Hello all,
I'm trying to use CAS with OpenLDAP but I'm having troubles logging on
the CAS server.
------------------------------------------------------------------------
----------------------------------------------------------
********** This is some of the "slapd.conf" file:
****************
------------------------------------------------------------------------
----------------------------------------------------------
ucdata-path ./ucdata
include ./schema/core.schema
pidfile ./run/slapd.pid
argsfile ./run/slapd.args
database bdb
suffix "dc=my-domain,dc=com"
rootdn "cn=Manager,dc=my-domain,dc=com"
rootpw secret
directory ./data
index objectClass eq
schemacheck off
------------------------------------------------------------------------
----------------------------------------------------------
------------------------------------------------------------------------
----------------------------------------------------------
************* And some of the "deployerConfigContext.xml" file
*****************
------------------------------------------------------------------------
----------------------------------------------------------
<property name="authenticationHandlers">
<list>
<!--
| This is the authentication
handler that authenticates services by means of callback via SSL,
thereby validating
| a server side SSL certificate.
+-->
<bean
class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCred
entialsAuthenticationHandler"
p:httpClient-ref="httpClient" />
<!--
| This is the authentication
handler declaration that every CAS deployer will need to change before
deploying CAS
| into production. The default
SimpleTestUsernamePasswordAuthenticationHandler authenticates
UsernamePasswordCredentials
| where the username equals the
password. You will need to replace this with an AuthenticationHandler
that implements your
| local authentication strategy.
You might accomplish this by coding a new such handler and declaring
|
edu.someschool.its.cas.MySpecialHandler here, or you might use one of
the handlers provided in the adaptors modules.
+-->
<!-- <bean
class="org.jasig.cas.authentication.handler.support.SimpleTestUsernamePa
sswordAuthenticationHandler" /> -->
<!-- <bean
class="org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler" >
<property name="filter" value="sAMAccountName=%u" />
<property name="contextSource" ref="contextSource" />
</bean> -->
<bean
class="org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler">
<property name="filter"
value="cn=%u" />
<property
name="searchBase" value="dc=my-domain,dc=com" />
<property
name="contextSource" ref="contextSource" />
<property
name="ignorePartialResultException" value="yes" /> <!-- fix because of
how AD returns results -->
</bean>
</list>
</property>
................................
................................
<bean id="contextSource"
class="org.jasig.cas.adaptors.ldap.util.AuthenticatedLdapContextSource">
<property name="pooled" value="true"/>
<property name="urls">
<list>
<value>ldap://localhost:389</value>
</list>
</property>
<property name="userName"
value="{cn=Manager,dc=my-domain,dc=com}"/>
<property name="password" value="{secret}"/>
<property name="baseEnvironmentProperties">
<map>
<entry>
<key>
<value>java.naming.security.authentication</value>
</key>
<value>simple</value>
</entry>
</map>
</property>
</bean>
------------------------------------------------------------------------
----------------------------------------------------------
I don't see where the problem when I try to connect with user=Manager
and password=secret it does not work !!
Please help !!
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas
