> I attached the script and new print-out.

To a first approximation, your script does what the CAS BindLdap
handler does.  Nothing insightful there.

What I notice is that your queries are fundamentally different:

> :~$ jython/jython test2.py "cn=y0e7122"

versus

> :~$ jython/jython test2.py 
> "member=cn=y0e7122,ou=au1,ou=sot1,ou=ot1,ou=ap1,o=env11"

In the first case you are querying for the DN of a single user
(assuming CNs are unique), and in the second case you are apparently
querying for group membership.  I can't imagine a use case for the
second query in an authentication handler.  What exactly are you
trying to do?

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to