I'm just trying different configurations to see if there is a workaround for the fact that I can authenticate, pull the attributes, but authentication fails.
>From the cas.log 2013-07-11 15:22:50,439 INFO [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - LdapAuthenticationHandler failed authenticating jmdanner+password It appears that something in the policy based authentication manager doesn't know that the auth succeeded. Do you think using the required handler policy would make a difference? Mearl Danner Systems Programmer Samford University Technology Services http://www.samford.edu -----Original Message----- From: Marvin S. Addison [mailto:[email protected]] Sent: Thursday, July 11, 2013 2:54 PM To: [email protected] Subject: Re: [cas-dev] Cas 4.0 ldap configuration > <bean id="ldapPrincipalResolver" > class="org.jasig.cas.authentication.principal.CredentialsToLdapAttributePrincipalResolver"> ... > Is there an example available on how to configure the > ldapPrincipalResolver? Not at present. I attempted to provide a sample, but the configuration wasn't clear to me. I made a note that Misagh needs to review and provide an example. Maybe he'll jump in here. That said the authentication docs are very much a work in progress. I tried to emphasize that principal resolvers are now optional in the Principal Resolution section [1]: PrincipalResolver Versus AuthenticationHandler The principal resolution machinery provided by AuthenticationHandler components should be used in preference to PrincipalResolver in any situation where the former provides adequate functionality. You should verify that you need to wire up a PrincipalResolver. If you simply want to authenticate and pull attributes from an entry, presumably the one corresponding to the authenticated user, the LdapAuthenticationHandler provides that functionality with no further components. I appreciate your working with CAS 4 and drawing some attention to the documentation. It's time well spent to try to support you. Let me know if you have further questions. M [1] http://jasig.github.io/cas/installation/Configuring-Authentication-Components.html#principal_resolution -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
