Thank you Daniel, I set principalAttributePassword to empty, and now, CAS use PooledBindAuthenticationHandler!
Le mercredi 31 mai 2017 16:48:03 UTC-4, dfisher a écrit : > > On Wed, May 31, 2017 at 10:19 AM, Olivier Lamarche <[email protected] > <javascript:>> wrote: > >> >> 2017-05-31 09:49:03,075 DEBUG [org.ldaptive.auth.Authenticator] - >> <authenticate >> dn=cn=inf10771,ou=xxxxxx,ou=xxxxxx,ou=individuel,dc=xxxxxxxx,dc=com with >> request=[org.ldaptive.auth.AuthenticationRequest@518364974::user=[org.ldaptive.auth.User@1810991362::identifier= >> [email protected] <javascript:>, context=null], returnAttributes=[uid, >> mail, givenName, sn, cn]]> >> 2017-05-31 09:49:03,077 DEBUG >> [org.ldaptive.auth.PooledCompareAuthenticationHandler] - <authenticate >> criteria=[org.ldaptive.auth.AuthenticationCriteria@1112853084::dn=cn=inf10771,ou=xxxxxx,ou=xxxxxx,ou=individuel,dc=xxxxxxxx,dc=com, >> >> authenticationRequest=[org.ldaptive.auth.AuthenticationRequest@518364974::user=[org.ldaptive.auth.User@1810991362::identifier= >> [email protected] <javascript:>, context=null], returnAttributes=[uid, >> mail, givenName, sn, cn]]]> >> >> > The PooledCompareAuthenticationHandler component does not support salted > hashes. I don't know which set of CAS properties wires up the ldaptive > authentication handler, but you want to use the > PooledBindAuthenticationHandler. This way your directory will handle the > work of comparing salted hashes. > > --Daniel Fisher > > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/55e4331e-382b-4145-9321-ad447b0ac3a6%40apereo.org.
