IdP v5.1.3 with CAS
Hall, Gerry
gerry.hall at emory.edu
Tue Nov 26 12:50:59 UTC 2024
I have added CAS to IdP version 5.1.3. and I am attempting to pass an attribute , uid, to the CAS service.
I can authenticate and I see that the service ticket is granted.
But, the uid is not passed. Below are the config settings and the log message.
Can you tell me what I am missing or point me to the appropriate docs?
attribute-filter.xml:
<AttributeFilterPolicy id="JasperServices">
<PolicyRequirementRule xsi:type="RequesterRegex"
regex="https:\/\/(jasper(.*)?\.)emory\.edu\/jasperserver\-pro(.*)" />
<AttributeRule attributeID="uid">
<PermitValueRule xsi:type="ANY"/>
</AttributeRule>
</AttributeFilterPolicy>
cas-protocol.xml:
<bean class="net.shibboleth.idp.cas.service.ServiceDefinition"
c:regex="https:\/\/(jasper(.*)?\.)emory\.edu\/jasperserver\-pro(.*)?"
p:group="JasperCASServices"
p:authorizedToProxy="true"
p:singleLogoutParticipant="true" />
>From IdP logs:
127.0.0.1|2024-11-26 07:40:57,683|A86ADA1C7013233E53E92D4C2EC8FC2F| - WARN [DEPRECATED:130] - Java class 'net.shibboleth.idp.profile.context.RelyingPartyContext': This will be removed in the next major version of this software; replacement is net.shibboleth.profile.context.RelyingPartyContext
127.0.0.1|2024-11-26 07:41:01,178|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [org.ldaptive.auth.Authenticator:372] - Authentication succeeded for dn: CN=ghall4,OU=People,DC=emory,DC=edu
127.0.0.1|2024-11-26 07:41:01,179|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.authn.impl.LDAPCredentialValidator:176] - Credential Validator ldap: Login by 'ghall4' succeeded
127.0.0.1|2024-11-26 07:41:01,271|A86ADA1C7013233E53E92D4C2EC8FC2F| - WARN [DEPRECATED:130] - Java class 'net.shibboleth.idp.profile.context.RelyingPartyContext': This will be removed in the next major version of this software; replacement is net.shibboleth.profile.context.RelyingPartyContext
127.0.0.1|2024-11-26 07:41:01,965|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController:147] - Starting Duo 2FA for client 'DITUYZ5TWMIN157RPMKM', user 'ghall4', and unique request state 'eed6c99360eebf74abe73bb8a14aecf0'
127.0.0.1|2024-11-26 07:41:03,356|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController:219] - Finished Duo 2FA for client 'DITUYZ5TWMIN157RPMKM', user 'ghall4', and unique request state 'eed6c99360eebf74abe73bb8a14aecf0'
127.0.0.1|2024-11-26 07:41:03,802|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult:225] - Profile Action ValidateDuoTokenAuthenticationResult: Duo 2FA authentication succeeded for 'ghall4', using second-factor 'remembered_device'
127.0.0.1|2024-11-26 07:41:03,806|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.authn.impl.FinalizeAuthentication:201] - Profile Action FinalizeAuthentication: Principal ghall4 authenticated
127.0.0.1|2024-11-26 07:41:04,366|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.cas.flow.impl.GrantServiceTicketAction:242] - Profile Action GrantServiceTicketAction: Granted service ticket for https://jasper.emory.edu/jasperserver-pro/j_spring_security_check
127.0.0.1|2024-11-26 07:41:04,555|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [Shibboleth-Audit.SSO:333] - 127.0.0.1|2024-11-26T12:40:56.283537699Z|2024-11-26T12:41:04.554989150Z|ghall4|https://jasper.emory.edu/jasperserver-pro/j_spring_security_check|ST-AADXGZLDOJSXIMNPN7R4O5HXPJUCJ6DENMW2PTCEZC7HG5XKNM2MMWLNTD36QLPHX2NQTJMDSILVWY5YSL62SR42RTDWGM7E4AY3POCMR3JDYQ6KOEJFHRKQSF4IVWJXM5EOENV5RCZRXGALQWYSC7MJBHMPVZ7ALJJIOJWVDXLVXVWXEP3CCSZT7HX5J44JU4NYOZTOMU5NJZ4OMVNCFAIQJQGKQOH43BJLLGFNG45OKI5TS6W6ZGUX6UIR57GVOK6DCJRCIUCXCVMTNZF6DXACC7CBPG6SJVPZWKFZO7REW5FM446SKGQKIEAFTN2VJA4H3E4FJL5C2O3JSDYFDUA46MJ7AN553WYUEEUSTU2ECRIVIT35IGMIYAAWNS7N3MUW37KKHMOIEZANZJEZSQEA6DKMXSEU||||ghall4||false|||||NoSaveNeeded|||c49b8ec4b43f2380e2e06252ed887adb9f7d939a69314f37997c57ce3d0254fe|Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241126/78645286/attachment.htm>
More information about the users
mailing list