I believe that the 'cas.authn.ldap[0].userFilter' has been changed to
'cas.authn.ldap[0].searchFilter' in 5.3.x. I also needed the CA certificate
and used 'cas.authn.ldap[0].trustCertificates=file:/<path_to_file>' in my
config.
James
On Thursday, August 16, 2018 at 11:44:21 AM UTC-4, rbon wrote:
>
> Duc,
>
> I also have these:
>
>
> cas.authn.ldap[0].baseDn=ou=loadtesters,ou=uportal,ou=applications,dc=uvic,dc=ca
> cas.authn.ldap[0].userFilter=uid:2.5.13.5:={user}
>
> Ray
>
>
> On Thu, 2018-08-16 at 03:35 -0700, Hoang Anh Duc wrote:
>
> I'm using CAS 5.3.2 and want to configure CAS with LDAP. I haven't done it
> before. I found this guide
> <https://apereo.github.io/cas/5.3.x/installation/LDAP-Authentication.html>
> for
> my installation. I followed it and dded the "compile" line and built
> succeed. But I don't know how to make a full configuration to link my LDAP
> with this CAS. The doc looks simple. Anyone can show me a simple example?
> Thanks!
>
> Here's what I added to my cas.properties, but it worked yet:
>
>
> cas.authn.ldap[0].ldapUrl=ldaps://ldap.forumsys.com
> cas.authn.ldap[0].bindDn=cn=read-only-admin,dc=example,dc=com
> cas.authn.ldap[0].bindCredential=password
> cas.authn.ldap[0].useSsl=true
> cas.authn.ldap[0].useStartTls=false
>
> cas.authn.ldap[0].principalAttributeList=sn,cn:commonName,givenName
> cas.authn.ldap[0].collectDnAttribute=false
> cas.authn.ldap[0].principalDnAttributeName=principalLdapDn
> cas.authn.ldap[0].allowMultiplePrincipalAttributeValues=true
> cas.authn.ldap[0].allowMissingPrincipalAttributeValue=true
>
> --
> Ray Bon
> Programmer analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | [email protected] <javascript:>
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/582c8e4c-576e-4dbc-907d-1bc9252ededc%40apereo.org.
