On Nov 8, 2006, at 1:00 AM, Ken LAI wrote: > But the code is still messy for public use. It sounds good to > consolidate various efforts to make a better mod_auth_cas module. And > I can contribute our code for review. Anyone would like to head it?
Sounds like the separate efforts should be consolidated, probably under JASIG. Too bad they don't use Subversion (hint hint). I hadn't head about VTech's XML additions, and I wrote my own simple XML response parsing to handle CAS 2 responses (I love parsing strings in C, really). APR's XML library makes the most sense though, and I'd love to see that be the implementation used for that part. Did you add Proxy support? I didn't include that in mine. I used the APR shared memory API for the ticket cache as well. My cookie code gives you the compile time option of using shared memory or storing the netID in the cookie (encrypted and secured). This allows backwards compatibility for apache 1.3 and non-shared memory systems. Steve _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
