OpenKM.xml

  <security:authentication-manager alias="authenticationManager">
    <security:authentication-provider ref="ldapAuthProvider" />
  </security:authentication-manager>

  <beans:bean id="ldapAuthProvider" class="org.springframework.security.ldap.authentication.LdapAuthenticationProvider">
    <beans:constructor-arg ref="ldapBindAuthenticator"/>
    <beans:constructor-arg ref="ldapAuthoritiesPopulator"/>
  </beans:bean>

  <beans:bean id="contextSource" class="org.springframework.security.ldap.DefaultSpringSecurityContextSource">
    <!-- MS Active Directory -->
    <beans:constructor-arg value="ldap://1.1.1.1:389/ou=MyBusiness,dc=XXXXXX,dc=XXX"/>
    <beans:property name="userDn" value="CN=LDAP Search,CN=Users,DC=XXXXXX,DC=XXX"/>
    <beans:property name="password" value="XXXXXXXXXXXXXX"/>
    <beans:property name="baseEnvironmentProperties">
      <beans:map>
        <beans:entry key="java.naming.referral" value="follow" />
      </beans:map>
    </beans:property>
  </beans:bean>

  <beans:bean id="ldapBindAuthenticator" class="org.springframework.security.ldap.authentication.BindAuthenticator">
    <beans:constructor-arg ref="contextSource"/>
    <beans:property name="userSearch" ref="userSearch"/>
  </beans:bean>

  <beans:bean id="userSearch" class="org.springframework.security.ldap.search.FilterBasedLdapUserSearch">
    <!-- MS Active Directory -->
    <!-- user-search-base; relative to base of configured context source -->
    <beans:constructor-arg index="0" value="" />
    <!-- user-search-filter -->
    <beans:constructor-arg index="1" value="(sAMAccountName={0})" />
    <beans:constructor-arg index="2" ref="contextSource" />
  </beans:bean>

  <beans:bean id="ldapAuthoritiesPopulator" class="org.springframework.security.ldap.userdetails.DefaultLdapAuthoritiesPopulator">
    <beans:constructor-arg ref="contextSource" />
    <beans:constructor-arg value="" />
    <beans:property name="groupSearchFilter" value="(member={0})"/>
    <beans:property name="groupRoleAttribute" value="CN" />
    <beans:property name="rolePrefix" value=""/>
    <beans:property name="searchSubtree" value="true"/>
    <beans:property name="convertToUpperCase" value="false"/>
    <beans:property name="ignorePartialResultException" value="true"/>
  </beans:bean>