Yes, Cas works properly.
=========================== Thank You; Chris Cheltenham Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Kevin Liu Sent: Tuesday, February 20, 2018 11:24 AM To: CAS Community <cas-user@apereo.org> Subject: Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS I'm not familiar with cas 4 but do you have a cas.properties file? On Tuesday, February 20, 2018 at 10:16:01 AM UTC-6, Chris Cheltenham wrote: Hello Everyone, I am getting access denied on the /cas-management It appears CAS 5 is a bit different from 4 Does anyone know why I am getting access denied to the management stuff? =========================== Thank You; Chris Cheltenham Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: cas-...@apereo.org <javascript:> [mailto:cas-...@apereo.org <javascript:> ] On Behalf Of David Curry Sent: Tuesday, February 20, 2018 8:48 AM To: cas-...@apereo.org <javascript:> Subject: Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS Assuming "the services directory" means you're trying to use an external directory full of JSON service definitions, do you have <dependency> <groupId>org.apereo.cas</groupId> <artifactId>cas-server-support-json-service-registry</artifactId> <version>${cas.version}</version> </dependency> in your pom.xml and cas.serviceRegistry.json.location: file:/etc/cas/services (whatever directory path you want) in cas.properties? --Dave -- DAVID A. CURRY, CISSP DIRECTOR OF INFORMATION SECURITY INFORMATION TECHNOLOGY 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 +1 212 229-5300 x4728 • <javascript:> david.cu...@newschool.edu <https://lh4.googleusercontent.com/proxy/kBxyNqPE_dwGnQ5_31vxODZ361V2PjQdxLgStd_Hjq6qhsUZ5Ls9wt8E7q_K2I1IH9Gl9beQOC7lRFhDZ6YS4RBwSzHk1J04dgKAuT9_k0gSpkU-gvRxyA=w5000-h5000> On Tue, Feb 20, 2018 at 8:41 AM, Kevin Liu <annih...@gmail.com <javascript:> > wrote: I've added and it looks like CAS is just not picking up on any of the services directory. It doesn't show as registering the service. On Monday, February 19, 2018 at 12:55:18 PM UTC-6, rbon wrote: Put these into the log config to verify that the services you want are correct: <!-- INFO Loaded [#] service(s) from [???ServiceRegistryDAO] DEBUG Adding registered service [service URL] --> <AsyncLogger name="org.apereo.cas.services.AbstractServicesManager" level="debug" /> <!-- DEBUG Publishing event [service details] --> <AsyncLogger name="org.apereo.cas.services.AbstractServiceRegistryDao" level="debug"/> <!-- INFO Grented ticket [...] for service [...] for user [...] DEBUG Resolved service [limited details about service] Located registered service definition [service details] --> <AsyncLogger name="org.apereo.cas.DefaultCentralAuthenticationService" level="debug" /> Ray On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote: I'm trying to access https://xxx.xxx.xxx.xxx:xxxx/cas1/status/dashboard On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote: Kevin, What is the URL that you are trying to access? Ray On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote: This is my current entry in service registry { "@class" : "org.apereo.cas.services.RegexRegisteredService", "serviceId" : "^https://xxx.xxx.xxx.xxx:xxxx/cas1/status/dashboard(\\z|/.* <file://z|/.*> )", "name" : "CAS Admin Dashboard", "id" : 1509646291, "description" : "CAS dashboard and administrative endpoints", "evaluationOrder" : 5000 } On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote: Do you have an entry in the service registry that matches the service? { "@class" : "org.apereo.cas.services.RegexRegisteredService", "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*) <https://xxx.xxx.xxx.xxx/cas1/status/dashboard(%5C%5Cz%7C/.*)> ", "name" : "CAS Admin Dashboard", "id" : 123456789, "description" : "CAS dashboard and administrative endpoints", "evaluationOrder" : 12345 } Or something like that. --Dave -- DAVID A. CURRY, CISSP DIRECTOR OF INFORMATION SECURITY INFORMATION TECHNOLOGY 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 <https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003&entry=gmail&source=g> +1 212 229-5300 x4728 • david...@newschool.edu <javascript:> <https://lh4.googleusercontent.com/proxy/kBxyNqPE_dwGnQ5_31vxODZ361V2PjQdxLgStd_Hjq6qhsUZ5Ls9wt8E7q_K2I1IH9Gl9beQOC7lRFhDZ6YS4RBwSzHk1J04dgKAuT9_k0gSpkU-gvRxyA=w5000-h5000> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu <annih...@gmail.com <mailto:annih...@gmail.com> > wrote: Hello, I'm trying to enable access to the Dashboard with the default casuser:Mellon account but I'm running into an Application Not Authorized to Use CAS. This is my cas.properties file. I can't figure out what I'm missing? Looking online, it seems I need a registry of some sort but I can't find additional documentation on it. cas.server.name <http://cas.server.name> : https://xxx.xxx.xxx.xxx cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1 logging.config: file:/etc/cas1/config/log4j2.xml endpoints.enabled=true endpoints.sensitive=false cas.adminPagesSecurity.ip=192.168.x.xx cas.monitor.endpoints.enable=true cas.monitor.endpoints.sensitive=false cas.adminPagesSecurity.actuatorEndpointsEnabled=true cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN Am I missing anything? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org <mailto:cas-user+u...@apereo.org> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org?utm_medium=email&utm_source=footer> . -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | rb...@uvic.ca <mailto:rb...@uvic.ca> -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | rb...@uvic.ca <mailto:rb...@uvic.ca> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org <javascript:> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ff038326-4415-4650-92f9-569aca4942f3%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/ff038326-4415-4650-92f9-569aca4942f3%40apereo.org?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org <javascript:> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAOqbxWEDqcdDGyC-S3YPqD0G%3Dd8K4DF1-t4d7LMYh5K%2BA%40mail.gmail.com <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAOqbxWEDqcdDGyC-S3YPqD0G%3Dd8K4DF1-t4d7LMYh5K%2BA%40mail.gmail.com?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org <mailto:cas-user+unsubscr...@apereo.org> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/260e24e2-2121-4ac5-92f2-f3d26d2130a2%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/260e24e2-2121-4ac5-92f2-f3d26d2130a2%40apereo.org?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00b101d3aa68%2439da39c0%24ad8ead40%24%40philasd.org.
