OK, but what about the logs?, looking at logs you can get some hint, have
you enabled CAS debug mode ( <Root level="DEBUG">) in cas-log4j2.xml
file?, and also in your LDAP server some option to enable debug/verbose
mode, after enable and restarting the services, tail both the logs and
try to change the LDAP password, and see what error you get in logs.
On Tuesday, June 23, 2020 at 2:28:14 PM UTC+5:30, arti wavale wrote:
>
> Hello Root,
>
> First of all,
> Thank you so much for your reply..
>
> I'm using CAS v5.2 in which I have used "cas.authn.pm.ldap.userFilter=cn
> ={user}" in cas.properties file. The userFilter attribute was renamed to
> searchFilter in CAS v5.3 but Still I have tried "
> cas.authn.pm.ldap.searchFilter=cn={user}" in cas.properties file and
> check it but same error occurred.
>
> Thanks and Regards
> Arti
>
> On Tuesday, June 23, 2020 at 11:58:16 AM UTC+5:30, Root wrote:
>>
>>
>> @Arthi,
>>
>> Have you included "cas.authn.pm.ldap.searchFilter=cn={user}" in
>> cas.properties?, and you should enable debug mode in both CAS and LDAP
>> server side and check both logs to get more detail.
>>
>>
>>
>>
>>
>> On Tuesday, June 23, 2020 at 11:14:12 AM UTC+5:30, arti wavale wrote:
>>>
>>> All detail information provided in a document . Please find the
>>> attachment
>>>
>>> I am facing error such as "could not update the account password "
>>>
>>> If anyone can help to resolve this issue
>>>
>>>
>>> -------------------------------------------------------------------------------------------------
>>>
>>> *Pom.xml:*
>>> <dependency> <groupId>org.apereo.cas</groupId>
>>> <artifactId>cas-server-support-pm-ldap</artifactId>
>>> <version>${cas.version}</version></dependency>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> *cas.properties:*
>>>
>>>
>>> cas.authn.accept.users= cas.authn.ldap[0].order=0
>>> cas.authn.ldap[0].name=LDAP
>>> Server cas.authn.ldap[0].type=AUTHENTICATED
>>> cas.authn.ldap[0].ldapUrl=ldap://localhost
>>> cas.authn.ldap[0].useSsl=false cas.authn.ldap[0].useStartTls=false
>>> cas.authn.ldap[0].connectTimeout=50000
>>> cas.authn.ldap[0].subtreeSearch=true
>>> cas.authn.ldap[0].validatePeriod=270
>>> cas.authn.ldap[0].userFilter=cn={user}
>>> #cas.authn.ldap[0].userFilter=(|(uid={user})(cn={user})(mail={user}))
>>> cas.authn.ldap[0].baseDn=dc=example,dc=com
>>> #cas.authn.ldap[0].enhanceWithEntryResolver=true
>>> #cas.authn.ldap[0].dnFormat:cn=%s,cn=admin,dc=example,dc=com
>>> cas.authn.ldap[0].bindDn=cn=admin,dc=example,dc=com
>>> cas.authn.ldap[0].bindCredential=administrator
>>> cas.authn.ldap[0].enhanceWithEntryResolver=true
>>> cas.authn.ldap[0].dnFormat:cn=%s,cn=admin,dc=example,dc=com
>>> cas.authn.ldap[0].principalAttributeList=memberOf,uid,cn,mail
>>> cas.authn.ldap[0].collectDnAttribute=false
>>>
>>>
>>> cas.authn.ldap[0].principalAttributeId=cncas.authn.ldap[0].principalAttributePassword=userPassword#
>>> attributes to be retrieved from LDAP
>>> userPassword#cas.authn.ldap[0].principalAttributeList=uid,cn,mail#cas.authn.ldap[0].collectDnAttribute=falsecas.authn.ldap[0].principalDnAttributeName=principalLdapDncas.authn.ldap[0].allowMultiplePrincipalAttributeValues=truecas.authn.ldap[0].allowMissingPrincipalAttributeValue=true#
>>> cas.authn.ldap[0].credentialCriteria=# LDAP Password Encoding#
>>> cas.authn.ldap[0].passwordEncoder.type=#
>>> cas.authn.ldap[0].passwordEncoder.characterEncoding=UTF-8#
