[cas-user] throttling attempts in CAS by IP, what if a large number users behind a proxy?

2016-11-10 Thread Yan Zhou 
Hi,

CAS enables login throttling by IP, but, what if a relatively big number of 
users (in an organization) all sit behind one proxy?

Can I configure throttling like this:  no more than 5 login failures within 
3 seconds, and decrement the count every second.

Thx!
Yan




  

Thx!
Yan

-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d4e3c159-6454-4c7c-9a92-a4180bb99540%40apereo.org.

RE: [cas-user] Get HttpSession on authentication Handler

2016-11-10 Thread Misagh Moayyed 
Unless you mean something else, AuthN date is already sent back to the app 
once after validation is successful.



--Misagh



From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Manfredo 
Hopp
Sent: Wednesday, November 9, 2016 2:13 PM
To: Cas 
Subject: Re: [cas-user] Get HttpSession on authentication Handler



Thanks Misagh I could imagine your answer, so let me put my use case other 
way round.

After Cas user authentication I want to sent lastLogin Date to the 
redirected service

How can I achieve that?

I was wondering if it was possible through a queryparameter or session 
attribute.

Thanks



2016-11-09 17:53 GMT-03:00 Misagh Moayyed  >:

This is really a question for Spring.



Short of it is, that it cannot. It’s a bad idea. But you may look into 
RequestContextHolder.



--Misagh



From: cas-user@apereo.org  
[mailto:cas-user@apereo.org  ] On Behalf Of 
Manfredo Hopp
Sent: Wednesday, November 9, 2016 1:15 PM
To: Cas  >
Subject: [cas-user] Get HttpSession on authentication Handler



Hi
, we have cas 4.0 installed with a modified 
QueryDatabseAuthenticationHandler and want to access
  http Session.

How cas this be done?

Thanks Manfredo

-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: 
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups 
"CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an 
email to cas-user+unsubscr...@apereo.org 
 .
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAB623R_r3AZc0xC%3DGC_OzfxmUghLhR10m3Yjznx%2BvqfrS2W_Kg%40mail.gmail.com
 

 
.

-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: 
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups 
"CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an 
email to cas-user+unsubscr...@apereo.org 
 .
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/01c901d23acb%245ae317d0%2410a94770%24%40unicon.net
 

 
.



-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: 
https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups 
"CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an 
email to cas-user+unsubscr...@apereo.org 
 .
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAB623R8QB%3DFPvshNzW1w0ZoLddfnZg9RWBHTNghJsw8HgjaUZw%40mail.gmail.com
 

 
.

-- 
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/011a01d23b6a%245a000a90%240e001fb0%24%40unicon.net.