Yes. Or you could create an attribute release policy in your service definition (https://apereo.github.io/cas/5.1.x/integration/Attribute-Release-Policies.html). If what you are doing though meets your needs I would stick with it since it is simpler.
From: [email protected] [mailto:[email protected]] On Behalf Of SOPHIE Fang Sent: Wednesday, September 20, 2017 4:06 AM To: CAS Community Subject: Re: [cas-user] Re: 5.1.x - How to configure CAS to transfert some values from different attribut of LDAP It works. If you are like me, releasing it regardless of which client applications are calling Here is what i did: cas.authn.attributeRepository.defaultAttributesToRelease=mail,sn,givenName,displayName cas.authn.ldap[0].principalAttributeList=username,sAMAccountName,sn,cn,givenName,displayName,mail I checked the source code. it seems like it first takes the principalAttributeList then it's checking if each is contained in the defaultToRelease. Thus you need to add a field in both places 在 2017年9月19日星期二 UTC-4下午3:01:50，SOPHIE Fang写道： cas.authn.attributeRepository.defaultAttributesToRelease=mail,sn,givenName,displayName 在 2017年9月19日星期二 UTC-4下午2:34:34，SOPHIE Fang写道： I think i have a similar issuer though not as complicated as his. My client side is using CAS protocol. dependency i use cas-client version 3.4.1 Below i have it in my cas.properties cas.authn.ldap[0].principalAttributeList=username,sAMAccountName,sn,cn,givenName,displayName However, the AttributePrincipal does not return LDAP_ATTR_DISPLAYNAME LDAP_ATTR_SN Do i also need to add cas dependency in the cas sso server side? 在 2017年9月19日星期二 UTC-4下午12:26:17，rbon写道： Add this to your log4j2.xml to see if the attributes are being released from LDAP: <AsyncLogger name="org.apereo.cas.authentication..LdapAuthenticationHandler" level="debug" /> Like Doug said, your client application needs to be configured to use SAML 1.1 or CAS protocol 3. Ray On Tue, 2017-09-19 at 04:24 -0700, Jérémie Pilette wrote: Thank you for your responses. I have used json configuration "attributeReleasePolicy" but no attributes are sent to the service. Is there a parameter to add in the cas.properties? In the "Attribute Release Policies", it is written that it is about principal attributes. Where can we defined the principal Attributes ? I have to forget something .... but what ? Thank you, Jérémie Le vendredi 15 septembre 2017 17:51:05 UTC+2, rbon a écrit : Jérémie You can specify the attributes to be released on a per service basis. Add something like this to you service definition: "attributeReleasePolicy" : { "@class" : "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy" , "allowedAttributes" : { "@class" : "java.util.TreeMap", "uvicEduPersonNetLinkContactUpdateTimestamp" : "contactUpdateTimestamp", "uvicEduPersonSpridenID" : "UDC_IDENTIFIER" } } This way you can set the identifier name to be service specific and leave the ldap identifiers in their raw format. See https://apereo.github.io/cas/5.1.x/integration/Attribute-Release-Policies.html Ray On Fri, 2017-09-15 at 06:42 -0700, Jérémie Pilette wrote: Is there somebody who can help me please ? Thank you, Jérémie Le jeudi 7 septembre 2017 15:50:52 UTC+2, Jérémie Pilette a écrit : Hello, I would like to configure my cas.properties in order to have the possibility to transfert some values from LDAP to a service (Ypareo for example) Do you know how to do that ? Must I use these parameters : # cas.authn.ldap[0].principalAttributeId=uid # cas.authn.ldap[0].principalAttributePassword=password # cas.authn.ldap[0].principalAttributeList=sn,cn:commonName,givenName,eduPersonTargettedId:SOME_IDENTIFIER or these parameters : # cas.authn.attributeRepository.ldap[0].attributes.uid=uid # cas.authn.attributeRepository.ldap[0].attributes.displayName=displayName # cas.authn.attributeRepository.ldap[0].attributes.cn=commonName # cas.authn.attributeRepository.ldap[0].attributes.affiliation=groupMembership Thanks a lot, Jérémie -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected] -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected] -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c0a1397f-8a14-40cb-b7c0-850ac50751f1%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/c0a1397f-8a14-40cb-b7c0-850ac50751f1%40apereo.org?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00f201d331af%2460a3c620%2421eb5260%24%40gmail.com.