>>> cas.authn.ldap[0].passwordEncoder.encodingAlgorithm=SHA# LDAP
>>> Poolingcas.authn.ldap[0].minPoolSize=3cas.authn.ldap[0].maxPoolSize=50cas.authn.ldap[0].validateOnCheckout=truecas.authn.ldap[0].validatePeriodically=truecas.authn.ldap[0].validatePeriod=600cas.authn.ldap[0].failFast=truecas.authn.ldap[0].idleTime=5000cas.authn.ldap[0].prunePeriod=5000cas.authn.ldap[0].blockWaitTime=5000
>>> cas.authn.ldap[0].providerClass=org.ldaptive.provider.unboundid.UnboundIDProvidercas.authn.ldap[0].allowMultipleDns=false
>>>
>>>
>>>
>>>
>>> #Password Management
>>> spring.mail.host=mail.technology.comspring.mail.port=587spring.mail.username=x...@technology.comspring.mail.password=xxxxxxspring.mail.testConnection=truespring.mail.properties.mail.smtp.auth=truespring.mail.properties.mail.smtp.starttls.enable=true
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> cas.authn.pm.enabled=true#cas.authn.pm.policyPattern=^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$%~()_{}-]).{8,}$
>>> #cas.authn.pm.reset.text=password reset:%scas.authn.pm.reset.text=Reset
>>> your password with this link: %s#cas.authn.pm.reset.subject=armor password
>>> resetcas.authn.pm.reset.subject=Password Reset
>>> Requestcas.authn.pm.reset.from=${spring.mail.username}cas.authn.pm.reset.expirationMinutes=10cas.authn.pm.reset.emailAttribute=mailcas.authn.pm.reset.securityQuestionsEnabled=falsecas.authn.pm.autoLogin=false
>>> cas.authn.pm.reset.crypto.encryption.key=xxxxxxxxxxxxxxxxxxxxxxxxcas.authn.pm.reset.crypto.signing.key=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxcas.authn.pm.reset.crypto.enabled=true
>>>
>>> #cas.authn.pm.enabled=truecas.authn.pm.ldap.type=GENERICcas.authn.pm.ldap.ldapUrl=${cas.authn.ldap[0].ldapUrl}cas.authn.pm.ldap.useSsl=falsecas.authn.pm.ldap.connectTimeout=5000cas.authn.pm.ldap.baseDn=${cas.authn.ldap[0].baseDn}cas.authn.pm.ldap.userFilter=${cas.authn.ldap[0].userFilter}cas.authn.pm.ldap.subtreeSearch=truecas.authn.pm.ldap.bindDn=cn=admin,dc=example,dc=comcas.authn.pm.ldap.bindCredential=administratorcas.authn.pm.ldap.poolPassivator=BINDcas.authn.pm.ldap.minPoolSize=3cas.authn.pm.ldap.maxPoolSize=10cas.authn.pm.ldap.validateOnCheckout=truecas.authn.pm.ldap.validatePeriodically=truecas.authn.pm.ldap.validatePeriod=600cas.authn.pm.ldap.validateTimeout=5000cas.authn.pm.ldap.failFast=true
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> cas.authn.pm.ldap.idleTime=500cas.authn.pm.ldap.prunePeriod=600cas.authn.pm.ldap.blockWaitTime=5000cas.authn.pm.ldap.providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider
>>> #validatorcas.authn.pm.ldap.validator.type=SEARCHcas.authn.pm.ldap.validator.baseDn=dc=example,dc=com#cas.authn.pm.ldap.validator.searchFilter=(objectClass=*)cas.authn.pm.ldap.validator.scope=SUBTREE
>>>
>>> -----------------------------------------------------------------------
>>>
>>>
>>>
>>> Thanks and Regards
>>> Arti
>>>
>>>
>>>
>>>
>>> On Monday, June 22, 2020 at 12:23:54 PM UTC-7, Vikash Chandra Ansh wrote:
>>>>
>>>> Hi Arti,
>>>>
>>>> How are you proceeding with ldap password management. Please involve me
>>>> as well as I want to incorporate this in my application.
>>>>
>>>> Thanks and Regards
>>>>
>>>> On Sat, Jun 20, 2020 at 9:59 AM arti wavale <[email protected]> wrote:
>>>>
>>>>> can you explain me, how implemented password management in cas 5.2 and
>>>>> can share cas.properties file and which dependency are you used in
>>>>> pox.xml
>>>>> file?
