NIS authentication with CAS GH

To authenticate users on a NIS domain, the administrator should specify:

• the name of the NIS domain to bind to (domain, required);
• the map used to authenticate users (map="passwd.byname" by default); in this map, textual fields are intended to be separated by ':', the first field representing the login name and the second one the password;
• the encryption used for the password (plain, des, md5 and pammd5 are allowed, pammd5 by default);
• Optionnally, a list of servers.

One may use:

<authentication debug="off">
  <handler>
    <classname>org.esupportail.cas.server.handlers.nis.NisHandler</classname>
    <config>
      <domain>ESUP-PORTAIL</domain>
      <map>passwd.byname</map>
      <encryption>des</encryption>
      <server>
        <host>nis1.esup-portail.org</host>
      </server>
      <server>
        <host>nis2.esup-portail.org</host>
      </server>
    </config>
  </handler>
</authentication>

When no server is specified, a broadcast is used to bind to the NIS domain.

Important note: broadcast does not work in the current version.

To make the NIS handler work, the JNDI NIS provider should be installed as detailed for JDBC drivers. The JNDI NIS provider can be downloaded from here (download JNDI 1.2.1 & more).