CAS 2.0 not return attributes.

409 views
Skip to first unread message

jordi tomas

unread,
Sep 15, 2016, 3:13:22 AM9/15/16
to CAS Community

Hi,

 

We are new on CAS Server, and we install version 4.1.5. I have problems with return attributes. I use cas-sample-java-webapp application to test it. It works ok, but on web.xml:

 

-          When I put  <filter-class>org.jasig.cas.client.validation.Cas30ProxyReceivingTicketValidationFilter</filter-class> it works ok, and return attributes.

-          When I put <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class> only can validate, but not return attributes.

 

My CAS validate with LDAP. On deployerConfigContext.xml I have:

 

<entry key-ref="ldapAuthenticationHandler" value="#{null}" />

 

And then…

 

<bean id="ldapAuthenticationHandler"

      class="org.jasig.cas.authentication.LdapAuthenticationHandler" init-method="initialize"

      p:principalIdAttribute="uid"

      c:authenticator-ref="authenticator">

    <property name="principalAttributeMap">

        <map>

            <!--

               | This map provides a simple attribute resolution mechanism.

               | Keys are LDAP attribute names, values are CAS attribute names.

               | Use this facility instead of a PrincipalResolver if LDAP is

               | the only attribute source.

               -->

            <entry key="cn" value="cn" />

            <entry key="givenname" value="givenname" />

            <entry key="sn" value="sn" />

            <entry key="mail" value="mail" />

        </map>

    </property>

</bean>

 

And on JSON services:

 

{

  "@class" : "org.jasig.cas.services.RegexRegisteredService",

  "serviceId" : "xxxxxxxxxxxx/cas-sample-java-webapp/*",

  "name" : "Test Application",

  "id" : 10000002,

  "description" : "",

  "evaluationOrder" : 1002,

  "usernameAttributeProvider" : {

    "@class" : "org.jasig.cas.services.DefaultRegisteredServiceUsernameProvider"

  },

  "logoutType" : "BACK_CHANNEL",

  "attributeReleasePolicy" : {

    "@class" : "org.jasig.cas.services.ReturnAllowedAttributeReleasePolicy",

    "allowedAttributes" : [ "java.util.ArrayList", [ "cn", "mail", "sn", "givenname”] ]

  },

  "accessStrategy" : {

    "@class" : "org.jasig.cas.services.DefaultRegisteredServiceAccessStrategy",

    "enabled" : true,

    "ssoEnabled" : true

  },

 "proxyPolicy" : {

    "@class" : "org.jasig.cas.services.RegexMatchingRegisteredServiceProxyPolicy",

    "pattern" : "^https://.*"

  }

}


Can CAS 2.0 protocol return attributes ? or I have something wrong ?


Thanks in Advance,

Misagh Moayyed

unread,
Sep 15, 2016, 3:47:57 AM9/15/16
to CAS Community, jordi tomas

Start here https://apereo.github.io/cas/development/protocol/CAS-Protocol.html 


-- 
Misagh
--
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To post to this group, send email to cas-...@apereo.org.
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ca1fd054-d01c-436b-98d8-356ced7bb3e9%40apereo.org.
For more options, visit https://groups.google.com/a/apereo.org/d/optout.

Misagh Moayyed

unread,
Sep 15, 2016, 3:49:45 AM9/15/16
to CAS Community, jordi tomas

Or here https://apereo.github.io/cas/4.1.x/protocol/CAS-Protocol.html since you’re on 4.1


-- 
Misagh

jordi tomas

unread,
Sep 15, 2016, 4:09:11 AM9/15/16
to CAS Community
Hi Misagh,
thanks a lot, but I see this html (https://apereo.github.io/cas/4.1.x/protocol/CAS-Protocol-Specification.html), and I'm not sure that 2.0 protocol return attributes.
Jordi


El dijous, 15 setembre de 2016 9:13:22 UTC+2, jordi tomas va escriure:
<w:LsdException Locked="false" Pr

Philippe MARASSE

unread,
Sep 15, 2016, 6:09:33 AM9/15/16
to cas-...@apereo.org
Hi,

As far as I remember, CAS 2.0 protocol does not return attributes, but you can validate service tickets through SAML 1.1 endpoint which returns attributes.

Regards.
--
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To post to this group, send email to cas-...@apereo.org.
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.

-- 
Philippe MARASSE

Responsable pôle Infrastructures - DSIO
Centre Hospitalier Henri Laborit
CS 10587 - 370 avenue Jacques Cœur 
86021 Poitiers Cedex
Tel : 05.49.44.57.19
Reply all
Reply to author
Forward
0 new messages