Philippe,

CAS relies upon the Jasig PersonDirectory API and implementations for its user 
attribute support.

While no PersonAttributeDAO implementation presently exists that does exactly 
what you want, this is an eminently pluggable API, and it would be very 
feasible to write an IPersonAttributeDAO implementation that performs the 
transformation you're looking for, plug it into your CAS server 
AttributeRepository, and perform the required transformation of the attributes 
you're getting from LDAP before CAS relies upon those attributes in the 
Principal to e.g. inform a ticket validation response.

Please do share if you write such an implementation.  Since the PersonDirectory 
API is used by both uPortal and CAS, such a plug in for this API would be 
useful in both products, and indeed I believe ought to ship in the 
PersonDirectory impl .jar.

Kind regards,

Andrew



On Dec 16, 2011, at 10:46 AM, Marvin Addison wrote:

>> I was wondering if it exists an
>> easy way to modify some attributes I'm getting from LDAP.
> 
> No facility exists at present to do this, but I believe it would be a
> generally beneficial enhancement to CAS.  Compare this functionality
> with the Shib attribute resolver.  It's very powerful and flexible.  I
> encourage you to write up a Jira issue for it.
> 
> M
> 
> -- 
> You are currently subscribed to [email protected] as: [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user


-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to