search

Unicon / cas-addons

Open source CAS customizations, extensions, and configuration aids.
http://unicon.github.io/cas-addons/
Apache License 2.0
54 stars 26 forks source link

Role Based Services Authorization AuthzAttributes with wildcard supported? #60

Closed VaporFan closed 10 years ago

VaporFan commented 10 years ago

Hello, I wonder how to do this? I'm testing cas addons with role based service authorization. I plan to permit user access to specified services based on his/her provided principal ( for example: memberOf and entryDN with uid= * ,ou= * ,dc = ***) ( Github cut off some of wildcards, so I added some space )

If wildcard authz attribute was supported. I would be able to enable a specified service for all users under a dc or ou and forbidding user access to a service is able to do with current feature.

Is this possible ? If not I'm planning to update my current ldap structure to store trimmed EntryDN ldap attribute to compare with service authz attribute. I think this is the only way to solve this for me now.

dima767 commented 10 years ago

This is not supported. — Sent from Mailbox

On Tue, Aug 19, 2014 at 3:57 AM, Kent notifications@github.com wrote:

Hello, I wonder how to do this? I'm testing cas addons with role based service authorization. I plan to permit user access to specified services based on his/her provided principal ( for example: memberOf and entryDN with uid=,ou=,dc=*). If wildcard authz attribute was supported. I would be able to enable a specified service for all users under a dc or ou and forbidding user access to a service is able to do with current feature.

Is this possible ? If not I'm planning to update my current ldap structure to store trimmed EntryDN ldap attribute to compare with service authz attribute. I think this is the only way to solve this for me now.

Reply to this email directly or view it on GitHub: https://github.com/Unicon/cas-addons/issues/60

VaporFan commented 10 years ago

Thanks