Activate Term of USE with ldap backend

45 views
Skip to first unread message

Net Work

unread,
May 13, 2019, 5:57:26 AM5/13/19
to CAS Community
Dear all,
I am trying to activate the "term of use" feature with ldap to keep the answer.
I get the screen to validate my accecptation of terms of use. But I do not arrive in LDAP, to register the value. I know it's a booleen type, my attribute in ldap is good type boolean.
I am enclosing the error message and my configuration. If anyone among you has already implemented this type of feature, could he explain to me how he did it?

Thanks in advance.

#### Error

Caused by: javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 21 - supannListeRouge: value #0 invalid per syntax]

### Configuration cas.properties

### AUP
cas.acceptableUsagePolicy.enabled=TRUE
cas.acceptableUsagePolicy.aupAttributeName=supannListeRouge
cas.acceptableUsagePolicy.scope=GLOBAL


### LDAP

cas.acceptableusagepolicy.ldap.binddn=cn=manager,dc=xxxx,dc=fr
cas.acceptableusagepolicy.ldap.bindcredential=xxxxx
cas.acceptableusagepolicy.ldap.ldapurl=ldap://ldap.xxx.fr

cas.acceptableusagepolicy.ldap.basedn=dc=xxx,dc=fr
cas.acceptableusagepolicy.ldap.searchFilter=uid={user}

cas.acceptableUsagePolicy.ldap.connectTimeout=5000
cas.acceptableUsagePolicy.ldap.minPoolSize=3
cas.acceptableUsagePolicy.ldap.maxPoolSize=10
cas.acceptableUsagePolicy.ldap.validateOnCheckout=true
cas.acceptableUsagePolicy.ldap.validatePeriodically=true
cas.acceptableUsagePolicy.ldap.validatePeriod=600
cas.acceptableUsagePolicy.ldap.idleTime=500
cas.acceptableUsagePolicy.ldap.prunePeriod=600
cas.acceptableUsagePolicy.ldap.blockWaitTime=5000
cas.acceptableUsagePolicy.ldap.useSsl=false

### build.gradle
...
compile "org.apereo.cas:cas-server-support-ldap:${casServerVersion}"
compile "com.unboundid:unboundid-ldapsdk:4.0.9"
compile "org.apereo.cas:cas-server-support-aup-webflow:${project.'cas.version'}"

compile "org.apereo.cas:cas-server-support-aup-ldap:${project.'cas.version'}"
...

Ray Bon

unread,
May 13, 2019, 10:55:39 AM5/13/19
to cas-...@apereo.org
Have you verified that 'manager' can write to ldap?
Check ldap logs.

Ray
-- 
Ray Bon
Programmer Analyst
Development Services, University Systems

Net Work

unread,
May 13, 2019, 1:43:25 PM5/13/19
to cas-...@apereo.org
Yes, the manager can write to ldap.
OPENLDAP only accepts boolean values in uppercase. And CAS returns me a lowercase value. It's silly, but I do not know how to force this result in uppercase ?
Laurent

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to a topic in the Google Groups "CAS Community" group.
To unsubscribe from this topic, visit https://groups.google.com/a/apereo.org/d/topic/cas-user/6_d7R4fmO8U/unsubscribe.
To unsubscribe from this group and all its topics, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/41ac576dc0d146198857a7b791220b61db318340.camel%40uvic.ca.
Reply all
Reply to author
Forward
0 new messages