Hello,

I am wondering if anyone has encountered a similar issue and could provide some 
direction.

We currently have two situations on how we handle password expiration.

In the first one when a user logs in and their password is close to expiring we 
give them a warning and an option to a link to a password change web 
application. In the redirect link, we pass the original service that the user 
was trying to access, and once the user has changed their password, we redirect 
them back to the service.

to "get" the service, we grab the service ticket which the user was given upon 
authentication and use it to get the service from the web flow.

In the second case the user logs in, and their password has expired, so we 
redirect them to the password change web application, and once they have 
changed their password, redirect them to default service.

because there is no authentication, we do not have access to the stored service.

the questions we have are:

the service url seems to be stored in an abstract service object, and 
protected, so that it is only available to classes that extend that abstract 
class, but not to instantiations of the extended class itself. Is there a way 
to get the service regardless of whether the user authenticated or not?

is there a unified approach or do we have to have separate approaches for each 
case?

thanks for help and direction,

Gabe


-- 
You are currently subscribed to cas-dev@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to