The way we do that is as follows:

-for all our users, we map an AD attribute into CAS, and then map that 
to the Google username. This allows for usernames that are different 
from email names.  (eg. you can use the AD "mail" attribute; we have 
actually extended the schema to add our own private attributes, so as to 
not mess with anything MS could use themselves.) CAS3.3.5 has this built 
in after some initial mods we submitted. (See 
http://www.ja-sig.org/wiki/display/CASUM/Google+Apps+from+MS-AD+using+the+%27mail%27+attribute)

-then in order to login to Google as another user, we use a dummy AD 
account. We set that "google" AD attribute to the google username, and 
login to CAS with that AD account. When you then go to Google, you 
become that other user set in your google attribute.  Setting this AD 
google attribute can be accomplished with a very simple 3 liner 
vb-script (as long as you have the proper AD rights).

I can send more details if you wish...

Johan

On 2/10/2010 2:04 PM, Ian Strait wrote:
>
> Is there a way of using administrator credentials with cas to login to 
> a users account?
>
> I have CAS running and authenticating against an active directory 
> (thanks to users on this list) in a school, and would like to somehow 
> be able to use my credentials to login to a student's account...
>
> Any thoughts?
>
> Ian Strait
> /Music Teacher
> Technology Coordinator/
> Quinault Lake Schools
> 360-288-2414 X38
>
> -- 
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
> -- 
> This message has been scanned for viruses and
> dangerous content by *Lake Quinault School District* 
> <http://www.quinault.k12.wa.us>, and is
> believed to be clean.
> -- 
> You are currently subscribed to [email protected] as: 
> [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to