Hi,
I want to configure CAS 5.1 to release some attributes from the LDAP
authentication source.
This is an excerpt from my cas.properties with the relevant properties I
configured:
cas.authn.ldap[0].enhanceWithEntryResolver=true
cas.authn.ldap[0].dnFormat=uid=%s,ou=people,dc=example,dc=org
cas.authn.ldap[0].principalAttributeId=uid
cas.authn.ldap[0].principalAttributeList=cn,sn
cas.authn.attributeRepository.defaultAttributesToRelease=cn,sn,mail
According to the log file, these rules do apply:
2017-06-30 13:19:24,517 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] -
<Default attributes for release are: [[cn, sn, mail]]>
2017-06-30 13:19:24,517 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] -
<Found and added default attribute for release: [cn]>
2017-06-30 13:19:24,517 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] -
<Found and added default attribute for release: [sn]>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] -
<Default attributes found to be released are [{cn=Test Benutzer,
sn=Benutzer}]>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] -
<Adding default attributes first to the released set of attributes>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] -
<Adding policy attributes to the released set of attributes>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] -
<Final collection of attributes allowed are: [{cn=Test Benutzer,
LdapAuthenticationHandler.test.benutzer=uid=test.benutzer,ou=people,dc=example,dc=org,
sn=Benutzer}]>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider] -
<Returning the default principal id [test.benutzer] for username.>
However, here is what my client receives:
Response Body:
4323 .| | | | | | <cas:serviceResponse
xmlns:cas='http://www.yale.edu/tp/cas'>
4323 .| | | | | | <cas:authenticationSuccess>
4323 .| | | | | |
<cas:user>test.benutzer</cas:user>
4323 .| | | | | | </cas:authenticationSuccess>
4323 .| | | | | | </cas:serviceResponse>
So, no attributes. Clearly I am missing something, I just can not seem to
figure out what.
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/65d0e38c-d4ec-410e-b47d-0be81d52f9b2%40apereo.org.
