Thanks you.
When requesting with CAS protocol version 3 it does indeed work.
I was under the impression, that version 2 already supports attribute
release, since the Shibboleth CAS support states, that it does support
CAS v2 and it does attribute release.
So I kind of just assumed that this is part of v2, but I guess
Shibboleth does some non-standard stuff there.
On 30.06.2017 14:33, Dmitriy Kopylenko wrote:
If your client is using CAS protocol version 2 for service ticket
validation, they will not receive any attributes as protocol v2 does
not support it. Switch to protocol version 3 in order to receive
principal attributes.
https://apereo.github.io/cas/5.1.x/protocol/CAS-Protocol.html
Cheers,
D.
From: D. H. <[email protected]> <mailto:[email protected]>
Reply: [email protected] <[email protected]>
<mailto:[email protected]>
Date: June 30, 2017 at 7:25:29 AM
To: CAS Community <[email protected]> <mailto:[email protected]>
Subject: [cas-user] Release Attributes from LDAP Authentication
Hi,
I want to configure CAS 5.1 to release some attributes from the LDAP
authentication source.
This is an excerpt from my cas.properties with the relevant
properties I configured:
|cas.authn.ldap[0].enhanceWithEntryResolver=true
cas.authn.ldap[0].dnFormat=uid=%s,ou=people,dc=example,dc=org
cas.authn.ldap[0].principalAttributeId=uid
cas.authn.ldap[0].principalAttributeList=cn,sn
cas.authn.attributeRepository.defaultAttributesToRelease=cn,sn,mail
|
According to the log file, these rules do apply:
2017-06-30 13:19:24,517 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy]
- <Default attributes for release are: [[cn, sn, mail]]>
2017-06-30 13:19:24,517 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy]
- <Found and added default attribute for release: [cn]>
2017-06-30 13:19:24,517 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy]
- <Found and added default attribute for release: [sn]>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy]
- <Default attributes found to be released are [{cn=Test Benutzer,
sn=Benutzer}]>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy]
- <Adding default attributes first to the released set of attributes>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy]
- <Adding policy attributes to the released set of attributes>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy]
- <Final collection of attributes allowed are: [{cn=Test Benutzer,
LdapAuthenticationHandler.test.benutzer=uid=test.benutzer,ou=people,dc=example,dc=org,
sn=Benutzer}]>
2017-06-30 13:19:24,518 DEBUG
[org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider] -
<Returning the default principal id [test.benutzer] for username.>
However, here is what my client receives:
Response Body:
4323 .| | | | | | <cas:serviceResponse
xmlns:cas='http://www.yale.edu/tp/cas'>
4323 .| | | | | | <cas:authenticationSuccess>
4323 .| | | | | |
<cas:user>test.benutzer</cas:user>
4323 .| | | | | | </cas:authenticationSuccess>
4323 .| | | | | | </cas:serviceResponse>
So, no attributes. Clearly I am missing something, I just can not
seem to figure out what.
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines:
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it,
send an email to [email protected]
<mailto:[email protected]>.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/65d0e38c-d4ec-410e-b47d-0be81d52f9b2%40apereo.org
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/65d0e38c-d4ec-410e-b47d-0be81d52f9b2%40apereo.org?utm_medium=email&utm_source=footer>.
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/2643bfb3-3d70-3de7-08c5-e211a738850c%40gmail.com.
