Hi Luke, I had done some work with the old style TAI interface and experienced the problems myself. WebSphere is always a little bit special.
After looking into the former version provided by Arnaud I will start to implement using the new interface. Regards, Heinz On Tue, Jul 21, 2009 at 17:11, Luke Taylor <[email protected]>wrote: > Hi, > > I did some work a while ago for a client which involved the use of CAS and > TAI. If a remember correctly, that code had a lot of code to support legacy > versions (of Websphere) and it is simpler to write a version against the > latest TAI version (com.ibm.wsspi.security.tai.TrustAssociationInterceptor). > There are only 3 methods and you can find documentation on IBM's site: > > public int initialize(Properties props); // startup/configuration code. > > public boolean isTargetInterceptor(HttpServletRequest request); // return > true if the request should be CAS authenticated > > public TAIResult negotiateValidateandEstablishTrust(HttpServletRequest > request, HttpServletResponse response); // does most of the work > > The CAS code required is also quite straightforward. The > negotiateValidateandEstablishTrust method either redirects to the CAS server > if there is no ticket present in the request, or validates the ticket using > a Cas20ServiceTicketValidator. If successful it creates a Subject instance > and returns that by calling TAIResult.create(). > > Most of the problems we had were related to Websphere configuration rather > than the TAI code itself. > > Luke. > > > > On 21/7/09 15:35, Arnaud Lesueur wrote: > >> Hi, >> >> I guess the attachment has been lost during a migration process of the >> wiki (?). >> >> You will find an old version version of the source code. This might not >> be the one which was attached ... it's currently the best I can do for >> you. Mag might have more stuff. >> >> I hope it helps, >> >> Arnaud >> >> >> On Tue, Jul 21, 2009 at 13:08, Scott Battaglia >> <[email protected] <mailto:[email protected]>> wrote: >> >> I believe that code was written to work with the Yale CAS Client not >> the Jasig CAS Client. I'm not sure if I have the source either! >> >> Cheers, >> Scott >> >> >> On Tue, Jul 21, 2009 at 5:43 AM, Heinz Drews <[email protected] >> <mailto:[email protected]>> wrote: >> >> Hello, >> >> I would like to use the WebSphere integration as described in >> http://www.ja-sig.org/wiki/pages/viewpage.action?pageId=19314. >> >> The wiki provides a link to a jar containing the classes but I >> can't locate the sources. >> >> CASC-21 says that the donated code was not integrated, if >> possible I would work on this. >> >> Best regards, >> Heinz >> >> -- >> You are currently subscribed [email protected] <mailto: >> [email protected]> >> as:[email protected]<as%[email protected]> <mailto: >> [email protected]> >> >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-dev >> >> >> -- >> You are currently subscribed [email protected] <mailto: >> [email protected]> >> as:[email protected]<as%[email protected]> <mailto: >> [email protected]> >> >> To unsubscribe, change settings or access archives, seehttp:// >> www.ja-sig.org/wiki/display/JSG/cas-dev >> >> -- >> Arnaud Lesueur >> >> LinkedIn: http://www.linkedin.com/in/lesueur >> >> -- >> You are currently subscribed [email protected] <mailto: >> [email protected]> as: [email protected] >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-dev >> >> > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-dev > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
