Re: [cas-user] CAS Management UI Question

2020-07-27 Thread randomuser878 
You did not mention version but per bug description, I am thinking you are 
talking about 6.1.x. If not, disregard.

Either wait for cas-management overlay 6.1.7+ that might be forthcoming 
(see change log) or update the current cas-management overlay to version 
6.1.4 or 6.1.7  for both cas and cas-management and fully compile  In 
addition do back port the two files patched per cas-management 6.1.7. 

The patch for attribute add/remove/update per service was fixed in master 
post *cas-management Dec 10th commit*, but was available only as part of 
cas-management 6.1.4-SNAPSHOT release.
 Well cas-XYZ.6.1.4-SNAPSHOT is gone from repos so you can not just do 
overlay.  I am afraid I am very familiar with this bug as it was a major 
road block to cas 6.1.x for me.

 Good news Travis et al has started cycling back to cas-management per 
recent announcement on this group list.
 Thanking them ahead of time particularly getting pac4J api changes per 
6.2.x resolved in the future. That is above my current knowledge.

   


On Monday, July 27, 2020 at 10:00:23 AM UTC-4 richard.frovarp wrote:

>
> 
> https://apereo.github.io/cas-management/5.3.x/installation/Installing-ServicesMgmt-Webapp.html#available-attributes
>
> On Mon, 2020-07-20 at 09:14 -0600, Bryan Wooten wrote:
>
> How do I add / remove allowed attributes to a service? 
>
> The json file (below) shows the attributes. Note this file was 
> imported from an earlier 
> cas system.
>
> I can't find a way to make changes from the new UI.
>
> I have the same issue trying to create a new service.
>
> What am I missing?
>
> -Bryan
>
> University of Utah
>
> {
>   @class: org.apereo.cas.services.RegexRegisteredService
>   serviceId: ^https://appserv01-test.idm.utah.edu/.*
>   name: appserv01TestIdmUtahEdu
>   id: 1014
>   description: "Bryan Wooten "
>   expirationPolicy:
>   {
> @class: 
> org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy
> deleteWhenExpired: false
> notifyWhenDeleted: false
>   }
>   proxyPolicy:
>   {
> @class: 
> org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy
> pattern: ^https?://.*
>   }
>   evaluationOrder: 0
>   usernameAttributeProvider:
>   {
> @class: 
> org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider
> canonicalizationMode: NONE
> encryptUsername: false
>   }
>   logoutType: BACK_CHANNEL
>   requiredHandlers:
>   [
> java.util.HashSet
> []
>   ]
>   environments:
>   [
> java.util.HashSet
> []
>   ]
>   attributeReleasePolicy:
>   {
> @class: org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy
> principalAttributesRepository:
> {
>   @class: 
> org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository
>   mergingStrategy: MULTIVALUED
>   ignoreResolvedAttributes: false
> }
> consentPolicy:
> {
>   @class: 
> org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy
>   enabled: true
>   order: 0
> }
> authorizedToReleaseCredentialPassword: false
> authorizedToReleaseProxyGrantingTicket: false
> excludeDefaultAttributes: false
> authorizedToReleaseAuthenticationAttributes: true
> order: 0
> allowedAttributes:
> [
>   java.util.ArrayList
>   [
> firstName
> lastName
> displayName
> email
> homephone
> department
> ou
> cn
> telephoneNumber
> acadplan
> almail
> eduPersonAffiliation
> uid
> eduPersonPrincipalName
> ummail
> unid
> uudept
> uustudent
>   ]
> ]
>   }
>   multifactorPolicy:
>   {
> @class: 
> org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy
> multifactorAuthenticationProviders:
> [
>   java.util.LinkedHashSet
>   []
> ]
> failureMode: UNDEFINED
> bypassEnabled: false
>   }
>   accessStrategy:
>   {
> @class: org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy
> order: 0
> enabled: true
> ssoEnabled: true
> delegatedAuthenticationPolicy:
> {
>   @class: 
> org.apereo.cas.services.DefaultRegisteredServiceDelegatedAuthenticationPolicy
>   allowedProviders:
>   [
> java.util.LinkedHashSet
> []
>   ]
>   permitUndefined: true
>   exclusive: false
> }
> requireAllAttributes: true
> requiredAttributes:
> {
>   @class: java.util.HashMap
> }
> rejectedAttributes:
> {
>   @class: java.util.HashMap
> }
> caseInsensitive: false
>   }
>   properties:
>   {
> @class: java.util.HashMap
>   }
>   contacts:
>   [
> java.util.ArrayList
> []
>   ]
> }
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines:

Re: [cas-user] CAS Management UI Question

2020-07-27 Thread Richard Frovarp 
https://apereo.github.io/cas-management/5.3.x/installation/Installing-ServicesMgmt-Webapp.html#available-attributes

On Mon, 2020-07-20 at 09:14 -0600, Bryan Wooten wrote:
How do I add / remove allowed attributes to a service?

