Apereo CAS is an enterprise single sign on open source product. You can use it to do many things like to make a enterprise application portal on mobile app, web and software. I make an example to help you configure Apereo CAS with windows active directory(AD). It tested on version 6.0.0.
# LDAP Auth
cas.authn.ldap[0].type=AD
cas.authn.ldap[0].ldapUrl=ldap://192.168.0.1
cas.authn.ldap[0].useSsl=false
cas.authn.ldap[0].useStartTls=false
# cas.authn.ldap[0].connectTimeout=5000
cas.authn.ldap[0].searchFilter=sAMAccountName={user}
cas.authn.ldap[0].baseDn=dc=sample,dc=com
cas.authn.ldap[0].allowMissingPrincipalAttributeValue=true
cas.authn.ldap[0].subtreeSearch=true
# cas.authn.ldap[0].usePasswordPolicy=true
cas.authn.ldap[0].bindDn=LDAPService@sample.com
cas.authn.ldap[0].bindCredential=Happygo1!
# cas.authn.ldap[0].poolPassivator=NONE|CLOSE|BIND
# cas.authn.ldap[0].enhanceWithEntryResolver=true
cas.authn.ldap[0].dnFormat=%s@sample.com
cas.authn.ldap[0].principalAttributeId=sAMAccountName
# cas.authn.ldap[0].principalAttributePassword
# Give an attribute list released from LDAP to CAS, could be used with attributeRepository.defaultAttributesToRelease to be visible on CAS P3 serviceValidate
cas.authn.ldap[0].principalAttributeList=sAMAccountName,sn,cn,givenName,displayName,memberOf
cas.authn.ldap[0].allowMultiplePrincipalAttributeValues=true
# cas.authn.ldap[0].additionalAttributes=
# cas.authn.ldap[0].credentialCriteria=
Make sure your pom.xml file have follow configuration.
<dependency>
<groupId>org.apereo.cas</groupId>
<artifactId>cas-server-support-ldap</artifactId>
<version>${cas.version}</version>
</dependency>
You can reference our cas-overlay project at https://github.com/MarvinHsu/cas-overlay to see whole setting.
|