That is totally the translation!! On Wed, Dec 19, 2018 at 1:13 PM David Curry <[email protected]> wrote:
> "Ellucian" - from the Latin for "software crap-fest" :-) > > -- > > DAVID A. CURRY, CISSP > *DIRECTOR OF INFORMATION SECURITY* > THE NEW SCHOOL • INFORMATION TECHNOLOGY > > 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 > +1 212 229-5300 x4728 • [email protected] > > > On Wed, Dec 19, 2018 at 12:13 PM Jennifer LaVoie <[email protected]> > wrote: > >> Actually, it did fix it for us in our previous version. The gobumap >> table in Banner AND the AD SamAccountName had either be both lower or both >> upper. >> >> In our new cas version, all other allucian products work even though we >> made no changes in their .json service files. This one app was the only >> problem, and it's now fixed. >> >> I swear, I am not lying :) >> >> On Wed, Dec 19, 2018 at 12:09 PM Richard Frovarp < >> [email protected]> wrote: >> >>> No, changing it in AD will not fix it. The username attribute matches >>> the case provided by the user, unless you change it with CAS config. The >>> cn, sAMAccount name and similar will follow what is returned by AD. The >>> problem you were seeing with it changing case as you did, affects the >>> username attribute to all services by default. So either those services are >>> using something that is being returned as an attribute from AD, are doing >>> the fixup on their own, don't really need a particular case, or the service >>> definition is remapping what the username attribute is. >>> >>> On 12/19/18 11:04 AM, Jennifer LaVoie wrote: >>> >>> Hi Richard >>> >>> We actually addressed this in our old version of CAS by changing our >>> usernames in AD to be UPPER CASE. All the other allucian apps work...it >>> was just this particular one. But now that is also working... >>> >>> it's a bit maddening to be sure. >>> >>> Jen >>> >>> On Wed, Dec 19, 2018 at 11:51 AM Richard Frovarp < >>> [email protected]> wrote: >>> >>>> That will take care of it for the service, which will solve your >>>> problem here. However, the case of the username matches the case that the >>>> user entered it in at that time. So if you have applications storing >>>> information based off of the username attribute, and they are using a case >>>> sensitive way of looking them up in say Oracle (which is case sensitive), >>>> they are brittle. Those applications are dependent on the user entering >>>> their username in with matching case each time. You can address that by >>>> globally setting some sort of consistency across CAS. Of course any >>>> application in the current brittle mode will have problems, but it's best >>>> to address them early. I've been bit by this in the past. You can use the >>>> piece below to address differences in services. Either way, they shouldn't >>>> be subject to the user's casing at that instance. >>>> >>>> >>>> https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#ldap-password-encoding--principal-transformation >>>> >>>> On 12/19/18 10:48 AM, Tom O'Neill wrote: >>>> >>>> Jen, >>>> >>>> >>>> >>>> You need something like this in the service provider JSON: >>>> >>>> >>>> >>>> "usernameAttributeProvider" : { >>>> >>>> "@class" : >>>> "org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider", >>>> >>>> "canonicalizationMode" : "UPPER" >>>> >>>> } >>>> >>>> >>>> >>>> The canonicalizationMode: “UPPER” should do the trick. >>>> >>>> >>>> >>>> Thanks, >>>> >>>> >>>> >>>> *Tom* >>>> >>>> >>>> >>>> *From:* [email protected] <[email protected]> <[email protected]> *On >>>> Behalf Of *Jennifer LaVoie >>>> *Sent:* Wednesday, December 19, 2018 11:20 AM >>>> *To:* CAS Community <[email protected]> <[email protected]> >>>> *Subject:* [cas-user] username cas in CAS >>>> >>>> >>>> >>>> Hello Everyone >>>> >>>> >>>> >>>> We have 1 app that wants the username returned in UPPERCASE. We have >>>> the attribute set to pull SamAccountName and in AD, that is UPPER >>>> CASE...but when I log