Re: [cas-user] CAS attribute release consent will be reset if the server restarted

2021-03-09 Thread Dewi Suci Rafianti
Thank you for your answer. I've found the reason. It's because of encrytion. If I dont define private and public key, CAS will generate it automatically. And when cas server is restarted, the key will be generated again. So the consent that is saved in LDAP can't be decrypt by CAS. On

Re: [cas-user] CAS attribute release consent will be reset if the server restarted

2021-03-09 Thread Ray Bon
Dewi, Have you verified that the record was added to LDAP, is in the correct path and identified by the {user}? If you change the attributes stored for a service (with and without restarting server), does the record update? Check your ldap and cas (ldaptive) logs. Ray On Mon, 2021-03-08

[cas-user] CAS attribute release consent will be reset if the server restarted

2021-03-08 Thread Dewi Suci Rafianti
I have configured CAS server v6.3.2 to ask user about attribute release consent. The consent is succeccfully saved in LDAP using description attribute. When a user access the same application for the second time, user won't be asked the same consent again. But, when the CAS server is

Re: [cas-user] CAS Attribute

2019-01-23 Thread Ray Bon
John, What is your service definition for https://k? Ray On Wed, 2019-01-23 at 11:13 +0300, john adz wrote: Ray, I check the records that the error is returned because the mail did not come. I'm sending the log again. Is this way when the mail is gone? Or should I see the e-mail address in

Re: [cas-user] CAS Attribute

2019-01-23 Thread john adz
Ray, I check the records that the error is returned because the mail did not come. I'm sending the log again. Is this way when the mail is gone? Or should I see the e-mail address in the WHO: WHAT: section of the page? 2019-01-23 07:17:28,283 DEBUG

Re: [cas-user] CAS Attribute

2019-01-22 Thread Ray Bon
John, What happens on the client side? Check client logs to see if email is being received. Ray On Tue, 2019-01-22 at 10:41 +0300, john adz wrote: Hi Ray, Thanks for your answer. I've done something, and I see e-mails in the logs. But I don't know how to send this email address to the

Re: [cas-user] CAS Attribute

2019-01-22 Thread john adz
I tried this way but I couldn't send the mail again. application.properties cas.authn.attributeRepository.jdbc.attributes.mail=email cas.authn.attributeRepository.defaultAttributesToRelease=mail cas.log INFO [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - 2019-01-22

Re: [cas-user] CAS Attribute

2019-01-22 Thread Michele Melluso
Could you try the same property without squared brackets? cas.authn.attributeRepository.*jdbc*.attributes.mail=email as described here? https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#jdbc On Tuesday, January 22, 2019 at 10:23:28 AM UTC+1, john adz wrote: > > Hi

Re: [cas-user] CAS Attribute

2019-01-22 Thread john adz
Hi Michele, I get an invalid property error when I use jdbc [0]. I'il try again and send the log. Because I am using cas 5.0.x. I think you said for 5.2. In the meantime, I can understand how the mail sent mail. Thanks, On Tue, Jan 22, 2019 at 11:38 AM Michele Melluso wrote: > Hi, > I was

Re: [cas-user] CAS Attribute

2019-01-22 Thread Michele Melluso
Hi, I was wrong, please ignore my previous answer. Looking at your configuration I think you may be using the wrong properties to select attributes: cas.authn.attributeRepository.attributes.mail=email both in my configuration and here:

Re: [cas-user] CAS Attribute

2019-01-22 Thread Michele Melluso
Looking at your configuration I think you should replace in defaultattributesToRelease property the value email with mail. That is because you defined an attribute called "mail" populated with the "email" field. The the new attribute "mail" is what you want to release.

Re: [cas-user] CAS Attribute

2019-01-21 Thread john adz
Hi Ray, Thanks for your answer. I've done something, and I see e-mails in the logs. But I don't know how to send this email address to the application. Or I don't know if I'm sending it right now. log like 2019-01-22 07:28:04,472 INFO

Re: [cas-user] CAS Attribute

2019-01-21 Thread Ray Bon
John, Attribute release policy for 5.0.x is here https://apereo.github.io/cas/5.0.x/integration/Attribute-Release-Policies.html You will also need to use SAML 1.1 or CAS 3 protocols, https://apereo.github.io/cas/5.0.x/integration/Attribute-Release.html Ray On Mon, 2019-01-21 at 16:30 +0300,

Re: [cas-user] CAS Attribute

2019-01-21 Thread Ray Bon
John, The logging file is in /etc/cas/config in your project directory. There are a lot of changes from 5.0.x to 5.2.x with regard to cas.properties. You are probably correct with the original config. I think Michele is correct. You specify how you want to recognize attributes and you specify

Re: [cas-user] CAS Attribute

2019-01-18 Thread john adz
Hi, Hello, I want to send other information such as mail address or firstname which is registered in user database. What should I add to application.properties? Can you give an example? On Fri, Jan 18, 2019 at 8:07 PM Ray Bon wrote: > John, > > Do you mean you want to email the user the

Re: [cas-user] CAS Attribute

2019-01-18 Thread Ray Bon
John, Do you mean you want to email the user the service they logged in to? Or send the service the user's email address? If the latter, you have to release the attribute in the service definition, https://apereo.github.io/cas/5.2.x/integration/Attribute-Release-Policies.html To see what

[cas-user] CAS Attribute

2019-01-18 Thread john adz
Hi, I did cas mysql authentication. I want to send cas service to the user's email address. Add attribute, but not. Can you help me? application.properties cas.authn.accept.users= cas.authn.jdbc.query[0].fieldUser=username cas.authn.jdbc.query[0].sql=SELECT password FROM users WHERE

Re: [cas-user] CAS attribute resolution with LDAP

2018-01-10 Thread William E.
In our cas.properties, we also have: cas.personDirectory.principalAttribute=uid,mail cas.personDirectory.returnNull=false cas.personDirectory.principalResolutionFailureFatal=false Hope this helps. On Wednesday, January 10, 2018 at 10:30:38 AM UTC-6, rbon wrote: > > Sebastien, > > To see what

Re: [cas-user] CAS attribute resolution with LDAP

2018-01-10 Thread Ray Bon
Sebastien, To see what is happening on CAS side, put this in your CAS log config: Have you configured LDAP to release those attributes? Ray On Wed, 2018-01-10 at 06:11 -0800, Sébastien Ragons wrote: Hello, I am trying to get attribute

[cas-user] CAS attribute resolution with LDAP

2018-01-10 Thread Sébastien Ragons
Hello, I am trying to get attribute from LDAP but with no success since days. So i tried a basic configuration but it doesnt work. My basic configuration: # Authentification LDAP cas.authn.ldap[0].type=AUTHENTICATED cas.authn.ldap[0].ldapUrl=ldap://frparantgaga:389/