Fahmi,
Put this in your CAS server log file to be sure that the attributes are being
released:
<!-- DEBUG Found principal attributes [...] for [username]
Attribute policy [???] allows release of [...] for [username]
Final collection of attributes allowed are: [...] -->
<AsyncLogger
name="org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy"
level="debug"/>
Ray
On Mon, 2018-10-01 at 22:16 -0700, Fahmi L. Ramdhani wrote:
Thanks dhawes,
I have a little trouble about this, even though it should be able to. I
configure it according to the documentation about attributes. Below are logs
from mod_auth_cas:
[Tue Oct 02 05:03:25.025216 2018] [:debug] [pid 21981] mod_auth_cas.c(1753):
[client 32.254.11.127:65177] Entering cas_authenticate(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025224 2018] [:debug] [pid 21981] mod_auth_cas.c(1473):
[client 32.254.11.127:65177] entering isValidCASCookie(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025229 2018] [:debug] [pid 21981] mod_auth_cas.c(791):
[client 32.254.11.127:65177] entering readCASCacheFile(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025328 2018] [:debug] [pid 21981] mod_auth_cas.c(1044):
[client 32.254.11.127:65177] entering writeCASCacheEntry(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025484 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025493 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025555 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025563 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025590 2018] [:debug] [pid 21981] mod_auth_cas.c(1753):
[client 32.254.11.127:65177] Entering cas_authenticate(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025597 2018] [:debug] [pid 21981] mod_auth_cas.c(1852):
[client 32.254.11.127:65177] recycling user '[email protected]' from initial
request for sub request, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025603 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025607 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025646 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025653 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025658 2018] [:debug] [pid 21981] mod_auth_cas.c(1753):
[client 32.254.11.127:65177] Entering cas_authenticate(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025663 2018] [:debug] [pid 21981] mod_auth_cas.c(1852):
[client 32.254.11.127:65177] recycling user '[email protected]' from initial
request for sub request, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025668 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025673 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025700 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025706 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025711 2018] [:debug] [pid 21981] mod_auth_cas.c(1753):
[client 32.254.11.127:65177] Entering cas_authenticate(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025717 2018] [:debug] [pid 21981] mod_auth_cas.c(1852):
[client 32.254.11.127:65177] recycling user '[email protected]' from initial
request for sub request, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025722 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025746 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025770 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025777 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: denied (no authenticated user yet), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025782 2018] [:debug] [pid 21981] mod_auth_cas.c(1753):
[client 32.254.11.127:65177] Entering cas_authenticate(), referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025787 2018] [:debug] [pid 21981] mod_auth_cas.c(1852):
[client 32.254.11.127:65177] recycling user '[email protected]' from initial
request for sub request, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025792 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of Require valid-user : granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
[Tue Oct 02 05:03:25.025797 2018] [authz_core:debug] [pid 21981]
mod_authz_core.c(809): [client 32.254.11.127:65177] AH01626: authorization
result of <RequireAny>: granted, referer:
https://login.domain.com/cas/login?service=https%3a%2f%2fdomain.com%2f%2f
Maybe I don't understand some documentation yet.. Please give me a solution
about this problem. Thank you.
--
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | [email protected]
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1538499094.2852.2.camel%40uvic.ca.