CAS3.0.7 + LDAP configuration -- urgent help request!!

[Edward Chen]

first, I have my CAS 3.0.7 up and running for mysql server.

I am using CAS 3.0.7. I plan to configure CAS 3.0.7 with LDAP. I have
LDAP server.
Now when I refer to page http://www.ja-sig.org/wiki/display/CASUM/LDAP 
to help me configure and I find something missing in my CAS 3.0.7. I
have few questions
1. Can CAS 3.0.7 configure LDAP or I have to upgrade to the most recent
version?

2. If I want to configure CAS 3.0.7 to LDAP, I don't find porn.xml in
webapps. How do I add porn.xml portion into it? Can I just copy porn.xml
file into my CAS     3.0.7's webapps folder? if not, where do I add the
following piece

<dependency>
     <groupId>${project.groupId}</groupId>
     <artifactId>cas-server-support-ldap</artifactId>
     <version>${project.version}</version>
</dependency>



3. where should I put the following code in deployerConfigCpntext.xml? I
attached my deployerConfigCpntext.xml.for you to take a look if it's
right I put that piece. Also, when I add the ldap part into
deployerConfigCpntext.xml, do I need to comment out my  mysql connection
bean?

4. I don't understand the following piece code from ldap

<property name="userName" value="{bind_username_goes_here}"/>
                    <property name="password"
value="{bind_user_password_goes_here}"/>

Do I need to change anything above?


Edward

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE beans PUBLIC  "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">
<!--
        | deployerConfigContext.xml centralizes into one file some of the declarative configuration that
        | all CAS deployers will need to modify.
        |
        | This file declares some of the Spring-managed JavaBeans that make up a CAS deployment.  
        | The beans declared in this file are instantiated at context initialization time by the Spring
        | ContextLoaderListener declared in web.xml.  It finds this file because this
        | file is among those declared in the context parameter "contextConfigLocation".
        |
        | By far the most common change you will need to make in this file is to change the last bean
        | declaration to replace the default SimpleTestUsernamePasswordAuthenticationHandler with
        | one implementing your approach for authenticating usernames and passwords.
        +-->
<beans>
        <!--
                | This bean declares our AuthenticationManager.  The CentralAuthenticationService service bean
                | declared in applicationContext.xml picks up this AuthenticationManager by reference to its id,
                | "authenticationManager".  Most deployers will be able to use the default AuthenticationManager
                | implementation and so do not need to change the class of this bean.  We include the whole
                | AuthenticationManager here in the userConfigContext.xml so that you can see the things you will
                | need to change in context.
                +-->
        <bean id="authenticationManager"
                class="org.jasig.cas.authentication.AuthenticationManagerImpl">
                <!--
                        | This is the List of CredentialToPrincipalResolvers that identify what Principal is trying to authenticate.
                        | The AuthenticationManagerImpl considers them in order, finding a CredentialToPrincipalResolver which
                        | supports the presented credentials.
                        |
                        | AuthenticationManagerImpl uses these resolvers for two purposes.  First, it uses them to identify the Principal
                        | attempting to authenticate to CAS /login .  In the default configuration, it is the DefaultCredentialsToPrincipalResolver
                        | that fills this role.  If you are using some other kind of credentials than UsernamePasswordCredentials, you will need to replace
                        | DefaultCredentialsToPrincipalResolver with a CredentialsToPrincipalResolver that supports the credentials you are
                        | using.
                        |
                        | Second, AuthenticationManagerImpl uses these resolvers to identify a service requesting a proxy granting ticket.
                        | In the default configuration, it is the HttpBasedServiceCredentialsToPrincipalResolver that serves this purpose.
                        | You will need to change this list if you are identifying services by something more or other than their callback URL.
                        +-->
                <property name="credentialsToPrincipalResolvers">
                        <list>
                                <!--
                                        | UsernamePasswordCredentialsToPrincipalResolver supports the UsernamePasswordCredentials that we use for /login
                                        | by default and produces SimplePrincipal instances conveying the username from the credentials.
                                        |
                                        | If you've changed your LoginFormAction to use credentials other than UsernamePasswordCredentials then you will also
                                        | need to change this bean declaration (or add additional declarations) to declare a CredentialsToPrincipalResolver that supports the
                                        | Credentials you are using.
                                        +-->
                                <bean
                                        class="org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver" />
                                <!--
                                        | HttpBasedServiceCredentialsToPrincipalResolver supports HttpBasedCredentials.  It supports the CAS 2.0 approach of
                                        | authenticating services by SSL callback, extracting the callback URL from the Credentials and representing it as a
                                        | SimpleService identified by that callback URL.
                                        |
                                        | If you are representing services by something more or other than an HTTPS URL whereat they are able to
                                        | receive a proxy callback, you will need to change this bean declaration (or add additional declarations).
                                        +-->
                                <bean
                                        class="org.jasig.cas.authentication.principal.HttpBasedServiceCredentialsToPrincipalResolver" />
                        </list>
                </property>

