You may be able to utilize the Spring class LdapContextSource to try to
authenticate against a list of LDAP servers. The other feasible
possibility would be to define a Spring bean for each LDAP server. 

 

-Misagh



 

From: Khurram Shahzad [mailto:[email protected]] 
Sent: Thursday, March 01, 2012 12:45 AM
To: [email protected]
Subject: Re: [cas-user] CAS Configuration with LDAP issue - Please advise

 

Ok, I shall be setting it up to communicate securely via SSL. 

Now there is a quick question. We are now looking forward to a solution
where there will be multiple LDAP servers (not few, may be in 10s,
hundreds or even thousands) communicating a single cas server.

In a case, where different user accounts are scattered all over the
different LDAP servers, now when user tries to log in, the first LDAP
server is checked for that user account, if user is not found then check
in second, then third and so on. So, does this kind of architecture is
possible to be implemented via CAS?

Regards,
Khurram Shahzad




On 28 February 2012 20:55, Marvin S. Addison <[email protected]>
wrote:

Many Thanks to you: My problem is now solved;
Key configuration line for fixing issue:<property name="filter"
value="cn=%u,dc=localhost" />


Glad to hear it.

 <property name="url" value="ldap://localhost:389"; />


I hope you'll consider using either ldaps (LDAP over SSL) or startTLS to
secure the authentication traffic to your directory.  I'll keep arguing
that there is no such thing as a secure network where SSL/TLS is not
needed for securing authentication secrets in transit.

M

-- 
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

 

-- 
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to