On Thu, 24 Oct 2019 16:12:58 -0400
David Hawes <[email protected]> wrote:

> What version of mod_auth_cas are you using?

Sorry, I didn't included it in my question:

mod_auth_cas is 1.2, freshly cloned from 
https://github.com/apereo/mod_auth_cas.git
CAS server is 5.3.12.1.

> v1.2 supports CASv2 attributes, which should work with /serviceValidate
> provided your server supports it.
> 
> Turn "CASDebug On" and you should be able to see the validation
> response with the attributes returned from your server. With
> CASAuthnHeader set to some attribute like you've done, the released
> attributes should be in the HTTP headers.

This is the CAS info logged in Tomcat

INFO [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - 
<Authenticated principal [alberto] with attributes [{cn=[alberto], 
givenName=[alberto], irisPersonalUniqueID=[DOC:12345678R], 
mail=[[email protected]], sn=[cabello sánchez], sn1=[cabello], sn2=[sánchez], 
uid=[alberto]}] via credentials 
[[UsernamePasswordCredential(username=alberto)]].>

I can't find any reference to headers in Apache 2 logs, except

Adding outgoing header: Set-Cookie: 
MOD_AUTH_CAS_S=6c60*******************d099;Secure;Path=/examples/jsp/; 
HttpOnly, referer: <CAS_URL>/login?service=<SERVICE_URL>

I guess I will add some printf() statements in mod_auth_cas to gather more
info, and explore the SAML approach.

If it helps, I do get an "ATTR" header (CASAuthNHeader is set to ATTR),
but it just contains the REMOTE_USER value ("alberto" in this case).

Thanks for your help.
 
> On Thu, 24 Oct 2019 at 06:26, Alberto Cabello Sánchez <[email protected]> wrote:
> >
> > Hi,
> >
> > I'm trying to get attributes released by CAS through mod_auth_cas and CASv2
> > protocol (not SAML), but I'm not sure how to achieve it.
> >
> > I set
> >
> > CASAuthNHeader ATTR
> >
> > but it just gives the authenticated user, even if successful login page 
> > shows
> > correctly the attributes defined in application.properties.
> >
> > Attribute release policy for that service is
> > "attributeReleasePolicy" : {
> >     "@class" : "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
> > },
> >
> > My validation URL is
> >
> > CASValidateURL <CAS_URL>/serviceValidate
> >
> > I don't know if this is correct. I found another value when using SAML
> > validation, but I don't know if I have to change this one for CASv2 (only
> > found this information regarding the SAML version).
> >
> > Thanks in advance,
> >
> > --
> > Alberto Cabello Sánchez
> > Servicio de Informática
> > Universidad de Extremadura
> >
> > --
> > - Website: https://apereo.github.io/cas
> > - Gitter Chatroom: https://gitter.im/apereo/cas
> > - List Guidelines: https://goo.gl/1VRrw7
> > - Contributions: https://goo.gl/mh7qDG
> > ---
> > You received this message because you are subscribed to the Google Groups 
> > "CAS Community" group.
> > To unsubscribe from this group and stop receiving emails from it, send an 
> > email to [email protected].
> > To view this discussion on the web visit 
> > https://groups.google.com/a/apereo.org/d/msgid/cas-user/20191024122634.9aee358820053e3c75081f5e%40unex.es.
> 
> -- 
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> --- 
> You received this message because you are subscribed to the Google Groups 
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected].
> To view this discussion on the web visit 
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAgu-wDKF8kj6NuQBKhfP9DeT10vmRWXguFafrzxNAg8454JXQ%40mail.gmail.com.


-- 
Alberto Cabello Sánchez
Servicio de Informática
Universidad de Extremadura

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/20191025114525.ebc9b494c5b68d121e09c3fa%40unex.es.

Reply via email to