Could not locate LDAP attribute [phone] for ......

86 views
Skip to first unread message

stonej

unread,
Mar 15, 2022, 10:56:56 AM3/15/22
to CAS Community
Hello,

Using CAS 6.5.1, active directory authentication.  Trying to get password reset working and showing this error :

WARN [org.apereo.cas.pm.LdapPasswordManagementService] - <Could not locate LDAP attribute [phone] for [CN=user1,OU=xxxxx,DC=test,DC=test,DC=test,DC=test]>

My config details are:

cas.authn.pm.reset.mail.attribute-name=mail
cas.authn.pm.reset.mail.from=xxxxx@xxxxxx
cas.authn.pm.reset.mail.subject=Password Reset Request
# Used to sign/encrypt the password-reset link
cas.authn.pm.reset.crypto.enabled=true
cas.authn.pm.reset.crypto.encryption.key-size=512
cas.authn.pm.reset.crypto.signing.key-size=512
cas.authn.pm.reset.crypto.strategy-type=ENCRYPT_AND_SIGN

Ldap Attributes :
cas.authn.ldap[0].principalAttributeList=mail,sn,sAMAccountName:eppn,givenName,OU,cn,sn


I cannot see where it is finding Phone, am I missing something ?

Thanks

Frédéric Lohier

unread,
Mar 15, 2022, 3:40:36 PM3/15/22
to CAS Community
Hello,

I also had this issue in 6.4.x. I had to set the property cas.authn.pm.reset.sms.attribute-name=<my LDAP user attribute with phoneNumber> to fix this even if I do not use the SMS reset feature. It feels like a bug but I did investigate any further.

-Frederic


--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/35ded547-fb88-4f5a-81e2-68cd03a4c5abn%40apereo.org.
Reply all
Reply to author
Forward
0 new messages