CAS not releasing attributes

By: Gene Liverman user 05 Oct 2016 at 10 p.m. CDT

7 Responses
Gene Liverman gravatar
I have added a service to CAS but it is not sending the attributes to the service. I am hoping you can help me find what we are missing. Below is a diff showing how I have changed `deployerConfigContext.xml`: ```diff --- Thu Oct 6 02:38:58 2016 UTC +++ Thu Oct 6 02:38:58 2016 UTC @@ -131,6 +131,8 @@ <entry key="mail" value="mail" /> <entry key="uid" value="uid" /> <entry key="displayName" value="displayName" /> + <entry key="givenName" value="givenName" /> + <entry key="sn" value="sn" /> </map> </property> </bean> @@ -288,8 +290,7 @@ <bean class="org.jasig.cas.services.RegexRegisteredService" p:id="0" p:name="HTTP and IMAP" p:description="Allows HTTP(S) and IMAP(S) protocols" p:serviceId="^(https?|imaps?)://.*" p:evaluationOrder="10000001" /> - --> - <!-- + Use the following definition instead of the above to further restrict access to services within your domain (including sub domains). Note that example.com must be replaced with the domain you wish to permit. @@ -309,6 +310,24 @@ </bean> --> + <!-- Specific service - protected pages on a Test Client --> + <bean class="org.jasig.cas.services.RegexRegisteredService"> + <property name="id" value="6" /> + <property name="name" value="phpCAS" /> + <property name="description" value="Test Service with phpCAS" /> + <property name="serviceId" value="http://localhost:8080/.*" /> + <property name="evaluationOrder" value="6" /> + <property name="allowedAttributes"> + <list> + <value>uid</value> + <value>mail</value> + <value>displayName</value> + <value>givenName</value> + <value>sn</value> + </list> + </property> + </bean> + <bean class="org.jasig.cas.services.RegisteredServiceImpl"> <property name="id" value="1"/> <property name="name" value="Local service"/> @@ -316,9 +335,10 @@ <property name="serviceId" value="${openid.issuer}/oxauth/postlogin"/> <property name="allowedAttributes"> <list> - <value>username</value> + <value>uid</value> </list> </property> + <property name="evaluationOrder" value="0" /> </bean> </util:list> ```
CentOS72
closed

Answers

By Mohib Zico Account Admin 06 Oct 2016 at 8:02 a.m. CDT

Copy
Mohib Zico gravatar
DeployerConfig file looks good. However... you don't need to change anything in oxauth serviceID bean. Secondly, you need to configure saml module here; this module is not configured out of the box Gluu CE.

By Gene Liverman user 06 Oct 2016 at 8:08 a.m. CDT

Copy
Gene Liverman gravatar
Your here link didn't seem to take... mind relinking it? Are you saying that ```xml <property name="allowedAttributes"> <list> <value>username</value> </list> </property> ``` is okay even though there is not an attribute named `username` at the top?

By Michael Schwartz Account Admin 07 Oct 2016 at 11:22 a.m. CDT

Copy
Michael Schwartz gravatar
Did it work? Is this still an issue?

By Gene Liverman user 07 Oct 2016 at 1:24 p.m. CDT

Copy
Gene Liverman gravatar
The post from mohib zico seemed to reference setting something up related to the SAML module but there was no link... it seems like the word "here" was intended to be one. Also, the attribute listed under the oxauth serviceID is a name that is not at the top... was mohib zico saying I don't need to change it to one that is there?

By Mohib Zico Account Admin 07 Oct 2016 at 1:42 p.m. CDT

Copy
Mohib Zico gravatar
>> The post from mohib zico seemed to reference setting something up related to the SAML module but there was no link... it seems like the word "here" was intended to be one. Oh.. sorry about that. 'Here' don't have any link. :-) I wanted to mean your 'Gluu Server' as 'here'. >> Also, the attribute listed under the oxauth serviceID is a name that is not at the top... was mohib zico saying I don't need to change it to one that is there? Correct, we don't need to touch anything for that oxauth ServiceID bean.

By Gene Liverman user 07 Oct 2016 at 1:48 p.m. CDT

Copy
Gene Liverman gravatar
Thanks. Can you point me in the direction of the SAML part I need to configure please?

By Mohib Zico Account Admin 07 Oct 2016 at 2:04 p.m. CDT

Copy
Mohib Zico gravatar
https://wiki.jasig.org/display/CASUM/SAML+Support+in+CAS+4

Post an answer