Hi, I am trying to understand how the values displayed on CAS login welcome page are chosen. Our CAS is using simple LDAP auth (no dedicated attributes resolver), with a dedicated binding user. This one has access to more than 80 attributes, which can be confirmed using a simple "ldapseach". I don't want to use all of them, so "principal-attribute-list" has been set to the required ones. If I understand correctly : - "principal-attribute-list" defines a list of attributes which can be returned by services (possibly filtered at this level). An attribute not mentioned is this list, even if returned by the LDAP, will not be sent by services. - "principal-attribute-list" is not a "retrieve those LDAP attributes only". - If an attribute is mentioned on the list but not returned by the directory, it's omitted. So it's an "at best" list, depending on the available datas. Some people have discovered the login page, and plan to use it as some debug tool. I was just using it to confirm LDAP connectivity was OK, but never paid attention to the details (I get my name, email, phone number, it's working). Form them, here is the problem : on this page, we have a list of attributes but it does not seem to match any logic so far. - it's not the whole attributes list returned by the LDAP when using the dedicated user (much less). - but it's much more than "principal-attribute-list" content. - some displayed attributes are not mentioned in "principal-attribute-list" but displayed on the table. But they are not declared in any service either, they just exist and are valued. They seem to be randomly chosen. We don't have any app using attributes other than uid, mail, ... right now so everything seems to be ok. But not seeing expected attributes on the table led those people to think "they are missing, so coming apps needing them won't be usable". Can someone explain me how this is working, if some specific configuration is needed ? Regards
------------------------------------------------------------------------------------------------- FreeMail powered by mail.fr -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/434d4024ddd714ca29520239a2f19fb13d1d27d0%40mail.de.
