Password Synchronization

27 views

Skip to first unread message

Al Faller

unread,

Sep 22, 2022, 4:31:46 PM9/22/22

to CAS Community

Hi - big fan of CAS. I recently stumbled upon the documentation for Password Synchronization. Turns out this feature could really get us out of a pickle. I've added the appropriate settings to my config file, but I see no indication that the sync is initializing or attempting to sync passwords. Even tried with TRACE logs. Does anyone know what I might be missing?

Running 6.5.9 on Tomcat 9 with Corretto 11.

cas.authn.password-sync.enabled=true
cas.authn.password-sync.ldap[0].name=AD
cas.authn.password-sync.ldap[0].ldap-url=ldaps://my-ad-server.domain:636/
cas.authn.password-sync.ldap[0].bind-dn=CN=myuser,OU=users,DC=mydomain,DC=local
cas.authn.password-sync.ldap[0].bind-credential=abc123
cas.authn.password-sync.ldap[0].base-dn=DC=mydomain,DC=local
cas.authn.password-sync.ldap[0].trust-certificates=file:/etc/cas/certs/certs.pem
cas.authn.password-sync.ldap[0].search-filter=sAMAccountName={user}
cas.authn.password-sync.ldap[0].subtree-search=true
cas.authn.password-sync.ldap[0].enabled=true