Is this a typo on your config? You have two a's after the initial SAM.
Felix
PS. Why do you disable startTLS?
- #cas.authn.ldap[0].principalAttributeList=cn,givenName,mail,sn
# Search for CAS User- Ran sudo ./gradlew clean copyCasConfiguration build run
The page loads as usual. I am unable to login as casuser, which is expected. I cannot login with any domain credentials.
In the log I get an error:
2022-02-08 15:43:49,567 INFO [org.apereo.cas.authentication.DefaultAuthenticationManager] - <[LdapAuthenticationHandler] exception details: [Unable to resolve user dn for <a username>].>
So I tried to verify that the server can connect via LDAP:
ldapsearch -H ldap://<ldap server ip>:389 -D "CN=cas bind,CN=Users,DC=..." -W samaccountname=<a username> -b "OU=Technology,OU=Staff,DC=..." -v
And I receive a valid result.
I'm not sure where the disconnect is, or what else I should search for. Any tips or suggestions that you could provide would be helpful.
I'm attaching the output of Task :run.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/5be8d9ff-f43d-4347-9f64-3842676a4a7fn%40apereo.org.
Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.
--
Are you modifying the cas.properties created in /etc/cas or the one in your project folder? I don't think you want to do a copyCasConfiguration on each run as it will overwrite the cas.properies file in your /etc/cas folderAnyhow, my config looks similar to yours. One think I did run a problem with is the password policy. If you don't plan on managing passwords via CAS then also use this setting:cas.authn.ldap[0].passwordPolicy.enabled: false
Are you sure, that you need to set dnFormat? If you have users in different ou's, it will be difficult to use with a template as cn=%s,ou=... and should not the dn be found by the searchFilter?
Felix
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/bff98751-3a50-4786-81a9-cc38a6228cc4n%40apereo.org.
Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.
Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.