Set REMOTE_USER to LDAP attribute

André Cruz andre.cruz at segula.pt
Thu Jan 11 11:00:54 EST 2007


But that means another LDAP query which is wasteful...

What if I alter the BindLDAPAuthenticationHandler to receive an
additional parameter which is an LDAP attribute and after the LDAP
query, if it was successful, do a setUserName on the credentials with
the attribute value?

Scott Battaglia wrote:
> I'm assuming you want REMOTE_USER set on the client side and not on
> the CAS server?  If that's the case you merely need to create a
> CredentialsToPrincipalResolver that will take the user supplied
> credentials (i.e. email address and password) and map them to the
> appropriate username.  CAS will return to the clients whatever ID
> value the principal has as the username.
>
> -Scott
>
> On 1/11/07, *André Cruz* <andre.cruz at segula.pt
> <mailto:andre.cruz at segula.pt>> wrote:
>
>     Hello.
>
>     I have my CAS server authenticating using an LDAP backend. Is it
>     possible to set REMOTE_USER to an attribute returned in the LDAP
>     query?
>
>     For example: a user authenticates using it's email and REMOTE_USER is
>     set to their username in the system.
>
>     Thanks,
>     André Cruz
>
>
>
>     _______________________________________________
>     Yale CAS mailing list
>     cas at tp.its.yale.edu <mailto:cas at tp.its.yale.edu>
>     http://tp.its.yale.edu/mailman/listinfo/cas
>
>
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
Url : http://tp.its.yale.edu/pipermail/cas/attachments/20070111/556f1556/signature.bin


More information about the cas mailing list