Hi,
Yes, I use PostgreSQL to store services and tickets.
I actually try to use LDAP to auth my users in CAS Management, but actually
it doesn't work :
WARN [org.apereo.cas.mgmt.authz.CasRoleBasedAuthorizer] - Unable to
authorize access, since the authenticated profile [#CasProfile# | id:
julien.sabatier | attributes: {credentialType=UsernamePasswordCredential,
isFromNewLogin=true, authenticationDate=2020-08-17T14:18:15.789255Z,
authenticationMethod=LdapAuthenticationHandler,
successfulAuthenticationHandlers=LdapAuthenticationHandler,
longTermAuthenticationRequestTokenUsed=false} | roles: [] | permissions: []
| isRemembered: false | clientName: CasClient | linkedId: null |] does not
contain any required roles
The roles are empty, but user "julien.sabatier" is a member of
ADMINISTRATOR group in my LDAP.
I tried with this conf : https://pastebin.com/ukiEzpFC
Maybe I misunderstand the params...
@Napoleon Ponaparte : What file / data do you want exactly ?
Le lundi 17 août 2020 à 16:54:17 UTC+2, Napoleon Ponaparte a écrit :
> Hi Mr Julien Sabatier,
> I have read your cas-management configuration and I guessed your
> cas-management authen user from LDAP and store service registry to
> PostgreSQL.
> Is that right?
> You resolved your problem.
> Can you show me your cas-managment, cas-overlay and service registry in
> detail?
> Thank you in advance.
>
> Vào Th 2, 17 thg 8, 2020 vào lúc 21:41 Julien Sabatier <[email protected]>
> đã viết:
>
>> I solved the problem. It was that I didn't added
>> "cas-server-support-discovery-profile" to my CAS dependencies at
>> compilation, so the discovery service wasn't available.
>>
>> Thanks for your help.
>>
>> Now my problem is that I want to use ldap for CAS Management auth, and
>> for this I need to include "cas-management-webapp-support-ldap".
>> The problem is that this dependency isn't available in 6.2.1-SNAPSHOT
>> version.
>> The last version available is 5.3.6, and it probable will have conflict
>> with 6.2.1 dependencies.
>>
>> Le lundi 17 août 2020 à 16:25:43 UTC+2, richard.frovarp a écrit :
>>
>>> You probably aren't waiting long enough?
>>>
>>> 2020-08-17 09:06:54,686 DEBUG
>>> [org.apache.http.impl.execchain.MainClientExec] - Executing request GET
>>> /actuator/discoveryProfile HTTP/1.1
>>>
>>> It's trying to make a connection to your CAS system. Looks like from
>>> your logs it hasn't time out, and thus hasn't fully started. Either make
>>> sure CAS is available upon startup of Management, or turn that feature off.
>>> mgmt.enableDiscoveryEndpointCall=false
>>>
>>> This is an obvious problem if you are running the IdP and Management in
>>> the same container.
>>>
>>> On Mon, 2020-08-17 at 00:34 -0700, Julien Sabatier wrote:
>>>
>>> I try to setup a CAS Management to manages services of my CAS instance.
>>>
>>> But when I launch the webapp, it's like it freeze on startup, and I
>>> can't access it in my browser.
>>>
>>> CAS Version : 6.2.1
>>> CAS Management Version : 6.2.1
>>>
>>> Here is my /etc/cas/config/management.properties :
>>> https://pastebin.com/v04Q6GwE
>>>
>>> And here is the logs I get at CAS Management startup :
>>> https://pastebin.com/Wc6Kfvnt
>>>
>>> Can someone help me to understand why Cas Management isn't reachable ?
>>>
>>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/5719680f-880c-4326-8528-f45a4b72920bn%40apereo.org
>>
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/5719680f-880c-4326-8528-f45a4b72920bn%40apereo.org?utm_medium=email&utm_source=footer>
>> .
>>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/20b2f75b-f55e-4408-82c3-22812b177e13n%40apereo.org.
