Mat Lowery (Migrated from SEC-1222) said:
LdapAuthenticationProvider provides a constructor that does not require an LdapAuthoritiesPopulator. LdapUserDetailsService should provide such a constructor as well. The reason is that the LdapAuthoritiesPopulator might not be necessary since roles might be fetched via the UserDetailsContextMapper. LdapAuthenticationProvider uses a NullAuthoritiesPopulator internally. This could be re-used.