当身份验证过滤器完成其处理时，这些过滤器将把请求和响应对象发送到应用程序中配置的拦截过滤器。
When authentication filters have finished processing, they pass request and response objects to the interceptor filter configured in your application.
在LDAP服务器上，可以通过修改身份验证过滤器，只列出所允许的ldap字段名称，也可以实现类似的功能。
Similar functionality is possible with an LDAP server by modifying the authentication filter to list only the allowed LDAP field names.
默认的LDAP身份验证过滤器是 (|(cn=%*)(|(&(sn=%a)(givenname=%z))(&(sn=%z)(givenname=%a))))。
The default LDAP authentication filter is (|(cn=%*)(|(&(sn=%a)(givenname=%z))(&(sn=%z)(givenname=%a)))).
身份验证成功之后，CASservlet过滤器可以检查ticket，并将用户名作为参数传递给请求的应用程序。
Once authentication is successful, the CAS servlet filter can validate the ticket and pass the username as a parameter to the requested application.
有的过滤器甚至根本不执行任何处理(比如，如果APF发现一个到来的请求没有要求身份验证，它可能会立即终止其处理)。
A filter may even choose to not perform any processing at all (for example, APF might terminate its processing upon discovering that an incoming request did not require authentication).
您需要在APF成功执行身份验证后对拦截过滤器进行配置，以使其发挥作用。
You need to configure interceptor filters to act after APF has performed a successful authentication.
比如，一个身份验证处理过滤器需要一个身份验证管理器选择一个合适的身份验证提供者。
For example, an authentication processing filter requires an authentication manager to select an appropriate authentication provider.
回忆一下，您在本系列第 1部分的配置身份验证处理过滤器 中曾对 authenticationManager属性进行了配置。
Recall that you configured the authenticationManager property while configuring the authentication processing filter in the first article of this series.
应用程序配置——DSAPI过滤器如何用于提供较强的身份验证和授权控制？
Application configuration a "how a DSAPI filter was used to provide stronger authentication and authorization controls."
正如我前面提到的一样，Acegi使用安全过滤器为企业应用程序提供身份验证和授权服务。
As I previously mentioned, Acegi USES security filters to provide authentication and authorization services to enterprise applications.
通常，基于用户类型(或身份验证和授权)或页面功能将servlet过滤器用于控制应用程序流。
In general, servlet filters are used to control the flow of the application based on user type (or authentication and authorization) or page functionality.
下一节将进一步介绍 Acegi的身份验证处理过滤器，了解新配置的bean是如何管理身份验证过程的。
The next section digs deeper into Acegi's Authentication Processing Filter to see how its newly configured beans manage the process of authentication.
要实施更强的互联网口令策略，可以开发定制的身份验证DominoSecurityAPI (DSAPI)过滤器，或者可以依据LDAP目录进行身份验证。
To enforce a stronger Internet password policy, you can develop a custom authentication Domino Security API (DSAPI) filter, or use an LDAP directory for authentication.
这个过滤器通常转换为根据全名进行身份验证(例如：johnDoe)。
This filter typically translates to authentication by full name (for example, John Doe).
身份验证器bean使用搜索过滤器查找不能够通过DN 模式构造 DN 进行身份验证的用户。
The authenticator bean uses search filters to find users that it cannot authenticate by constructing a DN from the DN patterns.
要实施较强Internet口令策略，可以开发定制的身份验证DSAPI过滤器，或者可以依据LDAP目录进行身份验证。
To enforce a stronger Internet password policy, you can develop a custom authentication DSAPI filter, or authentication can occur against an LDAP directory.
在请求执行之前，Acegi使用servlet过滤器对用户进行身份验证。
Acegi USES servlet filters to authenticate users before request processing.
在请求执行之前，Acegi使用servlet过滤器对用户进行身份验证。
Acegi USES servlet filters to authenticate users before request processing.
应用推荐