Re: [cas-user] bindAndValidate method with dual LDAP authentication backends

Andy Cowling Fri, 12 Feb 2010 00:08:36 -0800

Perfect! That was exactly what I was trying to do :-)


Scott Battaglia wrote:

You can try adding the method to the action-state, i.e.
<action bean="searchAction" method="executeSearch"/>

Not sure if that will do what you want.

On Thu, Feb 11, 2010 at 11:05 AM, Andy Cowling <[email protected] <mailto:[email protected]>> wrote:


    Hi

    I have two autheorization handlers, each uses a disinct LDAP
    backend. IP ranges are used to determine which handler gets called.

    To distinguish what's going on in login-webflow.xml I use distinct
    state names: bindAndValidatePeopleLdap &
    bindAndValidateActiveDirectoryLdap

    They appear for example, here:

            <view-state id="viewPeopleLdapLoginForm" view="casLoginView">
                <render-actions>
                    <action
        bean="authenticationViaPeopleLdapFormAction" method="setupForm"/>
                    <action
        bean="authenticationViaPeopleLdapFormAction"
        method="referenceData"/>
                </render-actions>
                <transition on="submit"
        to="*bindAndValidatePeopleLdap*" />
            </view-state>

            <action-state id="*bindAndValidatePeopleLdap*">
                <action bean="authenticationViaPeopleLdapFormAction" />
                <transition on="success" to="submitPeopleLdap" />
                <transition on="error" to="startAuthenticate" />
            </action-state>


    But... when I try to login via this LDAP, spring(?) reports that
    it is expecting a method to match the state name(!). Where can I
    override this to use the default "bindAndValidate" method?

    Servlet.service() for servlet cas threw exception>
    java.lang.NoSuchMethodException:
    
org.jasig.cas.web.flow.AuthenticationViaFormAction.bindAndValidatePeopleLdap(org.springframework.webflow.execution.RequestContext)


    cas-servlet.xml contains:

<!-- ==================================================================

                People LDAP form action handler
            -->
            <bean id="authenticationViaPeopleLdapFormAction"
        class="org.jasig.cas.web.flow.AuthenticationViaFormAction"

p:centralAuthenticationService-ref="centralAuthenticationService"

                p:warnCookieGenerator-ref="warnCookieGenerator">
                <property
                    name="credentialsBinder">
                    <bean
                        class="org.idms.cas.X509CredentialsBinder"/>
                </property>
                <property
                    name="formObjectClass"

value="org.idms.cas.UsernamePasswordAndX509Credentials" /> </bean>

<!-- ==================================================================

                Active Directory form action handler
            -->
            <bean id="authenticationViaActiveDirectoryLdapFormAction"
        class="org.jasig.cas.web.flow.AuthenticationViaFormAction"

p:centralAuthenticationService-ref="centralAuthenticationService"

                p:warnCookieGenerator-ref="warnCookieGenerator" />



    Any help appreciated

    Cheers
    Andy

    Andy Cowling | UK Core IT
    Interactive Data Managed Solutions Ltd
    
-------------------------------------------------------------------------------------------------------------------------------
    Suite 1101, Eagle Tower | Montpellier Drive | Cheltenham GL50 1TA | UK
    Tel: +44 (0)1242 6941 15 | Fax: +44 (0)1242 6941 01
    [email protected]

<mailto:[email protected]> http://www.interactivedata-ms.com <http://www.interactivedata-ms.com/>


    This message (including any files transmitted with it) may contain
    confidential
    and/or proprietary information, is the property of Interactive
    Data Corporation
    and/or its subsidiaries, and is directed only to the addressee(s).
    If you are not
    the designated recipient or have reason to believe you received
    this message in
    error, please delete this message from your system and notify the
    sender
    immediately. An unintended recipient's disclosure, copying,
    distribution, or
    use of this message or any attachments is prohibited and may be
    unlawful.
    Interactive Data (Europe) Ltd Registered No. 949387 England
    Registered Office:
    Fitzroy House 13-17 Epworth Street. London. EC2A 4DL


--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user



--

Andy Cowling | UK Core IT
Interactive Data Managed Solutions Ltd
-------------------------------------------------------------------------------------------------------------------------------
Suite 1101, Eagle Tower | Montpellier Drive | Cheltenham GL50 1TA | UK
Tel: +44 (0)1242 6941 15 | Fax: +44 (0)1242 6941 01

[email protected] http://www.interactivedata-ms.com <http://www.interactivedata-ms.com/>

This message (including any files transmitted with it) may contain confidential and/or proprietary information, is the property of Interactive Data Corporation and/or its subsidiaries, and is directed only to the addressee(s). If you are not the designated recipient or have reason to believe you received this message in

error, please delete this message from your system and notify the sender

immediately. An unintended recipient's disclosure, copying, distribution, or

use of this message or any attachments is prohibited and may be unlawful.

Interactive Data (Europe) Ltd Registered No. 949387 England Registered Office:

Fitzroy House 13-17 Epworth Street. London. EC2A 4DL

smime.p7s
Description: S/MIME Cryptographic Signature

Re: [cas-user] bindAndValidate method with dual LDAP authentication backends

Reply via email to