Hi List:

I am pretty new to CAS (3 days); so far all is going well :)

I have it hooked up to our test LDAP for authentication, integrated first
sandbox application - all looking good.

My next step is to pass attrubutes to the integrated application - however,
I am seeing the following message for a valid account, with attributes: "No
queryBuilder was generated for query {username=[johnsmith]}, null will be
returned".

List below are extracts from 'cas.log' & '*deployConfigContext*.xml'.

Is there something I am missing from the setting in the *
"deployConfigContext*.xml"? Thanks.



Extract from cas.log:

  2012-05-16 09:49:02,146 DEBUG
[org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver]
- Resolved johnsmith. Trying LDAP resolve now...
2012-05-16 09:49:02,146 DEBUG
[org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver]
- LDAP search with filter "(loginName= johnsmith)"
2012-05-16 09:49:02,146 DEBUG
[org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver]
- returning searchcontrols: scope=2; search base=ou=people,o=example.edu; *
attributes=[loginName]*; timeout=1000
2012-05-16 09:49:02,363 DEBUG
[org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver]
- Resolved johnsmith to johnsmith
2012-05-16 09:49:02,364 DEBUG
[org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver]
- Creating SimplePrincipal for [johnsmith]
2012-05-16 09:49:02,364 DEBUG
[org.jasig.services.persondir.support.ldap.LdapPersonAttributeDao] -
Created seed map='{username=[johnsmith]}' for uid='johnsmith'
2012-05-16 09:49:02,364 DEBUG
[org.jasig.services.persondir.support.ldap.LdapPersonAttributeDao] -
Generated query builder 'null' from query Map {username=[johnsmith]}.
2012-05-16 09:49:02,364 DEBUG
[org.jasig.services.persondir.support.ldap.LdapPersonAttributeDao] - No
queryBuilder was generated for query {username=[johnsmith]}, null will be
returned
2012-05-16 09:49:02,364 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] - Resolved
principal johnsmith
2012-05-16 09:49:02,364 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] - Principal found:
johnsmith
2012-05-16 09:49:02,364 DEBUG
[org.jasig.cas.authentication.AuthenticationManagerImpl] - Attribute map
for johnsmith: {}




Snippet from *deployConfigContext*.xml:


 <bean id="authenticationManager"
        class="org.jasig.cas.authentication.AuthenticationManagerImpl">

        <property name="credentialsToPrincipalResolvers">
            <list>
                    <bean
class="org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver">

                        <property name="credentialsToPrincipalResolver">
                            <bean
class="org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver"/>

                        </property>
                        <property name="filter" value="(loginName=%u)"/>
                        <property name="principalAttributeName"
value="loginName"/>
                        <property name="searchBase" value="ou=people,o=
example.edu"/>
                        <property name="contextSource"
ref="contextSource"/>
                        <property name="attributeRepository">
                            <ref bean="attributeRepository"/>
                        </property>
                    </bean>
            </list>
        </property>


        <property name="authenticationHandlers">
            <list>
                <!--
                | This is the authentication handler that authenticates
services by means of callback via SSL, thereby validating
                | a server side SSL certificate.
                +-->
                <bean
class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"
                    p:httpClient-ref="httpClient" />


                    <bean
class="org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler">
                           <property name="filter" value="loginName=%u" />
                           <property name="searchBase" value="ou=people,o=
example.edu" />
                           <property name="contextSource"
ref="contextSource" />
                    </bean>
            </list>
        </property>
    </bean>



    <bean id="attributeRepository"

class="org.jasig.services.persondir.support.ldap.LdapPersonAttributeDao">
            <!--
            | <property name="ignorePartialResultException" value="yes"/>
            +-->
            <property name="contextSource" ref="contextSource" />
            <property name="baseDN" value="ou=people,o=example.edu" />




    <property name="queryAttributeMapping">
        <map>
            <entry key="loginName" value="loginName" />
        </map>
    </property>

    <property name="resultAttributeMapping">
        <map>
            <entry key="loginName" value="loginName"/>
            <entry value="loginId" key="loginId" />
        </property>
    </bean>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to