I've got serivce like this:
test-1.json
{
"@class": "org.apereo.cas.services.RegexRegisteredService",
"serviceId": "^(http|https|imaps)://exampleorg/casphp",
"name": "test",
"id": 1,
"evaluationOrder": 1,
"requiredHandlers" : [ "java.util.HashSet", [ "everest" ] ]
}
and in cas.propierties i have 3 handlers with AD Ldap:
cas.authn.ldap[0].name=everest
cas.authn.ldap[0].type=AUTHENTICATED
cas.authn.ldap[0].ldapUrl=ldaps://****
cas.authn.ldap[0].baseDn=****
cas.authn.ldap[0].bindDn=ldap
cas.authn.ldap[0].bindCredential=****
cas.authn.ldap[0].searchFilter=******
cas.authn.ldap[0].principalAttributeId=sAMAccountName
cas.authn.ldap[0].connectTimeout=3000
cas.authn.ldap[0].principalAttributeList=displayName,cn,givenName,mail:genmail,synchNr
..
cas.authn.ldap[2].name=sth
cas.authn.ldap[1].name=ppm
But Cas athenticated user via ppm not via everest . Is it way to force
auth users to service exampleorg/casphp only via everest.
I have made some auth test using API Cas and i see that cas return user
profile using everest handler.
#!/bin/bash
ff=`curl -k -X POST -H 'Content-Type: Application/x-www-form-urlencoded' -H
'Accept: applications/json' https://example.org/casphp/v1/tickets -d
'username=nobody&password=pass'`
dd=`curl -X POST -H \"Content-Type: Application/x-www-form-urlencoded\" -H
\"Accept: application/json\"
https://example.org/casphp/v1/tickets/"$ff"?service=https://example.org/casphp";
st=`$dd`
vv="curl -k
https://example.org/casphp/p3/serviceValidate?service=https://example.org/casphp&ticket="$st
echo "|$vv|"
result:
|<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
<cas:authenticationSuccess>
<cas:user>nobody</cas:user>
<cas:attributes>
<cas:credentialType>UsernamePasswordCredential</cas:credentialType>
<cas:isFromNewLogin>true</cas:isFromNewLogin>
<cas:authenticationDate>2021-12-01T17:12:03.233902Z</cas:authenticationDate>
<cas:authenticationMethod>ppm</cas:authenticationMethod>
<cas:successfulAuthenticationHandlers>ppm</cas:successfulAuthenticationHandlers>
<cas:longTermAuthenticationRequestTokenUsed>false</cas:longTermAuthenticationRequestTokenUsed>
</cas:attributes>
</cas:authenticationSuccess>
</cas:serviceResponse>|
Thanks
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/35b15f48-320c-4673-864f-f125fed64ac1n%40apereo.org.
