Hello Ray, Thanks for your answer. If I'm not mistaken, clearpass encrypts the password used to authenticate with CAS, not an arbitrary attribute. The documentation let us believe that it is possible (https://apereo.github.io/cas/6.1.x/integration/Attribute-Release.html) but I've not found how to do yet.
Philippe. Le 16/04/2020 à 17:52, Ray Bon a écrit : > Philippe, > > I do not know the exact answer. But check how clear pass works. It > encrypts the password with the service's public key. > > Ray > > On Thu, 2020-04-16 at 16:49 +0200, 'Philippe MARASSE' via CAS > Community wrote: >> Hi, >> Is it possible to : >> - fetch an attribute from LDAP, ciphered with a symmetric key, then >> decipher to get it in clear text >> - release an attribute (not the username, nor the password) to a >> service, ciphered with service's public key ? >> Use case : deliver user-dependent credentials to apache guacamole in a >> safe way. >> Cheers. >> -- >> Philippe MARASSE >> Responsable pôle Infrastructures - DSIO >> Centre Hospitalier Henri Laborit >> CS 10587 - 370 avenue Jacques Cœur >> 86021 Poitiers Cedex >> Tel : 05.49.44.57.19 > -- > Ray Bon > Programmer Analyst > Development Services, University Systems > 2507218831 | CLE 019 | [email protected] <mailto:[email protected]> > > I respectfully acknowledge that my place of work is located within the > ancestral, traditional and unceded territory of the Songhees, > Esquimalt and WSÁNEĆ Nations. > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google > Groups "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] > <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/8a848fe9a5032f827c12d1f144be7850ad76aabf.camel%40uvic.ca > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/8a848fe9a5032f827c12d1f144be7850ad76aabf.camel%40uvic.ca?utm_medium=email&utm_source=footer>. -- Philippe MARASSE Responsable pôle Infrastructures - DSIO Centre Hospitalier Henri Laborit CS 10587 - 370 avenue Jacques Cœur 86021 Poitiers Cedex Tel : 05.49.44.57.19 -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/60003da9-6506-43be-596d-c886069d9e82%40ch-poitiers.fr.
smime.p7s
Description: Signature cryptographique S/MIME