into CAS with lower case, it is passing my username >>>> to the app in lower case...when I log in as upper case, it passes to the >>>> app in upper case...how can I fix this? >>>> >>>> >>>> >>>> Thank you >>>> >>>> Jen >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/15b14998-d661-443e-a784-7e9ce61b4120%40apereo.org >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/15b14998-d661-443e-a784-7e9ce61b4120%40apereo.org?utm_medium=email&utm_source=footer> >>>> . >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/DM5PR02MB32761ED8FA13628C734D25AFCBBE0%40DM5PR02MB3276.namprd02.prod.outlook.com >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/DM5PR02MB32761ED8FA13628C734D25AFCBBE0%40DM5PR02MB3276.namprd02.prod.outlook.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/f5ef22a9-114c-78fb-927a-d36e2caabc4a%40ndsu.edu >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/f5ef22a9-114c-78fb-927a-d36e2caabc4a%40ndsu.edu?utm_medium=email&utm_source=footer> >>>> . >>>> >>> >>> >>> -- >>> "Confusion is a word we have invented for an order which is not >>> understood." ~Henry Miller >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vF3NspB9nuFrjSiVVtyw-V0TgcgBEV%3Df%3DU9oG%3DCU3euZA%40mail.gmail.com >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vF3NspB9nuFrjSiVVtyw-V0TgcgBEV%3Df%3DU9oG%3DCU3euZA%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/5e4ce37e-44f8-4a22-a3aa-e43f5194a8d2%40ndsu.edu >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/5e4ce37e-44f8-4a22-a3aa-e43f5194a8d2%40ndsu.edu?utm_medium=email&utm_source=footer> >>> . >>> >> >> >> -- >> "Confusion is a word we have invented for an order which is not >> understood." ~Henry Miller >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vGqCPHTw%3DBcv34ptrzG%3DyicueZHnMY5wBAVCP3eu62YnA%40mail.gmail.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vGqCPHTw%3DBcv34ptrzG%3DyicueZHnMY5wBAVCP3eu62YnA%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > > On Wed, Dec 19, 2018 at 12:13 PM Jennifer LaVoie <[email protected]> > wrote: > >> Actually, it did fix it for us in our previous version. The gobumap >> table in Banner AND the AD SamAccountName had either be both lower or both >> upper. >> >> In our new cas version, all other allucian products work even though we >> made no changes in their .json service files. This one app was the only >> problem, and it's now fixed. >> >> I swear, I am not lying :) >> >> On Wed, Dec 19, 2018 at 12:09 PM Richard Frovarp < >> [email protected]> wrote: >> >>> No, changing it in AD will not fix it. The username attribute matches >>> the case provided by the user, unless you change it with CAS config. The >>> cn, sAMAccount name and similar will follow what is returned by AD. The >>> problem you were seeing with it changing case as you did, affects the >>> username attribute to all services by default. So either those services are >>> using something that is being returned as an attribute from AD, are doing >>> the fixup on their own, don't really need a particular case, or the service >>> definition is remapping what the username attribute is. >>> >>> On 12/19/18 11:04 AM, Jennifer LaVoie wrote: >>> >>> Hi Richard >>> >>> We actually addressed this in our old version of CAS by changing our >>> usernames in AD to be UPPER CASE. All the other allucian apps work...it >>> was just this particular one. But now that is also working... >>> >>> it's a bit maddening to be sure. >>> >>> Jen >>> >>> On Wed, Dec 19, 2018 at 11:51 AM Richard Frovarp < >>> [email protected]> wrote: >>> >>>> That will take care of it for the service, which will solve your >>>> problem here. However, the case of the username matches the case that the >>>> user entered it in at that time. So if you have applications storing >>>> information based off of the username attribute, and they are using a case >>>> sensitive way of looking them up in say Oracle (which is case sensitive), >>>> they are brittle. Those