I think i have a similar issuer though not as complicated as his.
My client side is using CAS protocol. dependency i use cas-client version
3.4.1
Below i have it in my cas.properties
cas.authn.ldap[0].principalAttributeList=username,sAMAccountName,sn,cn,givenName,displayName
However, the AttributePrincipal does not return LDAP_ATTR_DISPLAYNAME
LDAP_ATTR_SN
Do i also need to add cas dependency in the cas sso server side?
在 2017年9月19日星期二 UTC-4下午12:26:17，rbon写道：
>
> Add this to your log4j2.xml to see if the attributes are being released
> from LDAP:
> <AsyncLogger
> name="org.apereo.cas.authentication..LdapAuthenticationHandler"
> level="debug" />
>
> Like Doug said, your client application needs to be configured to use SAML
> 1.1 or CAS protocol 3.
>
> Ray
>
> On Tue, 2017-09-19 at 04:24 -0700, Jérémie Pilette wrote:
>
> Thank you for your responses.
>
> I have used json configuration "attributeReleasePolicy" but no attributes
> are sent to the service.
> Is there a parameter to add in the cas.properties?
>
> In the "Attribute Release Policies", it is written that it is about
> principal attributes. Where can we defined the principal Attributes ?
>
> I have to forget something .... but what ?
>
> Thank you,
>
> Jérémie
>
> Le vendredi 15 septembre 2017 17:51:05 UTC+2, rbon a écrit :
>
> Jérémie
>
> You can specify the attributes to be released on a per service basis. Add
> something like this to you service definition:
>
> "attributeReleasePolicy" : { "@class" :
> "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy" ,
> "allowedAttributes"
> : { "@class" : "java.util.TreeMap",
> "uvicEduPersonNetLinkContactUpdateTimestamp"
> : "contactUpdateTimestamp", "uvicEduPersonSpridenID" :
> "UDC_IDENTIFIER" } }
>
> This way you can set the identifier name to be service specific and leave
> the ldap identifiers in their raw format.
> See
> https://apereo.github.io/cas/5.1.x/integration/Attribute-Release-Policies.html
>
> Ray
>
> On Fri, 2017-09-15 at 06:42 -0700, Jérémie Pilette wrote:
>
> Is there somebody who can help me please ?
>
> Thank you,
>
> Jérémie
>
> Le jeudi 7 septembre 2017 15:50:52 UTC+2, Jérémie Pilette a écrit :
>
> Hello,
>
> I would like to configure my cas.properties in order to have the
> possibility to transfert some values from LDAP to a service (Ypareo for
> example)
>
> Do you know how to do that ?
>
> Must I use these parameters :
>
> # cas.authn.ldap[0].principalAttributeId=uid
> # cas.authn.ldap[0].principalAttributePassword=password
> #
> cas.authn.ldap[0].principalAttributeList=sn,cn:commonName,givenName,eduPersonTargettedId:SOME_IDENTIFIER
>
>
> or these parameters :
> # cas.authn.attributeRepository.ldap[0].attributes.uid=uid
> # cas.authn.attributeRepository.ldap[0].attributes.displayName=displayName
> # cas.authn.attributeRepository.ldap[0].attributes.cn=commonName
> # cas.authn.attributeRepository.ldap[0].attributes.affiliation=groupMembership
>
>
> Thanks a lot,
>
> Jérémie
>
>
> --
> Ray Bon
> Programmer analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | [email protected]
>
>
> --
> Ray Bon
> Programmer analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | [email protected] <javascript:>
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/7a054d3b-991a-4a75-8c82-b38c5c865345%40apereo.org.