                <!--
                        | Whereas CredentialsToPrincipalResolvers identify who it is some Credentials might authenticate,
                        | AuthenticationHandlers actually authenticate credentials.  Here we declare the AuthenticationHandlers that
                        | authenticate the Principals that the CredentialsToPrincipalResolvers identified.  CAS will try these handlers in turn
                        | until it finds one that both supports the Credentials presented and succeeds in authenticating.
                        +-->
                <property name="authenticationHandlers">
                        <list>
                                <!--
                                        | This is the authentication handler that authenticates services by means of callback via SSL, thereby validating
                                        | a server side SSL certificate.
                                        +-->
                                <bean
                                        class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler">
                                        <property
                                                name="httpClient"
                                                ref="httpClient" />
                                </bean>

                                <!--
                                        | This is the authentication handler declaration that every CAS deployer will need to change before deploying CAS
                                        | into production.  The default SimpleTestUsernamePasswordAuthenticationHandler authenticates UsernamePasswordCredentials
                                        | where the username equals the password.  You will need to replace this with an AuthenticationHandler that implements your
                                        | local authentication strategy.  You might accomplish this by coding a new such handler and declaring
                                        | edu.someschool.its.cas.MySpecialHandler here, or you might use one of the handlers provided in the adaptors modules.
                                        +-->

                                <!--
                               
                                <bean
                                        class="org.jasig.cas.authentication.handler.support.SimpleTestUsernamePasswordAuthenticationHandler" />
                       
                                -->

                                                               

                                <bean id="SearchModeSearchDatabaseAuthenticationHandler"
      class="org.jasig.cas.adaptors.jdbc.SearchModeSearchDatabaseAuthenticationHandler"
      abstract="false" singleton="true" lazy-init="default" autowire="default" dependency-check="default">
  <property  name="tableUsers">
    <value>users</value>
  </property>
  <property name="fieldUser">
    <value>username</value>
  </property>
  <property name="fieldPassword">
    <value>password</value>
  </property>
  <property name="dataSource" ref="dataSource" />
                                </bean>
                               
                                <!--
                               
                                <bean class="org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler">
  <property name="dataSource" ref="dataSource" />
  <property name="sql" value="select password from users where lower(username) = lower(?)" />
                                </bean>

                                -->
                               
                               

                        </list>
               
                </property>

        </bean>

                                <bean id="dataSource" class="org.apache.commons.dbcp.BasicDataSource">

  <property name="driverClassName">
  <value>com.mysql.jdbc.Driver</value>
  </property>

  <property name="url">
  <value>jdbc:mysql://edwardcwin.wri.wolfram.com:3306/login</value>
  </property>
                                       
                                        <!--

                                       
  <property name="url2">
  <value>jdbc:mysql://edwardcwin.wri.wolfram.com:3306/contacts</value>
  </property>

                                        -->

                                        <!--

                                        <property name="username">
  <value>admusr</value>
  </property>

  <property name="password">
  <value>admpwd</value>
  </property>

                                        -->

                                       
  <property name="username">
  <value>root</value>
  </property>

  <property name="password">
  <value>lsat123</value>
  </property>
                                       
                                </bean>



                                <bean id="contextSource" class="org.jasig.cas.adaptors.ldap.util.AuthenticatedLdapContextSource">
                                        <property name="pooled" value="true"/>
                                        <property name="urls">
                                                <list>
                                                        <value>ldaps://ldap.wolfram.com:389/</value>
                                                        <!-- <value>ldaps://ldap2.rutgers.edu/</value> -->
                                                </list>
                                        </property>
                                        <property name="userName" value="{bind_username_goes_here}"/>
                                        <property name="password" value="{bind_user_password_goes_here}"/>

                                        <property name="baseEnvironmentProperties">
               
                                        <map>
                                                <entry>
                                                        <key>
                                                                <value>java.naming.security.authentication</value>
                                                        </key>
                                                                <value>simple</value>
                                                </entry>
                                        </map>
                                        </property>
                                </bean>





       
</beans>

_______________________________________________
cas-dev mailing list
cas-dev@...
http://tp.its.yale.edu/mailman/listinfo/cas-dev