Am 25.05.2011 15:59, schrieb Neit:
I just want a service to be able to modify the content of an attribute stored
(and shared with the help of Saml) by CAS Server.
When accessing to a new service, CAS would communicate the new values of the
attribute to this new service.
I can manage myself with changes in my own datastore from my service, I don't
expect CAS to do all of my job. ;)
You should use the cas server to authenticate someone and then modify
the attributes on the native database/ldap or some simple webservice for
this purpose. You can use the cn, id or whatever unique identifier you
have to look up the data.
I think you can even secure the access to the database/ldap with pam_cas
or secure a webservice with a cas-client and use a proxy ticket to
authenticate.
This was a technique used to read user attributes before SAML was
available and the CAS 2.0 was extended by some unoffical attribute stuff.
Regards,
Joachim
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