>>>>>
>>>>> On Tuesday, November 20, 2018 at 10:33:06 PM UTC+5:30, MD. Fazla Rabby
>>>>> wrote:
>>>>>>
>>>>>> We are already using CAS5.2 and password management working fine. But
>>>>>> for CAS version 6 we are getting the ldap referral error
>>>>>> "java.security.cert.CertificateException: Hostname does not match the
>>>>>> hostname in the server's certificate site:stackoverflow.com"
>>>>>> How to get around with this
>>>>>>
>>>>>> This is my cas.properties
>>>>>>
>>>>>>
>>>>>>
>>>>>> cas.authn.pm.enabled=true
>>>>>> cas.authn.pm.policyPattern=^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9
>>>>>> ])(?=.*?[#?!@$%~()_{}-]).{8,}$
>>>>>> cas.authn.pm.reset.text=Reset your password with this link: %s
>>>>>> cas.authn.pm.reset.subject=Password Reset Request
>>>>>> cas.authn.pm.reset.from=myemail.mydomain.com
>>>>>>
>>>>>>
>>>>>> #password reset expiry is set to 1 day equivalent minutes
>>>>>> cas.authn.pm.reset.expirationMinutes=1440
>>>>>> cas.authn.pm.reset.emailAttribute=secondaryEmail
>>>>>> cas.authn.pm.reset.securityQuestionsEnabled=true
>>>>>>
>>>>>> # Automatically log in after successful password change
>>>>>> cas.authn.pm.autoLogin=false
>>>>>>
>>>>>> # Used to sign/encrypt the password-reset link
>>>>>> cas.authn.pm.reset.crypto.encryption.key
>>>>>> =asdasdasdasdasdasdasdasdasdasd
>>>>>> cas.authn.pm.reset.crypto.signing.key
>>>>>> =asdasdasasdasdasdasdadsadasdasdasdasd
>>>>>> cas.authn.pm.reset.crypto.enabled=true
>>>>>>
>>>>>>
>>>>>> #Email Submissions
>>>>>>
>>>>>> spring.mail.host=smtp.office365.com
>>>>>> spring.mail.port=587
>>>>>> [email protected]
>>>>>> spring.mail.password=pass
>>>>>> spring.mail.testConnection=true
>>>>>> spring.mail.properties.mail.smtp.auth=true
>>>>>> spring.mail.properties.mail.smtp.starttls.enable=true
>>>>>>
>>>>>> #
>>>>>> ##LDAP Password management
>>>>>> #
>>>>>> cas.authn.pm.ldap.type=AD
>>>>>> #
>>>>>> cas.authn.pm.ldap.ldapUrl=ldaps://myldap:636
>>>>>> cas.authn.pm.ldap.useSsl=true
>>>>>> cas.authn.pm.ldap.useStartTls=false
>>>>>> cas.authn.pm.ldap.connectTimeout=50000
>>>>>> cas.authn.pm.ldap.baseDn=DC=xx,DC=xx,DC=xx,DC=xx
>>>>>> cas.authn.pm.ldap.searchFilter=cn={user}
>>>>>> cas.authn.pm.ldap.subtreeSearch=true
>>>>>> cas.authn.pm.ldap.bindDn=CN=xx,OU=xx,DC=xx,DC=xx,DC=xx,DC=xx
>>>>>> cas.authn.pm.ldap.bindCredential=pass
>>>>>> # cas.authn.pm.ldap.connectionStrategy=
>>>>>> cas.authn.pm.ldap.trustCertificates=file:/etc/cas/myldap.cer
>>>>>> ## cas.authn.pm.ldap.keystore=
>>>>>> ## cas.authn.pm.ldap.keystorePassword=
>>>>>> ## cas.authn.pm.ldap.keystoreType=JKS|JCEKS|PKCS12
>>>>>> cas.authn.pm.ldap.poolPassivator=BIND
>>>>>> cas.authn.pm.ldap.minPoolSize=3
>>>>>> cas.authn.pm.ldap.maxPoolSize=10
>>>>>> cas.authn.pm.ldap.validateOnCheckout=true
>>>>>> cas.authn.pm.ldap.validatePeriodically=true
>>>>>> cas.authn.pm.ldap.validatePeriod=600
>>>>>> cas.authn.pm.ldap.validateTimeout=5000
>>>>>> cas.authn.pm.ldap.failFast=true
>>>>>> cas.authn.pm.ldap.idleTime=500
>>>>>> cas.authn.pm.ldap.prunePeriod=600
>>>>>> cas.authn.pm.ldap.blockWaitTime=5000
>>>>>>
>>>>>> ##cas.authn.pm.ldap.providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider
>>>>>> #
>>>>>> ## Attributes that should be fetched to indicate security questions
>>>>>> and answers,
>>>>>> ## assuming security questions are enabled.
>>>>>> cas.authn.pm.ldap.securityQuestionsAttributes.attributeQuestion1
>>>>>> =attributeAnswer1
>>>>>> cas.authn.pm.ldap.securityQuestionsAttributes.attributeQuestion2
>>>>>> =attributeAnswer2
>>>>>> cas.authn.pm.ldap.securityQuestionsAttributes.attrQuestion3=
>>>>>> attributeAnswer2
>>>>>> #
>>>>>> cas.authn.pm.ldap.validator.type=SEARCH
>>>>>> cas.authn.pm.ldap.validator.baseDn=DC=xx,DC=xx,DC=xx,DC=xx
>>>>>> ##cas.authn.pm.ldap.validator.searchFilter=(objectClass=*)
>>>>>> cas.authn.pm.ldap.validator.scope=SUBTREE
>>>>>>
>>>>>>
>>>>>> --
>>>>> - Website: https://apereo.github.io/cas
>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>>> - Contributions: https://goo.gl/mh7qDG
>>>>> ---
>>>>> You received this message because you are subscribed to the Google
>>>>> Groups "CAS Community" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>>> an email to [email protected].
>>>>> To view this discussion on the web visit
>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/1d2b5ab2-a319-47b7-a802-be92b1008802o%40apereo.org
>>>>>
>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/1d2b5ab2-a319-47b7-a802-be92b1008802o%40apereo.org?utm_medium=email&utm_source=footer>
>>>>> .
>>>>>
>>>>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/21509096-ea65-46c9-9599-a23e89965176o%40apereo.org.
