Thanks that answers my question, I am setting up 5.1.2. Jason
From: [email protected] [mailto:[email protected]] On Behalf Of Misagh Moayyed Sent: August 30, 2017 11:58 AM To: [email protected] Subject: Re: [cas-user] casRegisteredService schema? There isnt a fixed schema, (though you dont mention what CAS version). The fields are not mapped 1-1. You define an attribute where CAS transforms the entire service record as JSON in there and saves it as a whole, along with maybe another attribute that tracks the service id. That's all. 1-1 mapping is not sustainable anymore. ________________________________ From: "Jason Castor" <[email protected]<mailto:[email protected]>> To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Sent: Wednesday, August 30, 2017 11:49:18 AM Subject: [cas-user] casRegisteredService schema? Hi, I am setting up an LDAP service registry, and I am wondering if there is a standard schema definition for casRegisteredService out there? Searching through the list I find someone’s attribute/object definitions (copied below), but I am not sure if those came from the docs? I’d like to make sure I have the right schema setup. attributeTypes: ( 1.3.6.1.4.1.6760.6.1.1 NAME 'casServiceUrlPattern' DESC 'Service URL pattern.' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.2 NAME 'casServiceEnabled' DESC 'Service enabled flag.' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.3 NAME 'casServiceSsoEnabled' DESC 'TRUE to participate in SSO, FALSE to force authentication.' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.4 NAME 'casServiceAnonymousAccess' DESC 'TRUE to use opaque, anonymous identifier for NetID, FALSE otherwise.' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.5 NAME 'casServiceAllowedToProxy' DESC 'TRUE to enable proxy authentication support, FALSE otherwise.' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.6 NAME 'casServiceTheme' DESC 'Spring theme name to use for service.' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.7 NAME 'casUsernameAttribute' DESC 'Attribute name whose value should be used for service-specific NetID.' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.8 NAME 'casAllowedAttributes' DESC 'Names of attributes to be released to service. Facilitates service-specific attribute release.' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.9 NAME 'casIgnoreAttributes' DESC 'TRUE to disable service-specific attribute release, FALSE otherwise. Supersedes casAllowedAttributes.' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.10 NAME 'casEvaluationOrder' DESC 'Numerical evaluation order of this service.' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE ) # ################################################################################ # attributeTypes: ( 1.3.6.1.4.1.6760.6.1.11 NAME 'casRequiredHandlers' DESC 'Names of authentication handlers that must succeed to gain access to this service. Part of MFA support.' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) ######################################################## # Objectclasses below # ######################################################## objectClasses: ( 1.3.6.1.4.1.6760.6.2.1 SUP top STRUCTURAL NAME 'casRegisteredService' DESC 'CAS registered service.' MUST ( uid $ casServiceUrlPattern $ cn ) MAY ( description $ casServiceEnabled $ casServiceSsoEnabled $ casServiceAnonymousAccess $ casServiceAllowedToProxy $ casServiceTheme $ casUsernameAttribute $ casAllowedAttributes $ casIgnoreAttributes $ casEvaluationOrder $ casRequiredHandlers )) Thanks, Jason Jason Castor Senior Programmer Analyst [email protected]<mailto:[email protected]> | CLE C039 -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/47a3fabaa5c7418b87c722366f61705f%40uaru.uvic.ca<https://groups.google.com/a/apereo.org/d/msgid/cas-user/47a3fabaa5c7418b87c722366f61705f%40uaru.uvic.ca?utm_medium=email&utm_source=footer>. -- --Misagh -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/35274800.237630.1504119484015.JavaMail.zimbra%40unicon.net<https://groups.google.com/a/apereo.org/d/msgid/cas-user/35274800.237630.1504119484015.JavaMail.zimbra%40unicon.net?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/dcdce1561d64469bb6be4b06c8a44eef%40uaru.uvic.ca.
