<property name="credentialsToPrincipalResolvers">
  <list>
    <bean class="org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver" >
        <property name="attributeRepository" ref="attributeRepository" />
    </bean>

    <bean class="org.jasig.cas.authentication.principal.HttpBasedServiceCredentialsToPrincipalResolver" />

    <bean class="com.orga.cas.X509CertificateLDAPEntryMapperResolver"
                    p:contextSource-ref="contextSource"
                    p:base="*****"
                    >
                      <property name="attributeRepository" ref="attributeRepository"/>
                (...)
    </bean>

    <bean class="org.jasig.cas.support.spnego.authentication.principal.SpnegoCredentialsToPrincipalResolver">
        <property name="attributeRepository" ref="attributeRepository"/>
    </bean>
  </list>
</property>

(...)

 <bean id="attributeRepository" class="org.jasig.services.persondir.support.ldap.LdapPersonAttributeDao">
    <property name="contextSource" ref="contextSource" />
    <property name="baseDN" value="**********" />
    <property name="requireAllQueryAttributes" value="true" />

    <property name="queryAttributeMapping">
        <map>
            <entry key="username" value="cn" />
        </map>
    </property>

    <property name="resultAttributeMapping">
        <map>
            <entry key="cn" value="cn" />
            <entry key="sn" value="sn" />
            <entry key="employeeNumber" value="employeeNumber" />
            <entry key="givenName" value="givenName" />
            <entry key="mail" value="mail" />
            <entry key="entryDN" value="entryDN" />
        </map>
    </property>
</bean>