We have a service defined as follows
{
"id":16,
"serviceId":"https://some.company.net/tenant/**";,
"name":"Some company Test",
"enabled":true,
"description":"Some company Test",
"ssoEnabled":true,
"evaluationOrder":16,
"allowedAttributes":["sAMAccountName","uid","mail","username","user","NetID"],
"usernameAttribute":"sAMAccountName"
}
The last three actions in the log show that the principal Id for action
SERVICE_ACCESS_ENFORCEMENT_TRIGGERED shows that the id has been set to a
bit of a random looking sequence of characters. And we get that same
sequence of characters returned as the username.
Here are the last three actions from the log
2019-02-27 19:33:43,830 INFO
[org.apereo.cas.DefaultCentralAuthenticationService] - <Granted ticket
[ST-5-uGm3K7WmDEWzCzEBt-G-G7OluGQcas-757cdf79b6-7ks6z] for service
[https://some.company.net/tenant/group/signin-cas?state=CfDJ8NAwcGgHxYlKvWvBrWXw4y-rK-6aNOchW9-RQIPQH0coTxzRc3hrzGTLc...]
and principal [moakley]>
2019-02-27 19:33:43,831 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: moakley
WHAT: ST-5-uGm3K7WmDEWzCzEBt-G-G7OluGQcas-757cdf79b6-7ks6z for
https://some.company.net/tenant/group/signin-cas?state=CfDJ8NAwcGgHxYlKvWvBrWXw4y-rK-6aNOchW9-RQIPQH0coTxzRc3hrzGTLc...
ACTION: SERVICE_TICKET_CREATED
APPLICATION: CAS
WHEN: Wed Feb 27 19:33:43 GMT 2019
CLIENT IP ADDRESS: 10.40.4.100
SERVER IP ADDRESS: 10.42.14.179
=============================================================
>
2019-02-27 19:33:44,194 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: [result=Service Access
Granted,service=https://some.company.net/tenant/group...,principal=SimplePrincipal(id=
*eSBedPBSYelMYyoxhSbVZFN2Jgc=*, attributes={}),requiredAttributes={}]
ACTION: SERVICE_ACCESS_ENFORCEMENT_TRIGGERED
APPLICATION: CAS
WHEN: Wed Feb 27 19:33:44 GMT 2019
CLIENT IP ADDRESS: 10.40.4.100
SERVER IP ADDRESS: 10.42.14.179
=============================================================
>
2019-02-27 19:33:44,196 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: *eSBedPBSYelMYyoxhSbVZFN2Jgc=*
WHAT: ST-5-uGm3K7WmDEWzCzEBt-G-G7OluGQcas-757cdf79b6-7ks6z
ACTION: SERVICE_TICKET_VALIDATED
APPLICATION: CAS
WHEN: Wed Feb 27 19:33:44 GMT 2019
CLIENT IP ADDRESS: 10.40.4.100
SERVER IP ADDRESS: 10.42.14.179
=============================================================
Can our problem be related to using the legacy formatting without telling
it anything about what classes to use? Or can you suggest another cause?
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/dfcd63da-9db9-4db7-a032-b95511459d08%40apereo.org.
