Home/ Questions/Q 7019395
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-27T23:10:38+00:00

I am working on some project involving Liferay Portal, CAS and Apache Directory Server.

  • 0

I am working on some project involving Liferay Portal, CAS and Apache Directory Server. I am supposed to prepare proof of concept (or disproof) for the following model.
1. Liferay is integrated with CAS and supports SSL (needed for further usage of SSO). I have already done it and it works.
2. CAS communicates with LDAP server (Apache Directory Server) in order to perform not only authentication, but also authorization. I would like to achieve situation, when Liferay stores its dynamic privileges (to various Liferay objects) in his own database and static privileges (like user roles for instance) gets from CAS, which in fact gets it from LDAP. I want it transparent, namely that Liferay is not aware of LDAP existence.
As far as I know CAS out-of-the-box does only support authentication.

Is this possible? Anny ideas? Hints?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    CAS as in Central Authentication Service? It’s designed for authentication, as the name implies.

    Authorization is something quite different, as you clearly know already. You’ll need a framework designed for authorization – try Spring Security.

    • 0