Hi,

I did some work a while ago for a client which involved the use of CAS and TAI. If a remember correctly, that code had a lot of code to support legacy versions (of Websphere) and it is simpler to write a version against the latest TAI version (com.ibm.wsspi.security.tai.TrustAssociationInterceptor). There are only 3 methods and you can find documentation on IBM's site:

public int initialize(Properties props); // startup/configuration code.

public boolean isTargetInterceptor(HttpServletRequest request); // return true if the request should be CAS authenticated

public TAIResult negotiateValidateandEstablishTrust(HttpServletRequest request, HttpServletResponse response); // does most of the work

The CAS code required is also quite straightforward. The negotiateValidateandEstablishTrust method either redirects to the CAS server if there is no ticket present in the request, or validates the ticket using a Cas20ServiceTicketValidator. If successful it creates a Subject instance and returns that by calling TAIResult.create().

Most of the problems we had were related to Websphere configuration rather than the TAI code itself.

Luke.



On 21/7/09 15:35, Arnaud Lesueur wrote:
Hi,

I guess the attachment has been lost during a migration process of the
wiki (?).

You will find an old version version of the source code. This might not
be the one which was attached ... it's currently the best I can do for
you. Mag might have more stuff.

I hope it helps,

Arnaud


On Tue, Jul 21, 2009 at 13:08, Scott Battaglia
<[email protected] <mailto:[email protected]>> wrote:

    I believe that code was written to work with the Yale CAS Client not
    the Jasig CAS Client.  I'm not sure if I have the source either!

    Cheers,
    Scott


    On Tue, Jul 21, 2009 at 5:43 AM, Heinz Drews <[email protected]
    <mailto:[email protected]>> wrote:

        Hello,

        I would like to use the WebSphere integration as described in
        http://www.ja-sig.org/wiki/pages/viewpage.action?pageId=19314.

        The wiki provides a link to a jar containing the classes but I
        can't locate the sources.

        CASC-21 says that the donated code was not integrated, if
        possible I would work on this.

        Best regards,
        Heinz

        --
        You are currently subscribed [email protected]  
<mailto:[email protected]>  as:[email protected]  
<mailto:[email protected]>

        To unsubscribe, change settings or access archives, see
        http://www.ja-sig.org/wiki/display/JSG/cas-dev


    --
    You are currently subscribed [email protected]  
<mailto:[email protected]>  as:[email protected]  
<mailto:[email protected]>

    To unsubscribe, change settings or access archives, 
seehttp://www.ja-sig.org/wiki/display/JSG/cas-dev

--
Arnaud Lesueur

LinkedIn: http://www.linkedin.com/in/lesueur

--
You are currently subscribed [email protected]  
<mailto:[email protected]>  as: [email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev


--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to