The json file (below) shows the attributes. Note this file was imported from an 
earlier
cas system.

I can't find a way to make changes from the new UI.

I have the same issue trying to create a new service.

What am I missing?

-Bryan

University of Utah

{
  @class: org.apereo.cas.services.RegexRegisteredService
  serviceId: ^https://appserv01-test.idm.utah.edu/.*
  name: appserv01TestIdmUtahEdu
  id: 1014
  description: "Bryan Wooten "
  expirationPolicy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy
deleteWhenExpired: false
notifyWhenDeleted: false
  }
  proxyPolicy:
  {
@class: org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy
pattern: ^https?://.*
  }
  evaluationOrder: 0
  usernameAttributeProvider:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider
canonicalizationMode: NONE
encryptUsername: false
  }
  logoutType: BACK_CHANNEL
  requiredHandlers:
  [
java.util.HashSet
[]
  ]
  environments:
  [
java.util.HashSet
[]
  ]
  attributeReleasePolicy:
  {
@class: org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy
principalAttributesRepository:
{
  @class: 
org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository
  mergingStrategy: MULTIVALUED
  ignoreResolvedAttributes: false
}
consentPolicy:
{
  @class: 
org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy
  enabled: true
  order: 0
}
authorizedToReleaseCredentialPassword: false
authorizedToReleaseProxyGrantingTicket: false
excludeDefaultAttributes: false
authorizedToReleaseAuthenticationAttributes: true
order: 0
allowedAttributes:
[
  java.util.ArrayList
  [
firstName
lastName
displayName
email
homephone
department
ou
cn
telephoneNumber
acadplan
almail
eduPersonAffiliation
uid
eduPersonPrincipalName
ummail
unid
uudept
uustudent
  ]
]
  }
  multifactorPolicy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy
multifactorAuthenticationProviders:
[
  java.util.LinkedHashSet
  []
]
failureMode: UNDEFINED
bypassEnabled: false
  }
  accessStrategy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy
order: 0
enabled: true
ssoEnabled: true
delegatedAuthenticationPolicy:
{
  @class: 
org.apereo.cas.services.DefaultRegisteredServiceDelegatedAuthenticationPolicy
  allowedProviders:
  [
java.util.LinkedHashSet
[]
  ]
  permitUndefined: true
  exclusive: false
}
requireAllAttributes: true
requiredAttributes:
{
  @class: java.util.HashMap
}
rejectedAttributes:
{
  @class: java.util.HashMap
}
caseInsensitive: false
  }
  properties:
  {
@class: java.util.HashMap
  }
  contacts:
  [
java.util.ArrayList
[]
  ]
}

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/37500de3678892cb89f783c2f8bb7b615012a74f.camel%40ndsu.edu.

Re: [cas-user] CAS Management UI Question

2020-07-27 Thread Ray Bon 
Bryan,

In my brief looks at cas management, I did not see a way to add attributes.
My plan is to tell one of our LDAP gurus to manually add them ;)

Ray

On Mon, 2020-07-20 at 09:14 -0600, Bryan Wooten wrote:
Notice: This message was sent fom outside the University of Victoria email 
system. Please be cautious with links and sensitive information.

How do I add / remove allowed attributes to a service?

The json file (below) shows the attributes. Note this file was imported from an 
earlier
cas system.

I can't find a way to make changes from the new UI.

I have the same issue trying to create a new service.

What am I missing?

