[cas-user] Re: evaluationOrder bug?

[Andy Ng]

Hi Baron,

Looking at the source code, you can see that *evaluationOrder *is only an 
integer
https://github.com/apereo/cas/blob/v5.0.10/core/cas-server-core-services/src/main/java/org/apereo/cas/services/AbstractRegisteredService.java#L77

And for Java, integer have a limit to it (A quick google search show me 
"2,147,483,647", should be similar)

So I think your assumption of int overflowing is correct. If you add 0 to 
your service, you can only have ~10 services.

I think you need to either:
- not adding 0 to sort out the ordering
- Change the evaluationOrder to use BigInteger instead, which requires some 
coding to do, but is not impossible, BigInteger pretty much don't have 
maximum, so add as many 0 as you like (but the performance might be 
downgraded of course)

Cheers!
- Andy

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/2f13b2f1-fda1-463c-be57-afd6a5f4a916%40apereo.org.

[cas-user] Node JS CAS client

[shah ilyas]

is there any CAS client for Node js, if yes then please provide a link for 
it and also share the details about how to use it?

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1fc833f1-8504-4c65-91ad-ec4641d8ff5c%40apereo.org.

[cas-user] CAS 5.3.x and Shibboleth entityId

[Tepe, Dirk]

We have a Shibboleth 3.3.x server which will authenticates via our CAS
5.3.x server. I am interested in using the service provider's entity ID to
apply configuration within CAS rather than applying configuration to the
Shibboleth service as a whole. This appears to be possible based on:

https://apereo.github.io/cas/5.3.x/integration/Shibboleth.html#relying-party-entityid

and

https://apereo.github.io/cas/5.3.x/installation/Configuring-Multifactor-Authentication-Triggers.html#entity-id-request-parameter

I have built our war with the required cas-server-support-shibboleth
dependency and am testing using a login request with both service and
entityId parameters. However, CAS still uses the service configuration
which matches our Shibboleth service rather than the relying party given by
the entity ID.

I made sure that the service I created for the relying party's entityId has
a lower evaluationOrder value than the definition which matches the
Shibboleth service, so I would expect the entityId value to take
precedence. When I use the entityId value as the service, CAS matches the
correct relying party service configuration, which indicates that the match
should happen and entityId isn't being considered.

The documentation does not describe any additional configuration or changes
in the service configurations that are required to use entityId when it's
provided in the request. Has anyone been able to make this work or have any
suggestions what I'm missing?

-dirk

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAJ%3D0EZzWiiS1dhpQLNYTQ2oL-JggGd3AkjSoMBmHVJvkcsGWrg%40mail.gmail.com.

Re: [cas-user] CAS 5.3.x and Shibboleth entityId

[Travis Schmidt]

We do the same as well, looks like docs might need to be updated.  You
should only need to add support-shibboleth to your build, but there is a
property that needs to be set that is your shibboleth idp url.  You should
see something in the logs on start up about it not being set.

On Fri, Oct 26, 2018, 6:28 AM Tepe, Dirk  wrote:

> We have a Shibboleth 3.3.x server which will authenticates via our CAS
> 5.3.x server. I am interested in using the service provider's entity ID to
> apply configuration within CAS rather than applying configuration to the
> Shibboleth service as a whole. This appears to be possible based on:
>
>
> https://apereo.github.io/cas/5.3.x/integration/Shibboleth.html#relying-party-entityid
>
> and
>
>
> https://apereo.github.io/cas/5.3.x/installation/Configuring-Multifactor-Authentication-Triggers.html#entity-id-request-parameter
>
> I have built our war with the required cas-server-support-shibboleth
> dependency and am testing using a login request with both service and
> entityId parameters. However, CAS still uses the service configuration
> which matches our Shibboleth service rather than the relying party given by
> the entity ID.
>
> I made sure that the service I created for the relying party's entityId
> has a lower evaluationOrder value than the definition which matches the
> Shibboleth service, so I would expect the entityId value to take
> precedence. When I use the entityId value as the service, CAS matches the
> correct relying party service configuration, which indicates that the match
> should happen and entityId isn't being considered.
>
> The documentation does not describe any additional configuration or
> changes in the service configurations that are required to use entityId
> when it's provided in the request. Has anyone been able to make this work
> or have any suggestions what I'm missing?
>
> -dirk
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAJ%3D0EZzWiiS1dhpQLNYTQ2oL-JggGd3AkjSoMBmHVJvkcsGWrg%40mail.gmail.com
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAC_RtEbUbowaWqvjybbH%2Bd%3DiDRMRYK3UOTr19Ff0yAFyDDERNQ%40mail.gmail.com.

