<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is it possible (or readily do-able) to modify the username returned in the CAS response? We need the usernames to be returned in whichever case (upper/lower) they had originally, instead of always in lower-case. We want to make this change
only for CAS. We were thinking of editing the response before it is sent out by replacing the lower-cased username with the value of another attribute that contains the originally-cased username.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Some context:<o:p></o:p></p>
<p class="MsoNormal">We are implementing IdPv3’s built-in CAS with the intention of replacing our current jasig-cas service. For the most part it seems to be working, except for certain clients. Our current jasig cas instance returns the username in whichever
case the username was in from the data source. Between our two AD domains, one domain has the usernames in lower-case, and the other domain in upper-case. As a result, some of our CAS clients created accounts with some usernames in uppercase and some usernames
in lower-case. Since shib returns the usernames in lower-case, regardless of the case the username originally was in, some of our CAS clients don’t authenticate some valid accounts (the ones in upper-case). <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I did locate shib’s CAS velocity templates, but they are in /opt/shibboleth-idp/system/views/cas, which as I understand it, should not be customized!
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I saw there is a username reference in validateSuccess.vm, which comes from a variable:
<o:p></o:p></p>
<p class="MsoNormal"><cas:user>$escapeUtils.escapeXml($ticketValidationResponse.userName)</cas:user><o:p></o:p></p>
<p class="MsoNormal">Can I change the value of $ticketValidationResponse.userName just before the response is generated? If so, how? Is this a bad idea or will it cause problems?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Or is there a better way to get the originally-cased username value in the CAS Response?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Any help is appreciated!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks!<o:p></o:p></p>
<p class="MsoNormal">Lucia<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Lucia Siochi<br>
Senior Systems Architect, IT Services<br>
Central Piedmont Community College<br>
Central Campus, Citizens Bldg<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">PO Box 35009 Charlotte, NC 28235<br>
704.330.6521<br>
<a href="http://www.cpcc.edu/">www.cpcc.edu</a></span><span style="font-size:10.5pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><img border="0" width="159" height="35" id="Picture_x0020_1" src="cid:image002.jpg@01D1D233.83932A40" alt="cid:image001.png@01CCCA1C.75B56920"></span><span style="font-size:5.0pt;font-family:"Times New Roman",serif"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">We value your feedback. How is our
</span><a href="http://surveys.cpcc.edu/47408/47408.asp"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">service</span></a>
<span style="font-size:10.0pt;font-family:"Arial",sans-serif">at CPCC?<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
This e-mail, including any attachments, is intended only for the addressee's use and may contain confidential and proprietary information. If you are not the intended recipient, you are hereby notified that any retention, dissemination, reproduction, or use
of the information contained in this e-mail is strictly prohibited. If you have received this e-mail by error, please delete it and immediately notify the sender. Thank you for your cooperation.<br>
</font>
</body>
</html>