Content & Malware Analysis

 CAS LDAP Authentication for Groups

Emre CAN's profile image
Emre CAN posted May 30, 2022 06:24 AM
Hello everybody;

Today I configured ldap authentication with CAS. But When users belong to a group cannot login. WHen I add users to LDAP "user or group to local role mapping" as users, there is no problem. But our main goal is only add Security group. How can I achive this? My config steps are;

-Add the hostname of the LDAP server (ldap supports 389 plain authention not ldaps)
-Add Manager's Credentials, Ldap does not support anonymous search, so I added credential
-Add
User Search Criteria
-Add Role Search Criteria (Username Attribute is sAMAccountName , base DN is added DN format, Result Role Attribute is member)
-Add Add Group Mapping (Same name on the AD) and with this cofig  I didn't add any user name mapping config, because I want to mange users on the AD.

There is no communication problem, DNS can successfully resolve IP address of LDAP server, and as I mentioned if I added user by user again no problem. My main problem is Users belong to a group cannot login.