Get LDAP attributes

[Andrea Vescovi]

Hi,

I managed to set up a CAS 6.1 and two OpenLDAP on two different domain:

• example.com
• anotherexample.com
  

What I'd like to achieve is: let's say i have a user who exist in

• example.com as j.s...@example.com who can login with: j.smith
  
• anotherexample.com as john....@example.com who can login with username: john.smith
  

Is the same user but exists in two domains...it happens 😄

Let's say i can identify him by an attribute, let's say roomNumber and is 123789

I'd like to know how to configure CAS in order to get all the attributes from:

• example.com if he log in with john.smith
• anotherexample.com if he log in with j.smith
  

The goal is to query the other LDAP with the roomNumber i get after login to one LDAP.
So far i managed to get, for example, email attribute by adding into cas.properties

cas.authn.ldap[0].principalAttributeList=mail

But everything i can retrieve is correctly coming from the LDAP i'm successfully logging in.

I miss the part where i can tell CAS: "hey authentication was fine, now query the other LDAP with this roomNumber and give me the result please"