Hello,

I'm implementing CAS 6.6.x (currently I have 6.6.8), and I need to make an 
association between authentication handlers and attribute repositories / 
PersonAttributeDaos, for example, LdapAuthHandler[0] => Dao1, Dao2 and 
JdbcAuthHandler[0] => Dao1, Dao3.

The goal is that each auth handler only tries to get attributes from the 
attribute repositories that make sense to it.


I'm trying to do this, by creating a custom property in cas.properties for 
each auth handler, that holds a comma-separated list of one or more 
attribute repositories Ids (defined in standard props 
 "cas.authn.attribute-repository.<ldap/jdbc/etc>.id").
I got this ideia from the standard property 
"cas.person-directory.active-attribute-repository-ids".

Then, my plan is to extend the PersonDirectoryPrincipalResolver and 
manipulate the context.attributeRepository.personAttributeDaos, so that 
only the Daos that the auth handler "supports" are "executed".


Does this makes sense? Is it a possible and logic solution? Is there a 
better "standard solution" ?


Best regards,

Luís Costa

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/ae3bd322-0b0d-41ea-a157-8f894071f72dn%40apereo.org.

Reply via email to