I have the same issue with 7.0.3 and Duo MFA, I am also hoping for a fix
with 7.1, Thank you Ray and Mike.
On Wed, Apr 17, 2024 at 9:53 AM Mike S wrote:
> You're right! Removing support-surrogate-webflow allows merging to proceed
> properly. Think this will be addressed in 7.1, or is this
I created, https://github.com/apereo/cas/pull/6019 as a fix for this.
If you can not wait for the changes to be in mainstream cas, you can copy in
the modified files to your overlay.
Ray
On Wed, 2024-04-17 at 06:03 -0700, Mike S wrote:
Notice: This message was sent from outside the University
You're right! Removing support-surrogate-webflow allows merging to proceed
properly. Think this will be addressed in 7.1, or is this working as
intended and we have to do something else to enable proper attribute
merging?
On Tuesday, April 16, 2024 at 8:55:32 p.m. UTC-2:30 Ray Bon wrote:
> I
I have been able to confirm that the presence of the surrogate log in feature
can create the observed problem.
implementation "org.apereo.cas:cas-server-support-surrogate-webflow"
The non merging of attributes happens even though no surrogate login takes
place.
Ray
On Mon, 2024-04-15 at
FYI, downgrading to 6.6.13 works. DUO universal prompt functions properly
and the principal attributes are from LDAP only. I'm suspicious that
something about DUO and/or MFA is broken in CAS 7.0.3.
On Monday, April 15, 2024 at 2:10:54 p.m. UTC-2:30 Mike S wrote:
> Hi Ray,
>
> it was in
Hi Ray,
it was in /etc/cas/config/lob4j2.xml, setting the log level to debug:
/var/log/cas
*debug*
On Saturday, April 13, 2024 at 1:48:06 a.m. UTC-2:30 Ray Bon wrote:
> Mike,
>
> What logger did you enable to see this?
>
> Ray
>
> On Fri, 2024-04-12 at 11:36 -0700, Mike S
Hi,
We are using CAS in version 6.5 on production with protocols OAuth, SAML,
OIDC. We use attributeRepository from LDAP because we need *memberOf *with
recursive data. There are many memberOf so we need to filter it out. We use
attributeReleasePolicy
with
Mike,
What logger did you enable to see this?
Ray
On Fri, 2024-04-12 at 11:36 -0700, Mike S wrote:
Notice: This message was sent from outside the University of Victoria email
system. Please be cautious with links and sensitive information.
Thanks for your response Ray. I've been banging my
Thanks for your response Ray. I've been banging my head against this for a
while and I thought it was something I was missing. I've verified the
conflict resolver option doesn't work.
The log debug log output shows the LDAP and DUO attributes at one point
are merged, but the result is
Mike,
I can confirm this behaviour.
DefaultPrincipalElectionStrategy was changed between 6.5 and 7.0. The change
was in 5bcef20 about 5 months ago.
The old behaviour was to select the first principle in a list; new behaviour
defaults to last.
Even setting this property,
(Apologies for the repost. The CAS version has been added in the subject
line as well as the cas.properties file)
We are testing a CAS 7.0.3 POC system using universal prompt DUO MFA. The
system is configured to use OpenLDAP for authentication. However, once DUO
MFA is enabled via the Fawnoos
11 matches
Mail list logo
