Login Procedure
The new OpenCms login as following:
Module Parameters
The CASified OpenCms-LDAP module has the following parameters:
Attribute: a expression to mapping the username to an LDAP attribute, such as uid=%u@langhua.cn or cn=Shi Yusen, default is uid=u%. AuthenType: the authen type of LDAP server, default value is simple. AuthenticationHandler: the handler to authen the user's login, can be cn.langhua.opencms.ldap.cas.CmsCasAuthenticationHandler or cn.langhua.opencms.ldap.openldap.CmsLdapAuthenticationHandler, default is the LDAP one. AutoUserRoleName: when a new user added according to the login server, the default role type of this user. If empty, the user will be only in the User group without any role. BaseDN: the base DN of LDAP server, such as dc=example,dc=com. No default value. CasLoginUri: the uri to CAS login, default is /login. CasUrl: the url to visit CAS server, default is https://localhost:8443/cas. CasValidateUri: the uri to CAS validate, default is /validate. Filter: the filter to login LDAP server, default is (objectclass=*). Scope: the scope to search LDAP, default is sub which means search subtree from the BaseDN. URL: the URL of the LDAP server, ldap://localhost:389. UseCmsLoginWhenLDAPFail: When LDAP connection or login failed, whether using OpenCms login instead. Default value is true.
You have to config your CAS server to use LDAP as the above parameters configed.
How to validate service ticket