Hi,
I have succeeded config CAS Overlay template 6.2.x can authenticated user
that registed in MongoDB.
Here is my config:
1. CAS Properties
"name":"cas.authn.mongo.name","value":"users"
"name":"cas.authn.mongo.database-name","value":"users"
"name":"cas.authn.mongo.collection","value":"users"
"name":"cas.authn.mongo.username-attribute","value":"username"
"name":"cas.authn.mongo.password-attribute","value":"password"
"name":"cas.authn.mongo.user-id","value":"casuser"
"name":"cas.authn.mongo.password","value":"Mellon"
"name":"cas.authn.mongo.attributes","value":"lastname,useremail,usertel"
"name":"cas.authn.mongo.clientUri","value":"mongodb://casuser:Mellon@IP:port/users?authSource=admin&readPreference=primary&appname=MongoDB%20Compass%20Community&ssl=false"
2. And this is user properties in User collecion
"username":"root",
"password":"root",
"lastname":"VNPT ADMIN",
"useremail":"xxx",
"usertel":"xxx"
But, I have faced with problem about CAS Management Web App service.
Here is CAS Management Web App log:
WARN [org.apereo.cas.mgmt.authz.CasRoleBasedAuthorizer] - <Unable to
authorize access, since the authenticated profile [#CasProfile# | id: root
| attributes: {credentialType=UsernamePasswordCredential,
isFromNewLogin=false, authenticationDate=2020-08-26T08:51:16.865441Z[UTC],
authenticationMethod=users, successfulAuthenticationHandlers=users,
longTermAuthenticationRequestTokenUsed=false} | roles: [] | permissions: []
| isRemembered: false | clientName: CasClient | linkedId: null |] *does not
contain any required roles*>
Here is my service registry for CAS Manaement Web App:
{
"@class" : "org.apereo.cas.services.RegexRegisteredService",
"serviceId":"^https://cas-server-domain:8088/cas-management.+";,
"name" : "casManagement",
"id" : 1,
"evaluationOrder" : 1,
"allowedAttributes":["cn","mail"]
}
CAS server succeed create and authorized access token for user (id = root)
but CAS Management missing user's role.
I don't know how to assign ROLE for user or indicate user's role fixed in
service registry.
Please help me.
Thank you in advance.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d45135e1-e8d4-4f55-9e49-02e1d825c18bn%40apereo.org.