applications are dependent on the user entering >>>> their username in with matching case each time. You can address that by >>>> globally setting some sort of consistency across CAS. Of course any >>>> application in the current brittle mode will have problems, but it's best >>>> to address them early. I've been bit by this in the past. You can use the >>>> piece below to address differences in services. Either way, they shouldn't >>>> be subject to the user's casing at that instance. >>>> >>>> >>>> https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#ldap-password-encoding--principal-transformation >>>> >>>> On 12/19/18 10:48 AM, Tom O'Neill wrote: >>>> >>>> Jen, >>>> >>>> >>>> >>>> You need something like this in the service provider JSON: >>>> >>>> >>>> >>>> "usernameAttributeProvider" : { >>>> >>>> "@class" : >>>> "org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider", >>>> >>>> "canonicalizationMode" : "UPPER" >>>> >>>> } >>>> >>>> >>>> >>>> The canonicalizationMode: “UPPER” should do the trick. >>>> >>>> >>>> >>>> Thanks, >>>> >>>> >>>> >>>> *Tom* >>>> >>>> >>>> >>>> *From:* [email protected] <[email protected]> <[email protected]> *On >>>> Behalf Of *Jennifer LaVoie >>>> *Sent:* Wednesday, December 19, 2018 11:20 AM >>>> *To:* CAS Community <[email protected]> <[email protected]> >>>> *Subject:* [cas-user] username cas in CAS >>>> >>>> >>>> >>>> Hello Everyone >>>> >>>> >>>> >>>> We have 1 app that wants the username returned in UPPERCASE. We have >>>> the attribute set to pull SamAccountName and in AD, that is UPPER >>>> CASE...but when I log into CAS with lower case, it is passing my username >>>> to the app in lower case...when I log in as upper case, it passes to the >>>> app in upper case...how can I fix this? >>>> >>>> >>>> >>>> Thank you >>>> >>>> Jen >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/15b14998-d661-443e-a784-7e9ce61b4120%40apereo.org >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/15b14998-d661-443e-a784-7e9ce61b4120%40apereo.org?utm_medium=email&utm_source=footer> >>>> . >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/DM5PR02MB32761ED8FA13628C734D25AFCBBE0%40DM5PR02MB3276.namprd02.prod.outlook.com >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/DM5PR02MB32761ED8FA13628C734D25AFCBBE0%40DM5PR02MB3276.namprd02.prod.outlook.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/f5ef22a9-114c-78fb-927a-d36e2caabc4a%40ndsu.edu >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/f5ef22a9-114c-78fb-927a-d36e2caabc4a%40ndsu.edu?utm_medium=email&utm_source=footer> >>>> . >>>> >>> >>> >>> -- >>> "Confusion is a word we have invented for an order which is not >>> understood." ~Henry Miller >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vF3NspB9nuFrjSiVVtyw-V0TgcgBEV%3Df%3DU9oG%3DCU3euZA%40mail.gmail.com >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vF3NspB9nuFrjSiVVtyw-V0TgcgBEV%3Df%3DU9oG%3DCU3euZA%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/5e4ce37e-44f8-4a22-a3aa-e43f5194a8d2%40ndsu.edu >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/5e4ce37e-44f8-4a22-a3aa-e43f5194a8d2%40ndsu.edu?utm_medium=email&utm_source=footer> >>> . >>> >> >> >> -- >> "Confusion is a word we have invented for an order which is not >> understood." ~Henry Miller >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vGqCPHTw%3DBcv34ptrzG%3DyicueZHnMY5wBAVCP3eu62YnA%40mail.gmail.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vGqCPHTw%3DBcv34ptrzG%3DyicueZHnMY5wBAVCP3eu62YnA%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAP_5e0R9uos67CZzN%2BM4i1KzMfrsTtHuK__z1z-ebT3PQ%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAP_5e0R9uos67CZzN%2BM4i1KzMfrsTtHuK__z1z-ebT3PQ%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- "Confusion is a word we have invented for an order which is not understood." ~Henry Miller -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vE99vqupLmB8_07GXEF85%3Dnt0n1uN4tA6e4K0bt-7riQQ%40mail.gmail.com.
