Question

我无法获取CAS客户端的属性。我做了一些研究，并试图找出如何将属性转发给CAS客户端。

在cas.properties我设置了这个：

 cas.principal.resolver.persondir.return.null=false

我添加了这种依赖：

    <dependency>
        <groupId>org.apache.commons</groupId>
        <artifactId>commons-collections4</artifactId>
        <version>4.1</version>
    </dependency>

这是我的servicesRegistry.conf：

{
    "services":[
        {
            "id":1,
            "serviceId":"https://localhost:8743/**",
            "name":"HELLO_WORLD",
            "description":"WEBAPP FOR TESTS",
            "theme":"my_example_webapp",
            "allowedToProxy":true,
            "enabled":true,
            "ssoEnabled":true,
            "anonymousAccess":false,
            "evaluationOrder":1,
            "attributeReleasePolicy" : {
                "@class" : "org.jasig.cas.services.ReturnAllowedAttributeReleasePolicy",
                "principalAttributesRepository" : {
                    "@class" : "org.jasig.cas.authentication.principal.DefaultPrincipalAttributesRepository"
                },
                "allowedAttributes" : [ "java.util.ArrayList", [ "cn", "description", "telephoneNumber" ] ]
            }   
        },

        {
            "id":2,
            "serviceId":"https://yahoo.com",
            "name":"YAHOO",
            "description":"Test service with exact match on its serviceId and optional extra attributes",
            "extraAttributes":{
                "someCustomAttribute":"Custom attribute value"
            },
            "evaluationOrder":2
        }
    ]
}

我的ldapAuthenticationHandler看起来像这样：

<bean id="ldapAuthenticationHandler"
        class="org.jasig.cas.authentication.LdapAuthenticationHandler"
              p:principalIdAttribute="cn"
              c:authenticator-ref="authenticator">
            <property name="principalAttributeMap">
                <map>
                    <entry key="cn" value="cn" />
                    <entry key="description" value="description" />
                    <entry key="telephoneNumber" value="telephoneNumber" />
                </map>
            </property>
    </bean>

我的authenticationHandlersResolvers喜欢这样：

<util:map id="authenticationHandlersResolvers">
    <entry key-ref="ldapAuthenticationHandler" value="#{null}" />
</util:map>

这是我的attributeRepository：

<bean id="attributeRepository" class="org.jasig.services.persondir.support.NamedStubPersonAttributeDao"
          p:backingMap-ref="attrRepoBackingMap" />

<util:map id="attrRepoBackingMap">
        <entry key="cn" value="cn" />
        <entry key="description" value="description" />
        <entry key="telephoneNumber" value="telephoneNumber" />
        <entry>
            <key><value>memberOf</value></key>
            <list>
                <value>faculty</value>
                <value>staff</value>
                <value>org</value>
            </list>
        </entry>
    </util:map>

在客户端，我这样做（编辑版本没有null检查等）：

AttributePrincipal principal = (AttributePrincipal) request.getUserPrincipal();
final Map attributes = principal.getAttributes();
Iterator attributeNames = attributes.keySet().iterator();
String attributeName = (String) attributeNames.next();

但是，我没有任何属性。我错过了什么？

修改

我在另一个帖子中读到我必须将Cas20ProxyReceivingTicketValidationFilter更改为Cas30ProxyReceivingTicketValidationFilter，但这并没有改变任何内容：

<filter>
        <filter-name>CAS Validation Filter</filter-name>
            <filter-class>org.jasig.cas.client.validation.Cas30ProxyReceivingTicketValidationFilter</filter-class>

        <init-param>
            <param-name>casServerUrlPrefix</param-name>
            <param-value>https://localhost:8943/cas</param-value>
        </init-param>
        <init-param>
            <param-name>serverName</param-name>
            <param-value>https://localhost:8743</param-value>
        </init-param>
        <init-param>
            <param-name>redirectAfterValidation</param-name>
            <param-value>true</param-value>
        </init-param>
        <init-param>
            <param-name>useSession</param-name>
            <param-value>true</param-value>
        </init-param>
    </filter>

Answer 1

我的问题是servicesRegistry.conf。它由于某种原因没有用，我无法弄清楚原因。

如果您在使用servicesRegistry.conf文件时遇到问题，建议您在deployerConfigContext.xml内使用此文件：

<bean id="serviceRegistryDao" class="org.jasig.cas.services.InMemoryServiceRegistryDaoImpl">
        <property name="registeredServices">
            <list>
                <bean class="org.jasig.cas.services.RegexRegisteredService"
                      p:id="5" p:name="https.all" p:description="Allow HTTPS connection"
                      p:serviceId="^https://.*" p:evaluationOrder="5"  >

                    <property name="attributeReleasePolicy">
                        <bean class="org.jasig.cas.services.ReturnAllAttributeReleasePolicy" />
                    </property>
                </bean>
            </list>
        </property>
    </bean>

这将允许所有具有适合正则表达式^https://.*的网址的服务。

CAS：属性不会显示在CAS客户端上

1 个答案: