Dear all,

I would like to understand the queryAttributeMapping in the
LdapPersonAttributeDao configured in my cas server. Currently my
BindLdapAuthenticationHandler has its filter set to commonName(cn) for
filtering usersand my queryAttributeMapping has its mapping to cn.

<property name="queryAttributeMapping">
                <map>
                        <entry key="username" value="cn" />
                </map>
        </property>

If i want to make an attempt to authenticate users  whose username is
their email and i am mapping the filter in
BindLDapAuthenticationHandler to mail as below:

<bean class="org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler"
      p:filter="mail=%u"
      p:searchBase="dc=example,dc=com"
      p:contextSource-ref="contextSource"/>

but i retain the queryAttributeMapping to "cn" as above, should it not
be throwing some kind of error. What i observe is that the Principal
is authenticated(yeah it will be) but no trace of error for the
attributeRepository not populated. What is the way to see the query
that gets executed by the attributeRepository?  Please help me
understand this logic.

Regards,
Mckenzie

-- 
You are currently subscribed to cas-dev@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to