Sp/ldap group search filter property

CHANGELOG.md

@@ -4,6 +4,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ## 2.3.0 (UNRELEASED)
 #### New Features
+- [ISSUE-166](https://github.com/SourceLabOrg/kafka-webview/issues/166) Add groupSearchFilter property to specify the filter used to list LDAP group membership.
 - [MultiThreaded Consumer](https://github.com/SourceLabOrg/kafka-webview/pull/170) Add multi-threaded kafka consumer.  
 
 Previously a single consumer instance was used when paging through messages from a topic.  Each partition was consumed sequentially in order to provide consistent results on each page.  For topics with a large number of partitions this could take considerable time.
@@ -38,6 +39,12 @@ If you run into issues, you can disable the new implementation and revert to the
 #### New Features
 - [ISSUE-142](https://github.com/SourceLabOrg/kafka-webview/issues/142) Ability to search various datatables within the Cluster Explorer section of the application.
 
+#### Bug fixes
+- [ISSUE-143](https://github.com/SourceLabOrg/kafka-webview/issues/143) Fix URLs for stream connections when running Kafka-Webview behind a reverse proxy with a URL Prefix.
+
+#### New Features
+- [ISSUE-142](https://github.com/SourceLabOrg/kafka-webview/issues/142) Ability to search various datatables within the Cluster Explorer section of the application.
+
 ## 2.1.4 (02/19/2019)
 
 - [ISSUE-136](https://github.com/SourceLabOrg/kafka-webview/issues/136) Fix URLs when running Kafka-Webview behind a reverse proxy with a URL prefix.  You can configure Kafka WebView by setting the following configuration option in your config.yml file:

README.md

@@ -166,6 +166,7 @@ app:
       ## Where to find user group membership
       groupSearchBase: "ou=groups"
       groupRoleAttribute: "cn"
+      groupSearchfilter = "(uniqueMember={0})"
 
       ## How passwords are validated, must implement PasswordEncoder interface
       passwordEncoderClass: "org.springframework.security.crypto.password.LdapShaPasswordEncoder"

kafka-webview-ui/src/assembly/distribution/config.yml

@@ -54,6 +54,7 @@ app:
       ## Where to find user group membership
       groupSearchBase: "ou=groups"
       groupRoleAttribute: "cn"
+      groupSearchFilter: "(uniqueMember={0})"
 
       ## How passwords are validated, must implement PasswordEncoder interface
       passwordEncoderClass: "org.springframework.security.crypto.password.LdapShaPasswordEncoder"

kafka-webview-ui/src/main/java/org/sourcelab/kafka/webview/ui/configuration/LdapAppProperties.java

@@ -57,6 +57,9 @@ public class LdapAppProperties {
     @Value("${app.user.ldap.groupRoleAttribute:}")
     private String groupRoleAttribute;
 
+    @Value("${app.user.ldap.groupSearchFilter:(uniqueMember={0})}")
+    private String groupSearchFilter;
+
     /**
      * Ldap server url.
      */
@@ -108,6 +111,10 @@ public String getGroupSearchBase() {
         return groupSearchBase;
     }
 
+    public String getGroupSearchFilter() {
+        return groupSearchFilter;
+    }
+
     public String getUrl() {
         return url;
     }
@@ -159,6 +166,7 @@ public String toString() {
             + ", userDnPattern='" + userDnPattern + '\''
             + ", groupSearchBase='" + groupSearchBase + '\''
             + ", groupRoleAttribute='" + groupRoleAttribute + '\''
+            + ", groupSearchFilter='" + groupSearchFilter + '\''
             + ", url='" + url + '\''
             + ", passwordAttribute='" + passwordAttribute + '\''
             + ", passwordEncoderClass='" + passwordEncoderClass + '\''

kafka-webview-ui/src/main/java/org/sourcelab/kafka/webview/ui/configuration/SecurityConfig.java

@@ -147,6 +147,7 @@ private void setupLdapUserAuthentication(final AuthenticationManagerBuilder auth
             .userDnPatterns(ldapAppProperties.getUserDnPattern())
             .groupRoleAttribute(ldapAppProperties.getGroupRoleAttribute())
             .groupSearchBase(ldapAppProperties.getGroupSearchBase())
+            .groupSearchFilter(ldapAppProperties.getGroupSearchFilter())
             .contextSource()
             .url(ldapAppProperties.getUrl())
             .managerDn(managerDn)

kafka-webview-ui/src/main/resources/config/base.yml

@@ -61,6 +61,7 @@ app:
       userDnPattern: "uid={0},ou=people"
       groupSearchBase: "ou=groups"
       groupRoleAttribute: "cn"
+      groupSearchFilter: "(uniqueMember={0})"
       passwordAttribute: "userPassword"
       passwordEncoderClass: "org.springframework.security.crypto.password.LdapShaPasswordEncoder"
       adminGroups: ""