
     org.springframework.web.context.ContextLoaderListener 
    </listener-class> 
    </listener> 

    <!-- Spring Security filter Configuration --> 
    <filter> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class> 
    </filter>  
    <filter-mapping> 
     <filter-name>springSecurityFilterChain</filter-name> 
     <url-pattern>/*</url-pattern> 
    </filter-mapping> 

    <servlet> 
     <servlet-name>dispatcher</servlet-name> 
     <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> 
     <init-param> 
     <param-name>contextConfigLocation</param-name> 
     <param-value>/WEB-INF/dispatcher-servlet.xml</param-value> 
     </init-param> 
     <load-on-startup>1</load-on-startup> 
</servlet>  

安全的context.xml

 <?xml version="1.0" encoding="UTF-8"?> 
<beans:beans xmlns="http://www.springframework.org/schema/security" 
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
     xmlns:beans="http://www.springframework.org/schema/beans" 
     xsi:schemaLocation=" 
     http://www.springframework.org/schema/beans 
     http://www.springframework.org/schema/beans/spring-beans-3.0.xsd 
     http://www.springframework.org/schema/security 
     http://www.springframework.org/schema/security/spring-security-3.0.xsd"> 

    <http entry-point-ref="casEntryPoint" use-expressions="true"> 
     <intercept-url pattern="/" access="permitAll"/> 
      <custom-filter ref="casFilter" position="CAS_FILTER" /> 
     <logout logout-success-url="https://remote-cas.com/cas/logout"/> 
    </http> 

    <authentication-manager alias="authManager"> 
     <authentication-provider ref="casAuthProvider" /> 
    </authentication-manager>  

</beans:beans> 

和serivce-context.xml的

<?xml version="1.0" encoding="UTF-8"?> 
    <beans xmlns="http://www.springframework.org/schema/beans"  
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
     xmlns:jee="http://www.springframework.org/schema/jee" 
     xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.0.xsd http://www.springframework.org/schema/jee http://www.springframework.org/schema/jee/spring-jee-3.0.xsd"> 

<!-- for security CAS --> 
    <bean id="serviceProperties" lass="org.springframework.security.cas.ServiceProperties"> 
      <property name="service" value="http://localhost/myapp/index.jsp"/> 
      <property name="sendRenew" value="false"/> 
     </bean> 

<bean id="casEntryPoint" class="org.springframework.security.cas.web.CasAuthenticationEntryPoint"> 
    <property name="loginUrl" value="https://remote-cas.com/cas/login"/> 
    <property name="serviceProperties" ref="serviceProperties"/> 
</bean> 

    <bean id="casFilter"  class="org.springframework.security.cas.web.CasAuthenticationFilter"> 
     <property name="authenticationManager" ref="authManager"/> 
    <property name="authenticationSuccessHandler"> 
     <bean class="org.springframework.security.web.authentication.SavedRequestAwareAuthenticationSuccessHandler" /> 
    </property> 
    </bean> 

    <bean id="casAuthProvider" class="org.springframework.security.cas.authentication.CasAuthenticationProvider"> 
    <property name="ticketValidator" ref="ticketValidator"/> 
    <property name="serviceProperties" ref="serviceProperties"/> 
    </bean> 

    <bean id="ticketValidator" class="org.jasig.cas.client.validation.Saml11TicketValidator"> 
    <constructor-arg value="https://localhost/myapp/index.jsp" /> 
    <property name="encoding" value="utf8" /> 
    </bean> 

Answer 1

錯誤消息幾乎指甲它的一小部分。你CasAuthenticationProvider缺少到另一個bean的引用這使得它進入您的應用程序的用戶信息：

<bean id="casAuthProvider" class="org.springframework.security.cas.authentication.CasAuthenticationProvider"> 
    <property name="ticketValidator" ref="ticketValidator"/> 
    <property name="serviceProperties" ref="serviceProperties"/> 
    <!-- You are missing this --> 
    <property name="authenticationUserDetailsService"> 
     <bean 
      class="org.springframework.security.core.userdetails.UserDetailsByNameServiceWrapper"> 
      <constructor-arg ref="userService" /> 
     </bean> 
    </property> 
</bean> 

其中userService是UserDetailsService實例。查看CAS Sample application作爲一個工作示例。