apache mod_auth_cas allows to chain an authz module like mod_athnz_ldap.
http://www.ja-sig.org/wiki/display/CASC/mod_auth_cas
for example, after authenticate with cas (authn) you can control who
access a page with an authorization (authz) like this:
<Location /usage_public>
AuthType Cas
AuthName "INT auth"
AuthLDAPUrl "ldap://ldapserver.domain.fr/dc=example,dc=fr";
Require ldap-attribute eduPersonAffiliation=employee
# Require valid-user
</Location>
if it helps ...
Alexandra Keller wrote:
>
> Hi,
>
> I’m sorry, this question is really basic:
>
> Is it possible to use CAS for authorization?
>
> I know that CAS is not built for this, but are there any additional
> modules to the CAS server to carry out authorization?
>
> Thank you very much!
>
> Alexandra
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas
