Guessing here: You are and have been running the same exact code for a number of years. So my bet would be that something else changed external to CAS, or is acting up somehow, recently. I’d look into your LDAP/CAS logs for the times the attribute is not being released and trace the activity. Also you should narrow down the scope. Is that the only attribute that is not received? Do all fail to be released? Does it fail for a particular user id? What values are there for the failing case? What does your management app use for storage? Etc. The fewer variables, the better.
-- Misagh From: Matt S. <[email protected]> Reply: Matt S. <[email protected]> Date: March 2, 2016 at 6:10:46 PM To: CAS Community <[email protected]> CC: [email protected] <[email protected]> Subject: [cas-user] CAS 3.5.3 Intermittent Attribute Issues Hi, We originally set up CAS server 3.5.3 as a development server before 4 was released and we have been running version 3.x for 1-2 years without any issue. However, recently this server started to have an issue with one of the attributes that is released. Here are some specifications: We are reading the employeeId attribute and using LDAP for authentication. The service authorization has been setup to release one or more attributes to all of the web apps that are developed in a particular location on a development server. CAS and web app servers are using Tomcat 6 The attribute mentioned above recently began to not show up sometimes in the CAS response, even though the user account does have the attribute set in AD. Some things we have tried to resolve this each time it happens include: Update the service definition in the CAS Service Management web app to not release the attribute and then update it again to release it. This seems to work sometimes, but not always. Clear the browser cache and then access the web app again This also does not work every time. Any suggestions would be extremely appreciated! Thanks, Matt -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
