On Thu, 24 Oct 2019 16:12:58 -0400 David Hawes <[email protected]> wrote:
> What version of mod_auth_cas are you using? Sorry, I didn't included it in my question: mod_auth_cas is 1.2, freshly cloned from https://github.com/apereo/mod_auth_cas.git CAS server is 5.3.12.1. > v1.2 supports CASv2 attributes, which should work with /serviceValidate > provided your server supports it. > > Turn "CASDebug On" and you should be able to see the validation > response with the attributes returned from your server. With > CASAuthnHeader set to some attribute like you've done, the released > attributes should be in the HTTP headers. This is the CAS info logged in Tomcat INFO [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authenticated principal [alberto] with attributes [{cn=[alberto], givenName=[alberto], irisPersonalUniqueID=[DOC:12345678R], mail=[[email protected]], sn=[cabello sánchez], sn1=[cabello], sn2=[sánchez], uid=[alberto]}] via credentials [[UsernamePasswordCredential(username=alberto)]].> I can't find any reference to headers in Apache 2 logs, except Adding outgoing header: Set-Cookie: MOD_AUTH_CAS_S=6c60*******************d099;Secure;Path=/examples/jsp/; HttpOnly, referer: <CAS_URL>/login?service=<SERVICE_URL> I guess I will add some printf() statements in mod_auth_cas to gather more info, and explore the SAML approach. If it helps, I do get an "ATTR" header (CASAuthNHeader is set to ATTR), but it just contains the REMOTE_USER value ("alberto" in this case). Thanks for your help. > On Thu, 24 Oct 2019 at 06:26, Alberto Cabello Sánchez <[email protected]> wrote: > > > > Hi, > > > > I'm trying to get attributes released by CAS through mod_auth_cas and CASv2 > > protocol (not SAML), but I'm not sure how to achieve it. > > > > I set > > > > CASAuthNHeader ATTR > > > > but it just gives the authenticated user, even if successful login page > > shows > > correctly the attributes defined in application.properties. > > > > Attribute release policy for that service is > > "attributeReleasePolicy" : { > > "@class" : "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" > > }, > > > > My validation URL is > > > > CASValidateURL <CAS_URL>/serviceValidate > > > > I don't know if this is correct. I found another value when using SAML > > validation, but I don't know if I have to change this one for CASv2 (only > > found this information regarding the SAML version). > > > > Thanks in advance, > > > > -- > > Alberto Cabello Sánchez > > Servicio de Informática > > Universidad de Extremadura > > > > -- > > - Website: https://apereo.github.io/cas > > - Gitter Chatroom: https://gitter.im/apereo/cas > > - List Guidelines: https://goo.gl/1VRrw7 > > - Contributions: https://goo.gl/mh7qDG > > --- > > You received this message because you are subscribed to the Google Groups > > "CAS Community" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [email protected]. > > To view this discussion on the web visit > > https://groups.google.com/a/apereo.org/d/msgid/cas-user/20191024122634.9aee358820053e3c75081f5e%40unex.es. > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAgu-wDKF8kj6NuQBKhfP9DeT10vmRWXguFafrzxNAg8454JXQ%40mail.gmail.com. -- Alberto Cabello Sánchez Servicio de Informática Universidad de Extremadura -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/20191025114525.ebc9b494c5b68d121e09c3fa%40unex.es.
