Hi again,
We solved the issue by adding an entryResolver bean to the authenticator bean.
This configuration was indicated for Active Directory but not for
others directories.
We found the solution by starting the CAS server in a debugger.
<bean id="authenticator" class="org.ldaptive.auth.Authenticator"
c:resolver-ref="dnResolver" c:handler-ref="authHandler"
p:entryResolver-ref="entryResolver" />
<bean id="entryResolver" class="org.ldaptive.auth.PooledSearchEntryResolver"
p:connectionFactory-ref="searchPooledLdapConnectionFactory" />
Regards,
2016-02-01 15:59 GMT+01:00 Nicolas Dupont-Jubien
<[email protected]>:
> I send you here a project with all files in the archive cas-overlay.zip
>
> * XML files for the configurations
> * CAS.LOG : in TRACE mode
>
> I replace all confidential informations with ***** in the files.
>
> I confirm that I have a read access on the attribute uid.
>
> Thanks for your help.
>
> Regards,
>
>
>
> 2016-01-28 19:38 GMT+01:00 Misagh Moayyed <[email protected]>:
>> Your LDAP response is not returning any attributes. Either they are not
>> available, or a permissions issue, etc. You want to consult with your LDAP
>> instance.
>>
>>
>>
>> From: [email protected] [mailto:[email protected]] On Behalf Of Nicolas
>> Dupont-Jubien
>> Sent: Thursday, January 28, 2016 9:34 AM
>> To: CAS Community <[email protected]>
>> Subject: [cas-user] LdapAuthenticationHandler exception details: uid
>> attribute not found
>>
>>
>>
>> Hi,
>>
>> I try to configure CAS Server 4.1.x and following the procedures :
>>
>> * CAS Overlay Template
>> * LDAP (Authenticated Bind + LDAPS)
>> * SAML 1.1
>>
>> But unfortunately, I still have the error after LDAP Successul
>> authentication:
>>
>> LdapAuthenticationHandler exception details: uid attribute not found
>>
>>
>> I am totally stucked. If anyone has a hint, it will be welcome.
>>
>> Details
>>
>> [STDOUT] 2016-01-28 16:52:10,210 DEBUG [org.ldaptive.auth.Authenticator] -
>> <authenticate
>> response=[org.ldaptive.auth.AuthenticationHandlerResponse@21463007::connection=[org.ldaptive.DefaultConnectionFactory$DefaultConnection@20858861::config=[org.ldaptive.ConnectionConfig@25942145::ldapUrl=ldaps://ldap.host:636,
>> connectTimeout=3000, responseTimeout=-1, sslConfig=null, useSSL=true,
>> useStartTLS=false, connectionInitializer=null],
>> providerConnectionFactory=[org.ldaptive.provider.jndi.JndiConnectionFactory@25205438::metadata=[ldapUrl=ldaps://ldap.host:636,
>> count=1],
>> environment={java.naming.ldap.factory.socket=org.ldaptive.ssl.ThreadLocalTLSSocketFactory,
>> com.sun.jndi.ldap.connect.timeout=3000, java.naming.ldap.version=3,
>> java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory,
>> java.naming.security.protocol=ssl},
>> providerConfig=[org.ldaptive.provider.jndi.JndiProviderConfig@26226567::operationExceptionResultCodes=[PROTOCOL_ERROR,
>> SERVER_DOWN], properties={},
>> connectionStrategy=org.ldaptive.provider.ConnectionStrategies$DefaultConnectionStrategy@6a64e7,
>> controlProcessor=org.ldaptive.provider.ControlProcessor@1aa7703,
>> environment=null, tracePackets=null, removeDnUrls=true,
>> searchIgnoreResultCodes=[TIME_LIMIT_EXCEEDED, SIZE_LIMIT_EXCEEDED,
>> PARTIAL_RESULTS], sslSocketFactory=null, hostnameVerifier=null]],
>> providerConnection=org.ldaptive.provider.jndi.JndiConnection@c819b7],
>> result=true, resultCode=SUCCESS, message=null, controls=null] for
>> dn=uid=myuser,ou=People,dc=sesame with
>> request=[org.ldaptive.auth.AuthenticationRequest@9610255::user=myuser,
>> retAttrs=[uid, mail, givenName, sn]]>
>> [STDOUT] 2016-01-28 16:52:10,211 DEBUG
>> [org.jasig.cas.authentication.LdapAuthenticationHandler] - <LDAP response:
>> [org.ldaptive.auth.AuthenticationResponse@3043705::authenticationResultCode=AUTHENTICATION_HANDLER_SUCCESS,
>> ldapEntry=[dn=uid=myuser,ou=People,dc=sesame[]], accountState=null,
>> result=true, resultCode=SUCCESS, message=null, controls=null]>
>> [STDOUT] 2016-01-28 16:52:10,211 INFO
>> [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] -
>> <LdapAuthenticationHandler failed authenticating myuser+password>
>> [STDOUT] 2016-01-28 16:52:10,212 DEBUG
>> [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] -
>> <LdapAuthenticationHandler exception details: uid attribute not found for
>> myuser>
>>
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
