about summary refs log tree commit diff
diff options
context:
space:
mode:
authorLuke Granger-Brown <git@lukegb.com>2021-04-03T20·47+0000
committerlukegb <lukegb@tvl.fyi>2021-04-03T21·51+0000
commit3e7073f106dba0b97484935347b94b1c11db9b81 (patch)
tree62d179177e3af7838fa9b6e46167fab2012fdc99
parent85900e150ee50018575f7de3b4ff53dc59c1989c (diff)
feat(3p/apereo-cas): add the LDAP DN to the list of attributes r/2418
Panettone currently uses the LDAP DN as the user key, so we collect it
here so that we can later make sure its exposed to Panettone.

Change-Id: Ia2048cb479a2afe6fe9f47181115ae7ec13dedf3
Reviewed-on: https://cl.tvl.fyi/c/depot/+/2811
Tested-by: BuildkiteCI
Reviewed-by: tazjin <mail@tazj.in>
Reviewed-by: glittershark <grfn@gws.fyi>
-rw-r--r--third_party/apereo-cas/overlay/etc/cas/config/cas.properties6
1 files changed, 4 insertions, 2 deletions
diff --git a/third_party/apereo-cas/overlay/etc/cas/config/cas.properties b/third_party/apereo-cas/overlay/etc/cas/config/cas.properties
index b2a091b8de..f783ad0861 100644
--- a/third_party/apereo-cas/overlay/etc/cas/config/cas.properties
+++ b/third_party/apereo-cas/overlay/etc/cas/config/cas.properties
@@ -22,10 +22,12 @@ cas.authn.saml-idp.entity-id=https://login.tvl.fyi
 
 cas.authn.accept.users=
 
-cas.authn.attribute-repository.default-attributes-to-release=uid,mail,displayName
+cas.authn.attribute-repository.default-attributes-to-release=uid,mail,displayName,username,principalLdapDn
 
 cas.authn.ldap[0].pool-passivator=NONE
-cas.authn.ldap[0].principal-attribute-list=cn:uid,mail,displayName
+cas.authn.ldap[0].principal-attribute-list=cn:uid,mail,displayName,cn:username
+cas.authn.ldap[0].collect-dn-attribute=true
+cas.authn.ldap[0].principal-dn-attribute-name=principalLdapDn
 cas.authn.ldap[0].ldap-url=ldap://localhost
 cas.authn.ldap[0].use-start-tls=false
 cas.authn.ldap[0].validator.base-dn=dc=tvl,dc=fyi