Hi Mr Jérôme LELEU,
Yes I know this configuration but I have inconvenient process when I create
new user.
It means, when I create new user in MongoDB, CAS Overlay can authenticated
new user (I must not restart cas service) but with CAS Management Web App,
I must add this role for new user to user.json file and restart CAS
Management Web App service.
For example:
First:
I have already had one user with username is casuser and password =x1.
I could use casuser/x1 as CAS's account to use CAS Overlay and CAS
Management Web app feature.
Next:
I add new user with username is casuser2 and password =x2.
I could use casuser2/x2 as CAS's account to use CAS Overlay feature.
But with CAS Management Web App, I need modified user.json file like this
{
"casuser" : {
"roles" : [ "ROLE_ADMIN" ]
},
"casuser2" : {
"roles" : [ "ROLE_ADMIN" ]
},
}
Then restart CAS Management service. After that, I could use this casuser2
account for CAS Management Web App.
It's very inconvenient, thus I hope any way to fix this role for all users.
Please help me.
Thank you in advance.
Vào Th 2, 31 thg 8, 2020 vào lúc 13:44 Jérôme LELEU <[email protected]> đã
viết:
> Hi,
>
> You need to add a *users.json* (or *users.yml* in YAML format) file in
> the classpath.
> For example:
>
> {
> "casuser" : {
> "roles" : [ "ROLE_ADMIN" ]
> }
> }
>
>
> Thanks.
> Best regards,
> Jérôme
>
>
> Le jeu. 27 août 2020 à 14:11, Napoleon Ponaparte <
> [email protected]> a écrit :
>
>>
>> Hi,
>>
>> I have succeeded config CAS Overlay template 6.2.x can authenticated user
>> that registed in MongoDB.
>> Here is my config:
>>
>> 1. CAS Properties
>> "name":"cas.authn.mongo.name","value":"users"
>> "name":"cas.authn.mongo.database-name","value":"users"
>> "name":"cas.authn.mongo.collection","value":"users"
>> "name":"cas.authn.mongo.username-attribute","value":"username"
>> "name":"cas.authn.mongo.password-attribute","value":"password"
>> "name":"cas.authn.mongo.user-id","value":"casuser"
>> "name":"cas.authn.mongo.password","value":"Mellon"
>> "name":"cas.authn.mongo.attributes","value":"lastname,useremail,usertel"
>> "name":"cas.authn.mongo.clientUri","value":"mongodb://casuser:Mellon@IP
>> :port/users?authSource=admin&readPreference=primary&appname=MongoDB%20Compass%20Community&ssl=false"
>> 2. And this is user properties in User collecion
>>
>> "username":"root",
>> "password":"root",
>> "lastname":"VNPT ADMIN",
>> "useremail":"xxx",
>> "usertel":"xxx"
>>
>> But, I have faced with problem about CAS Management Web App service.
>> Here is CAS Management Web App log:
>>
>> WARN [org.apereo.cas.mgmt.authz.CasRoleBasedAuthorizer] - <Unable to
>> authorize access, since the authenticated profile [#CasProfile# | id: root
>> | attributes: {credentialType=UsernamePasswordCredential,
>> isFromNewLogin=false, authenticationDate=2020-08-26T08:51:16.865441Z[UTC],
>> authenticationMethod=users, successfulAuthenticationHandlers=users,
>> longTermAuthenticationRequestTokenUsed=false} | roles: [] | permissions: []
>> | isRemembered: false | clientName: CasClient | linkedId: null |] *does
>> not contain any required roles*>
>>
>> Here is my service registry for CAS Manaement Web App:
>>
>> {
>> "@class" : "org.apereo.cas.services.RegexRegisteredService",
>> "serviceId":"^https://cas-server-domain:8088/cas-management.+";,
>> "name" : "casManagement",
>> "id" : 1,
>> "evaluationOrder" : 1,
>> "allowedAttributes":["cn","mail"]
>> }
>>
>> CAS server succeed create and authorized access token for user (id =
>> root) but CAS Management missing user's role.
>>
>> I don't know how to assign ROLE for user or indicate user's role fixed in
>> service registry.
>> Please help me.
>> Thank you in advance.
>>
>>
>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/d45135e1-e8d4-4f55-9e49-02e1d825c18bn%40apereo.org
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/d45135e1-e8d4-4f55-9e49-02e1d825c18bn%40apereo.org?utm_medium=email&utm_source=footer>
>> .
>>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAP279LydnJDBBuVcJzjGPE6bVPOQUAZkEaxz6J25bcT0kzKO_Q%40mail.gmail.com
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAP279LydnJDBBuVcJzjGPE6bVPOQUAZkEaxz6J25bcT0kzKO_Q%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAEjUsAimwpSpM0PV15%2BNp-jSeQpR5A_JduajPWy4Lv8RZPetfA%40mail.gmail.com.
