何时使用 spring ldap 身份验证
我是春季安全新手 我读了一些有关它的文章,但不知道何时使用它。 所以我想知道什么时候使用spring LDAP身份验证 如果有人能给我一个用例或例子,那就太好了 提前致谢。
i am new to spring security
i read some articles about it, but couldn't find out when to use it.
so i want to know when to use spring LDAP authentication
and it would be nice if anyone can give me a use case or example
thanks in advance.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
正如其他人所指出的,这不是一个 Spring Security 问题,而是一个一般的架构问题。
LDAP 和 RDBMS 之间的基本区别在于 LDAP 是分层的,而 DB 是关系的(因此称为“R”DBMS)。 LDAP 特别适合用作用户存储,因为用户本质上通常是分层的。示例:
Microsoft 的Active Directory (AD) 和OpenLDAP 是两个著名的示例。
不过,无论您使用哪一个作为数据存储,都可能不再是哪个数据存储“更好”(这是有争议的)的问题,而是您的环境是什么样子的问题。如果您已经有了 LDAP,为什么不使用它,对于数据库也是如此。无论哪种情况,您都需要拥有适当的基础设施 - 服务器、管理员、备份等。
归根结底,这取决于您的具体情况。我通常使用数据库作为我的 Spring Security 数据存储,因为我总是有一个数据库。
As others have noted, this is less a Spring Security question and more of a general architectural question.
A basic difference between an LDAP and an RDBMS is that an LDAP is hierarchical, whereas a DB is relational (hence the name "R"DBMS). LDAPs are particularly well-suited as user stores because users are often hierarchical in nature. Example:
Microsoft's Active Directory (AD) and OpenLDAP are two well-known examples.
Whichever one you use as your data store, though, will probably be less an issue of which data store is "better" (which is debatable), but rather what your environment looks like. If you already have an LDAP in place, why not use it, and the same holds true for a DB. In either case you need to have the appropriate infrastructure in place - servers, admins, backups, etc.
At the end of the day, it depends on what works in your situation. I have generally used DBs as my Spring Security data stores, as I always have a DB.