> Justin, you should be able to specify multiple ContextSources and then refer
> to the correct one.

Just to elaborate on Scott's suggestion...

I see from your JAAS config that a successful auth on either server
constitutes success.  This is the behavior of the default
AuthenticationManager when it contains multiple authentication
handlers for a given type of credential, in this case
UsernamePasswordCredentials.  You should define two
BindLdapAuthenticationHandler beans where each points to a different
LdapContextSource bean definition, one for each LDAP server you want
to authenticate against.  Each authentication attempt will try each
LDAP source in sequence and will short circuit at the first success.
CAS authentication will fail only if both LDAP servers fail to
authenticate the user.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to