IdP v5.1.3 with CAS

Hall, Gerry gerry.hall at emory.edu
Tue Nov 26 12:50:59 UTC 2024


I have added CAS to IdP version 5.1.3.  and I am attempting to pass an attribute , uid, to the CAS service.
I can authenticate and I see that the service ticket is granted.
But, the uid is not passed.  Below are the config settings and the log message.
Can you tell me what I am missing or point me to the appropriate docs?

attribute-filter.xml:
    <AttributeFilterPolicy id="JasperServices">
        <PolicyRequirementRule xsi:type="RequesterRegex"
                             regex="https:\/\/(jasper(.*)?\.)emory\.edu\/jasperserver\-pro(.*)" />
        <AttributeRule attributeID="uid">
            <PermitValueRule xsi:type="ANY"/>
        </AttributeRule>
    </AttributeFilterPolicy>

cas-protocol.xml:
            <bean class="net.shibboleth.idp.cas.service.ServiceDefinition"
                  c:regex="https:\/\/(jasper(.*)?\.)emory\.edu\/jasperserver\-pro(.*)?"
                  p:group="JasperCASServices"
                  p:authorizedToProxy="true"
                  p:singleLogoutParticipant="true" />


>From IdP logs:
127.0.0.1|2024-11-26 07:40:57,683|A86ADA1C7013233E53E92D4C2EC8FC2F| - WARN [DEPRECATED:130] - Java class 'net.shibboleth.idp.profile.context.RelyingPartyContext': This will be removed in the next major version of this software; replacement is net.shibboleth.profile.context.RelyingPartyContext
127.0.0.1|2024-11-26 07:41:01,178|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [org.ldaptive.auth.Authenticator:372] - Authentication succeeded for dn: CN=ghall4,OU=People,DC=emory,DC=edu
127.0.0.1|2024-11-26 07:41:01,179|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.authn.impl.LDAPCredentialValidator:176] - Credential Validator ldap: Login by 'ghall4' succeeded
127.0.0.1|2024-11-26 07:41:01,271|A86ADA1C7013233E53E92D4C2EC8FC2F| - WARN [DEPRECATED:130] - Java class 'net.shibboleth.idp.profile.context.RelyingPartyContext': This will be removed in the next major version of this software; replacement is net.shibboleth.profile.context.RelyingPartyContext
127.0.0.1|2024-11-26 07:41:01,965|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController:147] - Starting Duo 2FA for client 'DITUYZ5TWMIN157RPMKM', user 'ghall4', and unique request state 'eed6c99360eebf74abe73bb8a14aecf0'
127.0.0.1|2024-11-26 07:41:03,356|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.DuoOIDCAuthnController:219] - Finished Duo 2FA for client 'DITUYZ5TWMIN157RPMKM', user 'ghall4', and unique request state 'eed6c99360eebf74abe73bb8a14aecf0'
127.0.0.1|2024-11-26 07:41:03,802|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.plugin.authn.duo.impl.ValidateDuoTokenAuthenticationResult:225] - Profile Action ValidateDuoTokenAuthenticationResult: Duo 2FA authentication succeeded for 'ghall4', using second-factor 'remembered_device'
127.0.0.1|2024-11-26 07:41:03,806|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.authn.impl.FinalizeAuthentication:201] - Profile Action FinalizeAuthentication: Principal ghall4 authenticated
127.0.0.1|2024-11-26 07:41:04,366|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [net.shibboleth.idp.cas.flow.impl.GrantServiceTicketAction:242] - Profile Action GrantServiceTicketAction: Granted service ticket for https://jasper.emory.edu/jasperserver-pro/j_spring_security_check
127.0.0.1|2024-11-26 07:41:04,555|A86ADA1C7013233E53E92D4C2EC8FC2F| - INFO [Shibboleth-Audit.SSO:333] - 127.0.0.1|2024-11-26T12:40:56.283537699Z|2024-11-26T12:41:04.554989150Z|ghall4|https://jasper.emory.edu/jasperserver-pro/j_spring_security_check|ST-AADXGZLDOJSXIMNPN7R4O5HXPJUCJ6DENMW2PTCEZC7HG5XKNM2MMWLNTD36QLPHX2NQTJMDSILVWY5YSL62SR42RTDWGM7E4AY3POCMR3JDYQ6KOEJFHRKQSF4IVWJXM5EOENV5RCZRXGALQWYSC7MJBHMPVZ7ALJJIOJWVDXLVXVWXEP3CCSZT7HX5J44JU4NYOZTOMU5NJZ4OMVNCFAIQJQGKQOH43BJLLGFNG45OKI5TS6W6ZGUX6UIR57GVOK6DCJRCIUCXCVMTNZF6DXACC7CBPG6SJVPZWKFZO7REW5FM446SKGQKIEAFTN2VJA4H3E4FJL5C2O3JSDYFDUA46MJ7AN553WYUEEUSTU2ECRIVIT35IGMIYAAWNS7N3MUW37KKHMOIEZANZJEZSQEA6DKMXSEU||||ghall4||false|||||NoSaveNeeded|||c49b8ec4b43f2380e2e06252ed887adb9f7d939a69314f37997c57ce3d0254fe|Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241126/78645286/attachment.htm>


More information about the users mailing list