Hey Arti, Can u share your number. I have some doubts.
Vikash Chandra +918567019627 On Tue 23 Jun, 2020, 11:14 arti wavale, <[email protected]> wrote: > All detail information provided in a document . Please find the attachment > > I am facing error such as "could not update the account password " > > If anyone can help to resolve this issue > > > ------------------------------------------------------------------------------------------------- > > *Pom.xml:* > <dependency> <groupId>org.apereo.cas</groupId> > <artifactId>cas-server-support-pm-ldap</artifactId> > <version>${cas.version}</version></dependency> > > > > > > > > > > > *cas.properties:* > > > cas.authn.accept.users= cas.authn.ldap[0].order=0 cas.authn.ldap[0].name=LDAP > Server cas.authn.ldap[0].type=AUTHENTICATED > cas.authn.ldap[0].ldapUrl=ldap://localhost cas.authn.ldap[0].useSsl=false > cas.authn.ldap[0].useStartTls=false cas.authn.ldap[0].connectTimeout=50000 > cas.authn.ldap[0].subtreeSearch=true cas.authn.ldap[0].validatePeriod=270 > cas.authn.ldap[0].userFilter=cn={user} > #cas.authn.ldap[0].userFilter=(|(uid={user})(cn={user})(mail={user})) > cas.authn.ldap[0].baseDn=dc=example,dc=com > #cas.authn.ldap[0].enhanceWithEntryResolver=true > #cas.authn.ldap[0].dnFormat:cn=%s,cn=admin,dc=example,dc=com > cas.authn.ldap[0].bindDn=cn=admin,dc=example,dc=com > cas.authn.ldap[0].bindCredential=administrator > cas.authn.ldap[0].enhanceWithEntryResolver=true > cas.authn.ldap[0].dnFormat:cn=%s,cn=admin,dc=example,dc=com > cas.authn.ldap[0].principalAttributeList=memberOf,uid,cn,mail > cas.authn.ldap[0].collectDnAttribute=false > > > cas.authn.ldap[0].principalAttributeId=cncas.authn.ldap[0].principalAttributePassword=userPassword# > attributes to be retrieved from LDAP > userPassword#cas.authn.ldap[0].principalAttributeList=uid,cn,mail#cas.authn.ldap[0].collectDnAttribute=falsecas.authn.ldap[0].principalDnAttributeName=principalLdapDncas.authn.ldap[0].allowMultiplePrincipalAttributeValues=truecas.authn.ldap[0].allowMissingPrincipalAttributeValue=true# > cas.authn.ldap[0].credentialCriteria=# LDAP Password Encoding# > cas.authn.ldap[0].passwordEncoder.type=# > cas.authn.ldap[0].passwordEncoder.characterEncoding=UTF-8# > cas.authn.ldap[0].passwordEncoder.encodingAlgorithm=SHA# LDAP > Poolingcas.authn.ldap[0].minPoolSize=3cas.authn.ldap[0].maxPoolSize=50cas.authn.ldap[0].validateOnCheckout=truecas.authn.ldap[0].validatePeriodically=truecas.authn.ldap[0].validatePeriod=600cas.authn.ldap[0].failFast=truecas.authn.ldap[0].idleTime=5000cas.authn.ldap[0].prunePeriod=5000cas.authn.ldap[0].blockWaitTime=5000 > cas.authn.ldap[0].providerClass=org.ldaptive.provider.unboundid.UnboundIDProvidercas.authn.ldap[0].allowMultipleDns=false > > > > > #Password Management > spring.mail.host=mail.technology.comspring.mail.port=587spring.mail.username=x...@technology.comspring.mail.password=xxxxxxspring.mail.testConnection=truespring.mail.properties.mail.smtp.auth=truespring.mail.properties.mail.smtp.starttls.enable=true > > > > > > > > > > cas.authn.pm.enabled=true#cas.authn.pm.policyPattern=^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%~()_{}-]).