Logging on problem

Bellamine, Khalil khalil.bellamine at hraccess.com
Fri Jul 11 12:27:12 EDT 2008


Hello all,
I'm trying to use CAS with OpenLDAP but I'm having troubles logging on
the CAS server.
------------------------------------------------------------------------
----------------------------------------------------------
**********               This is some of the "slapd.conf" file:
****************
------------------------------------------------------------------------
----------------------------------------------------------
ucdata-path	./ucdata
include		./schema/core.schema
pidfile		./run/slapd.pid
argsfile	./run/slapd.args
database	bdb
suffix		"dc=my-domain,dc=com"
rootdn		"cn=Manager,dc=my-domain,dc=com"
rootpw		secret
directory	./data
index	objectClass	eq
schemacheck off
------------------------------------------------------------------------
----------------------------------------------------------

------------------------------------------------------------------------
----------------------------------------------------------
*************           And some of the "deployerConfigContext.xml" file
*****************
------------------------------------------------------------------------
----------------------------------------------------------
<property name="authenticationHandlers">
			<list>
				<!--
					| This is the authentication
handler that authenticates services by means of callback via SSL,
thereby validating
					| a server side SSL certificate.
					+-->
				<bean
class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCred
entialsAuthenticationHandler"
					p:httpClient-ref="httpClient" />
				<!--
					| This is the authentication
handler declaration that every CAS deployer will need to change before
deploying CAS 
					| into production.  The default
SimpleTestUsernamePasswordAuthenticationHandler authenticates
UsernamePasswordCredentials
					| where the username equals the
password.  You will need to replace this with an AuthenticationHandler
that implements your
					| local authentication strategy.
You might accomplish this by coding a new such handler and declaring
					|
edu.someschool.its.cas.MySpecialHandler here, or you might use one of
the handlers provided in the adaptors modules.
					+-->
				<!-- <bean
	
class="org.jasig.cas.authentication.handler.support.SimpleTestUsernamePa
sswordAuthenticationHandler" /> -->
				<!--	 <bean
class="org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler" >
	
<property name="filter" value="sAMAccountName=%u" />
	
<property name="contextSource" ref="contextSource" />

            				</bean> -->
            				<bean
class="org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler">
					       <property name="filter"
value="cn=%u" />
					       <property
name="searchBase" value="dc=my-domain,dc=com" />
					       <property
name="contextSource" ref="contextSource" />
					       <property
name="ignorePartialResultException" value="yes" /> <!-- fix because of
how AD returns results -->
					</bean>
			</list>
		</property>
................................
................................
<bean id="contextSource"
class="org.jasig.cas.adaptors.ldap.util.AuthenticatedLdapContextSource">
	
	              <property name="pooled" value="true"/>
	
	              <property name="urls">
	
	                  <list>
	
	                      <value>ldap://localhost:389</value>
	
	                  </list>
	
	              </property>
	
	              <property name="userName"
value="{cn=Manager,dc=my-domain,dc=com}"/>
	
	              <property name="password" value="{secret}"/>
	
	              <property name="baseEnvironmentProperties">
	
	                  <map>
	
	                      <entry>
	
	                          <key>
	
	
<value>java.naming.security.authentication</value>
	
	                          </key>
	
	                          <value>simple</value>
	
	                      </entry>
	
	                  </map>
	
	              </property>	
        </bean>
------------------------------------------------------------------------
----------------------------------------------------------
I don't see where the problem when I try to connect with user=Manager
and password=secret it does not work !!
Please help !!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080711/a5d18471/attachment.html 


More information about the cas mailing list