From 89cde2507df8f324d8ddf4274a9b41a3a7e5ee58 Mon Sep 17 00:00:00 2001
From: Luke Taylor <luke.taylor@springsource.com>
Date: Fri, 7 Dec 2007 16:04:43 +0000
Subject: [PATCH] SEC-594: Set password on UserDetails object returned by
 BindAuthenticator.

---
 .../providers/ldap/authenticator/BindAuthenticator.java          | 1 +
 1 file changed, 1 insertion(+)

diff --git a/core/src/main/java/org/acegisecurity/providers/ldap/authenticator/BindAuthenticator.java b/core/src/main/java/org/acegisecurity/providers/ldap/authenticator/BindAuthenticator.java
index 100c7e45d0..e1453779e8 100644
--- a/core/src/main/java/org/acegisecurity/providers/ldap/authenticator/BindAuthenticator.java
+++ b/core/src/main/java/org/acegisecurity/providers/ldap/authenticator/BindAuthenticator.java
@@ -87,6 +87,7 @@ public class BindAuthenticator extends AbstractLdapAuthenticator {
             LdapUserDetailsImpl.Essence user = (LdapUserDetailsImpl.Essence) template.retrieveEntry(userDn,
                     getUserDetailsMapper(), getUserAttributes());
             user.setUsername(username);
+            user.setPassword(password);
 
             return user.createUserDetails();
         } catch (BadCredentialsException e) {