On Thu, Oct 16, 2014 at 6:39 PM, Adam Franco <[email protected]> wrote:

> For CAS 4.0, it seems that the LdapPersonAttributeDao is no longer used
> and the org.jasig.cas.authentication.LdapAuthenticationHandler handles
> attribute mapping instead. Would extending the LdapAuthenticationHandler in
> a similar way that I extended the LdapPersonAttributeDao be the best way to
> add this feature to CAS 4.0 or is there a better way to lookup and inject
> these extra attribute values?
>

Ldaptive has a component that might work for you called
RecursiveEntryHandler. You can wire this into your EntryResolver and if the
user has permission to read the group structure it should populate it for
you.

SearchEntryResolver#setSearchEntryHandler(new
RecursiveEntryHandler("memberOf", "memberOf"));

--Daniel Fisher

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to