I have CAS4 with two LDAP Auth Handlers.  The first is pointed at my local
Active Directory (LDAP1) which has my Employees, Staff, Faculty, etc..  The
second is pointed at another LDAP server (ldap2) which contains alumni,
parents, and other 'special' people.  

 

Currently, if the search of LDAP1 fails CAS falls through to LDAP2.  In the
past, it's been sufficient for those people only in LDAP2 to merely
authenticate.  Now, I need to get an attribute from that directory and map
it to the attribute map to the same field that LDAP1 would use.  The problem
is the name of the fields is different.  In LDAP1 the field is 'cn' in LDAP2
the field is 'uid'.  I somehow have to get that value from into a custom
Attribute field we called UDC_IDENTIFIER regardless of the directory.

 

Can I have more than one attribute repository, and if can someone point to
an example config?

 

 

 

Am I making this too complicated?  Is there another way to handle this?  

 

Thanks

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to