{8,}$ > #cas.authn.pm.reset.text=password reset:%scas.authn.pm.reset.text=Reset your > password with this link: %s#cas.authn.pm.reset.subject=armor password > resetcas.authn.pm.reset.subject=Password Reset > Requestcas.authn.pm.reset.from=${spring.mail.username}cas.authn.pm.reset.expirationMinutes=10cas.authn.pm.reset.emailAttribute=mailcas.authn.pm.reset.securityQuestionsEnabled=falsecas.authn.pm.autoLogin=false > cas.authn.pm.reset.crypto.encryption.key=xxxxxxxxxxxxxxxxxxxxxxxxcas.authn.pm.reset.crypto.signing.key=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxcas.authn.pm.reset.crypto.enabled=true > > #cas.authn.pm.enabled=truecas.authn.pm.ldap.type=GENERICcas.authn.pm.ldap.ldapUrl=${cas.authn.ldap[0].ldapUrl}cas.authn.pm.ldap.useSsl=falsecas.authn.pm.ldap.connectTimeout=5000cas.authn.pm.ldap.baseDn=${cas.authn.ldap[0].baseDn}cas.authn.pm.ldap.userFilter=${cas.authn.ldap[0].userFilter}cas.authn.pm.ldap.subtreeSearch=truecas.authn.pm.ldap.bindDn=cn=admin,dc=example,dc=comcas.authn.pm.ldap.bindCredential=administratorcas.authn.pm.ldap.poolPassivator=BINDcas.authn.pm.ldap.minPoolSize=3cas.authn.pm.ldap.maxPoolSize=10cas.authn.pm.ldap.validateOnCheckout=truecas.authn.pm.ldap.validatePeriodically=truecas.authn.pm.ldap.validatePeriod=600cas.authn.pm.ldap.validateTimeout=5000cas.authn.pm.ldap.failFast=true > > > > > > > > > > cas.authn.pm.ldap.idleTime=500cas.authn.pm.ldap.prunePeriod=600cas.authn.pm.ldap.blockWaitTime=5000cas.authn.pm.ldap.providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider > #validatorcas.authn.pm.ldap.validator.type=SEARCHcas.authn.pm.ldap.validator.baseDn=dc=example,dc=com#cas.authn.pm.ldap.validator.searchFilter=(objectClass=*)cas.authn.pm.ldap.validator.scope=SUBTREE > > ----------------------------------------------------------------------- > > > > Thanks and Regards > Arti > > > > > On Monday, June 22, 2020 at 12:23:54 PM UTC-7, Vikash Chandra Ansh wrote: >> >> Hi Arti, >> >> How are you proceeding with ldap password management. Please involve me >> as well as I want to incorporate this in my application. >> >> Thanks and Regards >> >> On Sat, Jun 20, 2020 at 9:59 AM arti wavale <[email protected]> wrote: >> >>> can you explain me, how implemented password management in cas 5.2 and >>> can share cas.properties file and which dependency are you used in pox.xml >>> file? >>> >>> On Tuesday, November 20, 2018 at 10:33:06 PM UTC+5:30, MD. Fazla Rabby >>> wrote: >>>> >>>> We are already using CAS5.2 and password management working fine. But >>>> for CAS version 6 we are getting the ldap referral error >>>> "java.security.cert.CertificateException: Hostname does not match the >>>> hostname in the server's certificate site:stackoverflow.com" >>>> How to get around with this >>>> >>>> This is my cas.properties >>>> >>>> >>>> >>>> cas.authn.pm.enabled=true >>>> cas.authn.pm.policyPattern=^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9 >>>> ])(?=.*?[#?!@$%~()_{}-]).