The CAS server could be made accessible via a reverse proxy server in the DMZ.

On 2010-04-06 09:09 , Adam Rybicki wrote:
Yoann,

If your CAS server is not accessible from the Internet, putting its
login screen in an IFRAME on the portal screen will not work.  The
content rendered inside of an IFRAME must be directly accessible by the
browser.

The bottom line is that if you want CAS to be the authentication server
then the server must be accessible.

Adam

Yoann Durand wrote:
Scott,

Yes, thanks, i understand how to use iframe, we 're going to see the
wiki.

But you d'on't answer my question, so, i will describe our problem
with a different way :
We have :
- Internet users,
- a portal in a DMZ (behind firewalls),
- CAS is in the Intranet.
Portal and CAS can interact only in HTTTPS.
Users can't login directly on CAS because CAS isn't visible from Internet.

=>  Is there another solution else that put CAS in DMZ ?

Yoann

On Tue, Apr 6, 2010 at 15:26, Scott Battaglia
<scott.battag...@gmail.com<mailto:scott.battag...@gmail.com>>  wrote:

     If you want to use CAS in an IFRAME, that's different then having
     the credentials sent to the application.  If you want to use CAS
     in an IFRAME, you need to modify the last "view" so that it goes
     to a page that uses JavaScript to do the redirect rather than HTTP
     redirects.  You'll also need to use a simplified login page that
     would fit in an IFRAME.

     There may be some instructions in the wiki.



--
You are currently subscribed to 
cas-dev@lists.jasig.org<mailto:cas-dev@lists.jasig.org>  as: arybi...@unicon.net
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev


--
You are currently subscribed to cas-dev@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to