> One problem is that if a user has a space preceding their user name our LDAP 
> accepts that

Interesting. I was going to claim that's pretty weird, but I just
tested it against OpenLDAP using a Java-based client library and got
the same results for 'username' and ' username'.

>  This doesn’t affect our Liferay portal, but when users hit anything in our 
> Peoplesoft arena the CAS auth for that fails because of the space before the 
> name (a space after the name is no problem).

The best way to address this is to normalize the principal ID in the
CredentialToPrincipalResolver component. For example, using
CredentialsToLDAPAttributePrincipalResolver you would set the
principalAttributeName property to the directory attribute that
contains the principal.

M

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to