Hi,

I've been trying to get CAS 6 with LDAP working for a while now 
And in the abscence of a good/complete tutorial/walkthrough for beginners 
I'm quite disenchanted.

Currently I'm back to trying to build a working instance locally as 
deploying is way too time-consuming, as it keeps throwing errors.

Gradle build looks good. But sadly I found nothing really helpful in the 
docs..

What could be the solution here? Just can't reach the LDAP for whatever 
reason, missing cert inside the keystore or so?

*Error message:*

2019-07-15 14:24:39,543 DEBUG 
[org.ldaptive.provider.jndi.JndiConnectionFactory] - <Error connecting to 
LDAP URL: ldaps://adlocal.lan:636>
org.ldaptive.provider.ConnectionException: 
javax.naming.CommunicationException: adlocal.lan:636 [Root exception is 
java.net.UnknownHostException: adlocal.lan]

*cas.properties:*

cas.server.name=https://localhost:8888
cas.server.prefix=${cas.server.name}/cas
logging.config: file:/etc/cas/config/log4j2.xml

# logging.level.org.apereo=DEBUG
cas.authn.accept.users=
# cas.authn.accept.name=
# cas.authn.accept.credentialCriteria=

## KEYSTORE
# 
cas.authn.attributeRepository.ldap.keystore=file:/etc/cas/config/thekeystore
# cas.authn.attributeRepository.ldap.keystorePassword=*********
# cas.authn.attributeRepository.ldap.keystoreType=JKS|JCEKS|PKCS12

## LDAP
cas.authn.ldap[0].name=adlocal.lan
cas.authn.ldap[0].type=AD
cas.authn.ldap[0].ldapUrl=ldaps://adlocal.lan:636
cas.authn.ldap[0].baseDn=DC=adlocal,DC=lan
cas.authn.ldap[0].dnFormat=CN=%s,DC=adlocal,DC=lan
# cas.authn.ldap[0].bindDn=*
# cas.authn.ldap[0].bindCredential=*
# cas.authn.ldap[0].minPoolSize=1
# cas.authn.ldap[0].maxPoolSize=10
cas.authn.ldap[0].validateOnCheckout=false
cas.authn.ldap[0].validatePeriodically=true
cas.authn.ldap[0].validatePeriod=PT5M
cas.authn.ldap[0].failFast=true
cas.authn.ldap[0].idleTime=PT10M
cas.authn.ldap[0].prunePeriod=PT2M
cas.authn.ldap[0].blockWaitTime=PT3S
cas.authn.ldap[0].useStartTls=false
cas.authn.ldap[0].useSsl=true
cas.authn.ldap[0].searchFilter=sAMAccountName={user}

## INMEMORY TICKET REGISTRY (TEMPORARY)
cas.ticket.registry.inMemory.cache=true
cas.ticket.registry.inMemory.loadFactor=1
cas.ticket.registry.inMemory.concurrency=20
cas.ticket.registry.inMemory.initialCapacity=1000


-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/97f6dd77-5d77-4bfa-80fc-073bfbaa496b%40apereo.org.

Reply via email to