-Bryan

University of Utah

{
  @class: org.apereo.cas.services.RegexRegisteredService
  serviceId: ^https://appserv01-test.idm.utah.edu/.*
  name: appserv01TestIdmUtahEdu
  id: 1014
  description: "Bryan Wooten "
  expirationPolicy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy
deleteWhenExpired: false
notifyWhenDeleted: false
  }
  proxyPolicy:
  {
@class: org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy
pattern: ^https?://.*
  }
  evaluationOrder: 0
  usernameAttributeProvider:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider
canonicalizationMode: NONE
encryptUsername: false
  }
  logoutType: BACK_CHANNEL
  requiredHandlers:
  [
java.util.HashSet
[]
  ]
  environments:
  [
java.util.HashSet
[]
  ]
  attributeReleasePolicy:
  {
@class: org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy
principalAttributesRepository:
{
  @class: 
org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository
  mergingStrategy: MULTIVALUED
  ignoreResolvedAttributes: false
}
consentPolicy:
{
  @class: 
org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy
  enabled: true
  order: 0
}
authorizedToReleaseCredentialPassword: false
authorizedToReleaseProxyGrantingTicket: false
excludeDefaultAttributes: false
authorizedToReleaseAuthenticationAttributes: true
order: 0
allowedAttributes:
[
  java.util.ArrayList
  [
firstName
lastName
displayName
email
homephone
department
ou
cn
telephoneNumber
acadplan
almail
eduPersonAffiliation
uid
eduPersonPrincipalName
ummail
unid
uudept
uustudent
  ]
]
  }
  multifactorPolicy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy
multifactorAuthenticationProviders:
[
  java.util.LinkedHashSet
  []
]
failureMode: UNDEFINED
bypassEnabled: false
  }
  accessStrategy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy
order: 0
enabled: true
ssoEnabled: true
delegatedAuthenticationPolicy:
{
  @class: 
org.apereo.cas.services.DefaultRegisteredServiceDelegatedAuthenticationPolicy
  allowedProviders:
  [
java.util.LinkedHashSet
[]
  ]
  permitUndefined: true
  exclusive: false
}
requireAllAttributes: true
requiredAttributes:
{
  @class: java.util.HashMap
}
rejectedAttributes:
{
  @class: java.util.HashMap
}
caseInsensitive: false
  }
  properties:
  {
@class: java.util.HashMap
  }
  contacts:
  [
java.util.ArrayList
[]
  ]
}

--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I respectfully acknowledge that my place of work is located within the 
ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
WSÁNEĆ Nations.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d5d22e764b42e91b90e82be3720a48687d918cba.camel%40uvic.ca.

[cas-user] CAS Management UI Question

2020-07-20 Thread Bryan Wooten 
How do I add / remove allowed attributes to a service?

The json file (below) shows the attributes. Note this file was
imported from an earlier
cas system.

I can't find a way to make changes from the new UI.

I have the same issue trying to create a new service.

What am I missing?

-Bryan

University of Utah

{
  @class: org.apereo.cas.services.RegexRegisteredService
  serviceId: ^https://appserv01-test.idm.utah.edu/.*
  name: appserv01TestIdmUtahEdu
  id: 1014
  description: "Bryan Wooten "
  expirationPolicy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy
deleteWhenExpired: false
notifyWhenDeleted: false
  }
  proxyPolicy:
  {
@class:
org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy
pattern: ^https?://.*
  }
  evaluationOrder: 0
  usernameAttributeProvider:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider
canonicalizationMode: NONE
encryptUsername: false
  }
  logoutType: BACK_CHANNEL
  requiredHandlers:
  [
java.util.HashSet
[]
  ]
  environments:
  [
java.util.HashSet
[]
  ]
  attributeReleasePolicy:
  {
@class: org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy
principalAttributesRepository:
{
  @class:
org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository
  mergingStrategy: MULTIVALUED
  ignoreResolvedAttributes: false
}
consentPolicy:
{
  @class:
org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy
  enabled: true
  order: 0
}
authorizedToReleaseCredentialPassword: false
authorizedToReleaseProxyGrantingTicket: false
excludeDefaultAttributes: false
authorizedToReleaseAuthenticationAttributes: true
order: 0
allowedAttributes:
[
  java.util.ArrayList
  [
firstName
lastName
displayName
email
homephone
department
ou
cn
telephoneNumber
acadplan
almail
eduPersonAffiliation
uid
eduPersonPrincipalName
ummail
unid
uudept
uustudent
  ]
]
  }
  multifactorPolicy:
  {
@class:
org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy
multifactorAuthenticationProviders:
[
  java.util.LinkedHashSet
  []
]
failureMode: UNDEFINED
bypassEnabled: false
  }
  accessStrategy:
  {
@class: org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy
order: 0
enabled: true
ssoEnabled: true
delegatedAuthenticationPolicy:
{
  @class:
org.apereo.cas.services.DefaultRegisteredServiceDelegatedAuthenticationPolicy
  allowedProviders:
  [
java.util.LinkedHashSet
[]
  ]
  permitUndefined: true
  exclusive: false
}
requireAllAttributes: true
requiredAttributes:
{
  @class: java.util.HashMap
}
rejectedAttributes:
{
  @class: java.util.HashMap
}
caseInsensitive: false
  }
  properties:
  {
@class: java.util.HashMap
  }
  contacts:
  [
java.util.ArrayList
[]
  ]
}

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAG9x2GU5m9SidDLg88sNfTtWc42ngoKKBFDBy_zEjxLm2A2X3Q%40mail.gmail.com.