Hi,

I am trying to pass attributes from LDAP authorization source to app using
CAS 2.0 protocol.

So far, only username is passed.



It seams that my configuration is wrong. Please help me correct it.

I used Attributes release
<https://jasig.github.io/cas/4.1.x/integration/Attribute-Release.html> page
as guidelines.



All changes I did so far:



HTTPSandIMAPS-10000001.json:

I replaced attibuteReleasePolicy with

    "@class" : "org.jasig.cas.services.ReturnMappedAttributeReleasePolicy",



pom.xml:

I added dependancy for LDAP and SAML (as someone suggested that i tis
needed, althrough I don’t need SAML support)



cas.properties:

I added LDAP parameters



deploymentConfigContext.xml:

I replaced proxyAuthenticationHandler and primaryAuthenticationHandler with

<entry key-ref="ldapAuthenticationHandler"
value-ref="usernamePasswordCredentialsResolver" />

I defined usernamePasswordCredentialResolver with

    <bean id="usernamePasswordCredentialsResolver"

      class="org.jasig.cas.authentication.principal.BasicPrincipalResolver"
/>

And I defined LDAP auth handler (as in LDAP Requiring Authenticated Search
<https://jasig.github.io/cas/4.1.x/installation/LDAP-Authentication.html>)
with principalAttributeMap filled with all attribites required for passing
along to app



What am I missing?





Configuration itself is really simple, just LDAP support and one connected
app, and that’s all I need right now.

--

s pozdravem



*Petr Gašparík*
solution architect

gsm: [+420] 603 523 860
e-mail: *[email protected] <[email protected]>*





AMI Praha a.s.
Pláničkova 11
162 00 Praha 6
tel.: [+420] 274 783 239
web: www.ami.cz





[image: AMI Praha a.s.]


[image: AMI Praha a.s.] <http://www.skyidentity.com/>


Textem tohoto e-mailu podepisující neslibuje uzavřít ani neuzavírá za
společnost AMI Praha a.s.
jakoukoliv smlouvu. Každá smlouva, pokud bude uzavřena, musí mít výhradně
písemnou formu.

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.

Reply via email to