{8,}$ >>>> cas.authn.pm.reset.text=Reset your password with this link: %s >>>> cas.authn.pm.reset.subject=Password Reset Request >>>> cas.authn.pm.reset.from=myemail.mydomain.com >>>> >>>> >>>> #password reset expiry is set to 1 day equivalent minutes >>>> cas.authn.pm.reset.expirationMinutes=1440 >>>> cas.authn.pm.reset.emailAttribute=secondaryEmail >>>> cas.authn.pm.reset.securityQuestionsEnabled=true >>>> >>>> # Automatically log in after successful password change >>>> cas.authn.pm.autoLogin=false >>>> >>>> # Used to sign/encrypt the password-reset link >>>> cas.authn.pm.reset.crypto.encryption.key=asdasdasdasdasdasdasdasdasdasd >>>> cas.authn.pm.reset.crypto.signing.key >>>> =asdasdasasdasdasdasdadsadasdasdasdasd >>>> cas.authn.pm.reset.crypto.enabled=true >>>> >>>> >>>> #Email Submissions >>>> >>>> spring.mail.host=smtp.office365.com >>>> spring.mail.port=587 >>>> [email protected] >>>> spring.mail.password=pass >>>> spring.mail.testConnection=true >>>> spring.mail.properties.mail.smtp.auth=true >>>> spring.mail.properties.mail.smtp.starttls.enable=true >>>> >>>> # >>>> ##LDAP Password management >>>> # >>>> cas.authn.pm.ldap.type=AD >>>> # >>>> cas.authn.pm.ldap.ldapUrl=ldaps://myldap:636 >>>> cas.authn.pm.ldap.useSsl=true >>>> cas.authn.pm.ldap.useStartTls=false >>>> cas.authn.pm.ldap.connectTimeout=50000 >>>> cas.authn.pm.ldap.baseDn=DC=xx,DC=xx,DC=xx,DC=xx >>>> cas.authn.pm.ldap.searchFilter=cn={user} >>>> cas.authn.pm.ldap.subtreeSearch=true >>>> cas.authn.pm.ldap.bindDn=CN=xx,OU=xx,DC=xx,DC=xx,DC=xx,DC=xx >>>> cas.authn.pm.ldap.bindCredential=pass >>>> # cas.authn.pm.ldap.connectionStrategy= >>>> cas.authn.pm.ldap.trustCertificates=file:/etc/cas/myldap.cer >>>> ## cas.authn.pm.ldap.keystore= >>>> ## cas.authn.pm.ldap.keystorePassword= >>>> ## cas.authn.pm.ldap.keystoreType=JKS|JCEKS|PKCS12 >>>> cas.authn.pm.ldap.poolPassivator=BIND >>>> cas.authn.pm.ldap.minPoolSize=3 >>>> cas.authn.pm.ldap.maxPoolSize=10 >>>> cas.authn.pm.ldap.validateOnCheckout=true >>>> cas.authn.pm.ldap.validatePeriodically=true >>>> cas.authn.pm.ldap.validatePeriod=600 >>>> cas.authn.pm.ldap.validateTimeout=5000 >>>> cas.authn.pm.ldap.failFast=true >>>> cas.authn.pm.ldap.idleTime=500 >>>> cas.authn.pm.ldap.prunePeriod=600 >>>> cas.authn.pm.ldap.blockWaitTime=5000 >>>> >>>> ##cas.authn.pm.ldap.providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider >>>> # >>>> ## Attributes that should be fetched to indicate security questions and >>>> answers, >>>> ## assuming security questions are enabled. >>>> cas.authn.pm.ldap.securityQuestionsAttributes.attributeQuestion1 >>>> =attributeAnswer1 >>>> cas.authn.pm.ldap.securityQuestionsAttributes.attributeQuestion2 >>>> =attributeAnswer2 >>>> cas.authn.pm.ldap.securityQuestionsAttributes.attrQuestion3= >>>> attributeAnswer2 >>>> # >>>> cas.authn.pm.ldap.validator.type=SEARCH >>>> cas.authn.pm.ldap.validator.baseDn=DC=xx,DC=xx,DC=xx,DC=xx >>>> ##cas.authn.pm.ldap.validator.searchFilter=(objectClass=*) >>>> cas.authn.pm.ldap.validator.scope=SUBTREE >>>> >>>> >>>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/1d2b5ab2-a319-47b7-a802-be92b1008802o%40apereo.org >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/1d2b5ab2-a319-47b7-a802-be92b1008802o%40apereo.org?utm_medium=email&utm_source=footer> >>> . >>> >> -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/d1ed5f48-591d-4a82-89fa-eefddeb888d6o%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/d1ed5f48-591d-4a82-89fa-eefddeb888d6o%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BdrvxiSb_P%2B5dAgABzBt%2B1BKMR_uL2BFkN2UdFSLF2-fucMFA%40mail.gmail.com.
