It works. If you are like me, releasing it regardless of which client
applications are calling
Here is what i did:
cas.authn.attributeRepository.defaultAttributesToRelease=mail,sn,givenName,displayName
cas.authn.ldap[0].principalAttributeList=username,sAMAccountName,sn,cn,givenName,displayName,mail
I checked the source code. it seems like it first takes the
principalAttributeList then it's checking if each is contained in the
defaultToRelease. Thus you need to add a field in both places
在 2017年9月19日星期二 UTC-4下午3:01:50，SOPHIE Fang写道：
>
>
>
> cas.authn.attributeRepository.defaultAttributesToRelease=mail,sn,givenName,displayName
>
> 在 2017年9月19日星期二 UTC-4下午2:34:34，SOPHIE Fang写道：
>>
>> I think i have a similar issuer though not as complicated as his.
>> My client side is using CAS protocol. dependency i use cas-client version
>> 3.4.1
>> Below i have it in my cas.properties
>>
>> cas.authn.ldap[0].principalAttributeList=username,sAMAccountName,sn,cn,givenName,displayName
>> However, the AttributePrincipal does not return LDAP_ATTR_DISPLAYNAME
>> LDAP_ATTR_SN
>> Do i also need to add cas dependency in the cas sso server side?
>>
>>
>> 在 2017年9月19日星期二 UTC-4下午12:26:17，rbon写道：
>>>
>>> Add this to your log4j2.xml to see if the attributes are being released
>>> from LDAP:
>>> <AsyncLogger
>>> name="org.apereo.cas.authentication..LdapAuthenticationHandler"
>>> level="debug" />
>>>
>>> Like Doug said, your client application needs to be configured to use
>>> SAML 1.1 or CAS protocol 3.
>>>
>>> Ray
>>>
>>> On Tue, 2017-09-19 at 04:24 -0700, Jérémie Pilette wrote:
>>>
>>> Thank you for your responses.
>>>
>>> I have used json configuration "attributeReleasePolicy" but no
>>> attributes are sent to the service.
>>> Is there a parameter to add in the cas.properties?
>>>
>>> In the "Attribute Release Policies", it is written that it is about
>>> principal attributes. Where can we defined the principal Attributes ?
>>>
>>> I have to forget something .... but what ?
>>>
>>> Thank you,
>>>
>>> Jérémie
>>>
>>> Le vendredi 15 septembre 2017 17:51:05 UTC+2, rbon a écrit :
>>>
>>> Jérémie
>>>
>>> You can specify the attributes to be released on a per service basis.
>>> Add something like this to you service definition:
>>>
>>> "attributeReleasePolicy" : { "@class" :
>>> "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy" ,
>>> "allowedAttributes"
>>> : { "@class" : "java.util.TreeMap",
>>> "uvicEduPersonNetLinkContactUpdateTimestamp"
>>> : "contactUpdateTimestamp", "uvicEduPersonSpridenID" :
>>> "UDC_IDENTIFIER" } }
>>>
>>> This way you can set the identifier name to be service specific and
>>> leave the ldap identifiers in their raw format.
>>> See
>>> https://apereo.github.io/cas/5.1.x/integration/Attribute-Release-Policies.html
>>>
>>> Ray
>>>
>>> On Fri, 2017-09-15 at 06:42 -0700, Jérémie Pilette wrote:
>>>
>>> Is there somebody who can help me please ?
>>>
>>> Thank you,
>>>
>>> Jérémie
>>>
>>> Le jeudi 7 septembre 2017 15:50:52 UTC+2, Jérémie Pilette a écrit :
>>>
>>> Hello,
>>>
>>> I would like to configure my cas.properties in order to have the
>>> possibility to transfert some values from LDAP to a service (Ypareo for
>>> example)
>>>
>>> Do you know how to do that ?
>>>
>>> Must I use these parameters :
>>>
>>> # cas.authn.ldap[0].principalAttributeId=uid
>>> # cas.authn.ldap[0].principalAttributePassword=password
>>> #
>>> cas.authn.ldap[0].principalAttributeList=sn,cn:commonName,givenName,eduPersonTargettedId:SOME_IDENTIFIER
>>>
>>>
>>> or these parameters :
>>> # cas.authn.attributeRepository.ldap[0].attributes.uid=uid
>>> # cas.authn.attributeRepository.ldap[0].attributes.displayName=displayName
>>> # cas.authn.attributeRepository.ldap[0].attributes.cn=commonName
>>> #
>>> cas.authn.attributeRepository.ldap[0].attributes.affiliation=groupMembership
>>>
>>>
>>> Thanks a lot,
>>>
>>> Jérémie
>>>
>>>
>>> --
>>> Ray Bon
>>> Programmer analyst
>>> Development Services, University Systems
>>> 2507218831 | CLE 019 | [email protected]
>>>
>>>
>>> --
>>> Ray Bon
>>> Programmer analyst
>>> Development Services, University Systems
>>> 2507218831 | CLE 019 | [email protected]
>>>
>>>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/c0a1397f-8a14-40cb-b7c0-850ac50751f1%40apereo.org.
