Ok, I shall be setting it up to communicate securely via SSL.

Now there is a quick question. We are now looking forward to a solution
where there will be multiple LDAP servers (not few, may be in 10s, hundreds
or even thousands) communicating a single cas server.

In a case, where different user accounts are scattered all over the
different LDAP servers, now when user tries to log in, the first LDAP
server is checked for that user account, if user is not found then check in
second, then third and so on. So, does this kind of architecture is
possible to be implemented via CAS?

Regards,
Khurram Shahzad



On 28 February 2012 20:55, Marvin S. Addison <[email protected]>wrote:

> Many Thanks to you: My problem is now solved;
>> Key configuration line for fixing issue:<property name="filter"
>> value="cn=%u,dc=localhost" />
>>
>
> Glad to hear it.
>
>   <property name="url" value="ldap://localhost:389"; />
>>
>
> I hope you'll consider using either ldaps (LDAP over SSL) or startTLS to
> secure the authentication traffic to your directory.  I'll keep arguing
> that there is no such thing as a secure network where SSL/TLS is not needed
> for securing authentication secrets in transit.
>
> M
>
> --
> You are currently subscribed to [email protected] as:
> khurram.shahzad@zeptosystems.**com <[email protected]>
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/**display/JSG/cas-user<http://www.ja-sig.org/wiki/display/JSG/cas-user>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to