Milt, Could you please try the "attz" branch in GitHub? https://github.com/jasig/mod_auth_cas/tree/attz
I am working on merging the attribute authorization code, with a new release coming soon. Note the QuickStart section of the README has some information on using the new cas-attribute option. HTH, -Matt Matthew J. Smith University of Connecticut UITS [email protected] ________________________________________ From: [email protected] [[email protected]] On Behalf Of Milt Epstein [[email protected]] Sent: Tuesday, May 15, 2012 3:54 PM To: [email protected] Subject: [cas-user] mod_auth_cas require cas-attribute problem Greetings. I'm trying to use the mod_auth_cas patch described here: https://issues.jasig.org/browse/MAS-60 It is supposed to allow authorization against cas-attributes, such as the following: Require cas-attribute FirstName:Milt However, when I try it, I'm getting a 401 Authorization Required, and my Apache log contains the following: [Tue May 15 14:32:25 2012] [error] [client ...] access to /cas_test failed, reason: require directives present and no Authoritative handler., referer: ... I have debug level logging on, and I see the following in the log: [Tue May 15 14:32:25 2012] [debug] mod_auth_cas.c(2021): [client ...] adding the following cas-attribute(s) to request notes 'FirstName:Milt', referer: ... So the proper cas-attribute seems to be present. I've tried both of the following (not at the same time :-), and the behavior's the same either way: CASAuthoritative On CASAuthoritative Off If I just use the following require, it works fine: Require user mepstein Any ideas on what's going on, why it's not working? Do I need to add another module, or certain Apache configuration/directives? Thanks. Milt Epstein Applications Developer Graduate School of Library and Information Science (GSLIS) University of Illinois at Urbana-Champaign (UIUC) [email protected] -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
