Hi everyone,

These last few months I've been playing around with CAS as an SSO for my
employer. It basically works like a charm. (any problems I had were largely
due to the fact it had been a while since I'd seen any Java and the fact
that I wasn't very familiar with Spring or even JSP).

All that said, at this point I have a working setup. But a simple working
setup isn't enough, I want more. :p
Given that I'm rather curious by nature I started looking for ways to
improve or extend the basic setup. That basic setup consists of
"authentication handlers" for an Active Directory, an LDAP-directory (non
AD-based) and a MySQL-database. All of them have some attrubutes which
should be passed on, so I also added some "credentials to principal
resolvers".

Right now we've linked several applications to CAS: Google Apps, the Dokeos
LMS, student surveys, our educational portal (which wouldn't have been very
usefull without CAS), a student tracking system, mailing lists, intranet,
etc. Since the project is relatively new, the number of linked applications
is no doubt going to get higher over time. At the very least everyone over
here is very excited about it. (The flawless Google Apps integration in
particular seemed to be something of a WOW-factor)

A few days ago I happend to come upon an older message on this list which
explained in some detail how to combine attributes from different via the
"MergingPersonAttributeDaoImpl". After some trial and error (and tons of
typos), again: works perfectly.

After some more reading I found out that it shoud be possible to directly
map AuthenticationHandlers to CredentialsToPrincipalResolvers. Obviously
that'd be way more performant (not to mention safer data-consistency wise)
then having to loop through the entire set of
CredentialsToPrincipalResolvers all the time.

Sadly enough I couldn't find any extra information at all on the subject and
the wiki page dedicated to it is still empty. Could anyone give me a few
pointers or tell me where to start looking?

Thanks in advance,

Hans
-- 
View this message in context: 
http://www.nabble.com/Direct-Mapping-AuthenticationManager-tp24539351p24539351.html
Sent from the CAS Users mailing list archive at Nabble.com.


-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to