cas.authn.attributeRepository.defaultAttributesToRelease=email,sn,givenName,displayName
在 2017年9月19日星期二 UTC-4下午2:34:34，SOPHIE Fang写道：
>
> I think i have a similar issuer though not as complicated as his.
> My client side is using CAS protocol. dependency i use cas-client version
> 3.4.1
> Below i have it in my cas.properties
>
> cas.authn.ldap[0].principalAttributeList=username,sAMAccountName,sn,cn,givenName,displayName
> However, the AttributePrincipal does not return LDAP_ATTR_DISPLAYNAME
> LDAP_ATTR_SN
> Do i also need to add cas dependency in the cas sso server side?
>
>
> 在 2017年9月19日星期二 UTC-4下午12:26:17，rbon写道：
>>
>> Add this to your log4j2.xml to see if the attributes are being released
>> from LDAP:
>> <AsyncLogger
>> name="org.apereo.cas.authentication..LdapAuthenticationHandler"
>> level="debug" />
>>
>> Like Doug said, your client application needs to be configured to use
>> SAML 1.1 or CAS protocol 3.
>>
>> Ray
>>
>> On Tue, 2017-09-19 at 04:24 -0700, Jérémie Pilette wrote:
>>
>> Thank you for your responses.
>>
>> I have used json configuration "attributeReleasePolicy" but no
>> attributes are sent to the service.
>> Is there a parameter to add in the cas.properties?
>>
>> In the "Attribute Release Policies", it is written that it is about
>> principal attributes. Where can we defined the principal Attributes ?
>>
>> I have to forget something .... but what ?
>>
>> Thank you,
>>
>> Jérémie
>>
>> Le vendredi 15 septembre 2017 17:51:05 UTC+2, rbon a écrit :
>>
>> Jérémie
>>
>> You can specify the attributes to be released on a per service basis. Add
>> something like this to you service definition:
>>
>> "attributeReleasePolicy" : { "@class" :
>> "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy" ,
>> "allowedAttributes"
>> : { "@class" : "java.util.TreeMap",
>> "uvicEduPersonNetLinkContactUpdateTimestamp"
>> : "contactUpdateTimestamp", "uvicEduPersonSpridenID" :
>> "UDC_IDENTIFIER" } }
>>
>> This way you can set the identifier name to be service specific and leave
>> the ldap identifiers in their raw format.
>> See
>> https://apereo.github.io/cas/5.1.x/integration/Attribute-Release-Policies.html
>>
>> Ray
>>
>> On Fri, 2017-09-15 at 06:42 -0700, Jérémie Pilette wrote:
>>
>> Is there somebody who can help me please ?
>>
>> Thank you,
>>
>> Jérémie
>>
>> Le jeudi 7 septembre 2017 15:50:52 UTC+2, Jérémie Pilette a écrit :
>>
>> Hello,
>>
>> I would like to configure my cas.properties in order to have the
>> possibility to transfert some values from LDAP to a service (Ypareo for
>> example)
>>
>> Do you know how to do that ?
>>
>> Must I use these parameters :
>>
>> # cas.authn.ldap[0].principalAttributeId=uid
>> # cas.authn.ldap[0].principalAttributePassword=password
>> #
>> cas.authn.ldap[0].principalAttributeList=sn,cn:commonName,givenName,eduPersonTargettedId:SOME_IDENTIFIER
>>
>>
>> or these parameters :
>> # cas.authn.attributeRepository.ldap[0].attributes.uid=uid
>> # cas.authn.attributeRepository.ldap[0].attributes.displayName=displayName
>> # cas.authn.attributeRepository.ldap[0].attributes.cn=commonName
>> #
>> cas.authn.attributeRepository.ldap[0].attributes.affiliation=groupMembership
>>
>>
>> Thanks a lot,
>>
>> Jérémie
>>
>>
>> --
>> Ray Bon
>> Programmer analyst
>> Development Services, University Systems
>> 2507218831 | CLE 019 | [email protected]
>>
>>
>> --
>> Ray Bon
>> Programmer analyst
>> Development Services, University Systems
>> 2507218831 | CLE 019 | [email protected]
>>
>>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/786657a6-51cb-4231-94cf-bb29259e32ce%40apereo.org.
