jscas-ad-attributes-resolver

This module provides a user attributes resolver plugin for the JSCAS server. This plugin is intended to retrieve attributes from an Active Directory instance, but may also work agains generic LDAP servers.

Configuration

The module requires a configuration object matching:

{
  ad: { // required
    searchUser: 'cn=jsmith,ou=users,dc=example,dc=com', // required
    searchPass: 'jsmith_password', // required
    ldapjs: {
      url: '(ldap|ldaps)://active.directory.server', // required
      searchBase: 'dc=example,dc=com', // required
      scope: 'base', // 'base', 'one', 'sub' default: 'sub'
      attributes: [ 'dn', 'cn', 'sn', 'givenName', 'mail', 'memberOf' ] // optional
      }
    }
  },
  attributesMap: {} // optional
}

ad

The ad property defines the configuration that will be passed to the underlying adldap module. This configuration is supplied to the adldap module as-is.

ad.searchUser

The username the AD module will use to bind to the server for search operations.

ad.searchUserPass

The password for ad.searchUser.

ad.ldapjs.url

An LDAP URL pointing to your Active Directory server. This property is required.

ad.ldapjs.searchBase

The DN under which all search queries will be performed. This includes authentications.

ad.ldapjs.scope

The search method to use. This module's default is 'sub'.

ad.ldapjs.attributes

An array of attributes to include in search results. These will be used by cas-server as extra attributes during CAS 3.0 authentication. The default attribute set is:

[ 'dn', 'cn', 'sn', 'givenName', 'mail', 'memberOf' ]

attributesMap

Allows you to rename the attributes returned in user searches. It should be an object where keys are the AD names and values are the new names. For example:

{
  sAMAccountName: 'firstName'
}

will rename the sAMAccountName property to firstName and leave all other property names alone.

License

MIT License