Re: [cas-user] CAS 5.3.x and Shibboleth entityId

[Travis Schmidt]

Now that I am in front of my computer, the property is this:

cas.authn.shibIdp.serverUrl=

On Fri, Oct 26, 2018 at 7:00 AM Travis Schmidt 
wrote:

> We do the same as well, looks like docs might need to be updated.  You
> should only need to add support-shibboleth to your build, but there is a
> property that needs to be set that is your shibboleth idp url.  You should
> see something in the logs on start up about it not being set.
>
> On Fri, Oct 26, 2018, 6:28 AM Tepe, Dirk  wrote:
>
>> We have a Shibboleth 3.3.x server which will authenticates via our CAS
>> 5.3.x server. I am interested in using the service provider's entity ID to
>> apply configuration within CAS rather than applying configuration to the
>> Shibboleth service as a whole. This appears to be possible based on:
>>
>>
>> https://apereo.github.io/cas/5.3.x/integration/Shibboleth.html#relying-party-entityid
>>
>> and
>>
>>
>> https://apereo.github.io/cas/5.3.x/installation/Configuring-Multifactor-Authentication-Triggers.html#entity-id-request-parameter
>>
>> I have built our war with the required cas-server-support-shibboleth
>> dependency and am testing using a login request with both service and
>> entityId parameters. However, CAS still uses the service configuration
>> which matches our Shibboleth service rather than the relying party given by
>> the entity ID.
>>
>> I made sure that the service I created for the relying party's entityId
>> has a lower evaluationOrder value than the definition which matches the
>> Shibboleth service, so I would expect the entityId value to take
>> precedence. When I use the entityId value as the service, CAS matches the
>> correct relying party service configuration, which indicates that the match
>> should happen and entityId isn't being considered.
>>
>> The documentation does not describe any additional configuration or
>> changes in the service configurations that are required to use entityId
>> when it's provided in the request. Has anyone been able to make this work
>> or have any suggestions what I'm missing?
>>
>> -dirk
>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+unsubscr...@apereo.org.
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAJ%3D0EZzWiiS1dhpQLNYTQ2oL-JggGd3AkjSoMBmHVJvkcsGWrg%40mail.gmail.com
>> 
>> .
>>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAC_RtEb7XqvqLdYtVaSatKqhw29StzbYxjENnk2nBxLa%2BgWVPg%40mail.gmail.com.

Re: [cas-user] CAS 5.3.x and Shibboleth entityId

[Tepe, Dirk]

Thanks very much for the follow up. I just found that myself. Here are some
more details.

Related log entries:

2018-10-26 14:37:24,325 DEBUG [org.apereo.cas.config.CasCoreConfiguration]
- 
2018-10-26 14:37:24,325 WARN
[org.apereo.cas.config.ExternalShibbolethIdPAuthenticationServiceSelectionStrategyConfiguration]
- 

Related property documentation (since the missing property is not mentioned
in the log entry):

https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html#shibboleth-integrations

After adding this, I am correctly matching on the provided entityId.

Many thanks for the help.

-dirk

On Fri, Oct 26, 2018 at 10:58 AM Travis Schmidt 
wrote:

> Now that I am in front of my computer, the property is this:
>
> cas.authn.shibIdp.serverUrl=
>
> On Fri, Oct 26, 2018 at 7:00 AM Travis Schmidt 
> wrote:
>
>> We do the same as well, looks like docs might need to be updated.  You
>> should only need to add support-shibboleth to your build, but there is a
>> property that needs to be set that is your shibboleth idp url.  You should
>> see something in the logs on start up about it not being set.
>>
>> On Fri, Oct 26, 2018, 6:28 AM Tepe, Dirk  wrote:
>>
>>> We have a Shibboleth 3.3.x server which will authenticates via our CAS
>>> 5.3.x server. I am interested in using the service provider's entity ID to
>>> apply configuration within CAS rather than applying configuration to the
>>> Shibboleth service as a whole. This appears to be possible based on:
>>>
>>>
>>> https://apereo.github.io/cas/5.3.x/integration/Shibboleth.html#relying-party-entityid
>>>
>>> and
>>>
>>>
>>> https://apereo.github.io/cas/5.3.x/installation/Configuring-Multifactor-Authentication-Triggers.html#entity-id-request-parameter
>>>
>>> I have built our war with the required cas-server-support-shibboleth
>>> dependency and am testing using a login request with both service and
>>> entityId parameters. However, CAS still uses the service configuration
>>> which matches our Shibboleth service rather than the relying party given by
>>> the entity ID.
>>>
>>> I made sure that the service I created for the relying party's entityId
>>> has a lower evaluationOrder value than the definition which matches the
>>> Shibboleth service, so I would expect the entityId value to take
>>> precedence. When I use the entityId value as the service, CAS matches the
>>> correct relying party service configuration, which indicates that the match
>>> should happen and entityId isn't being considered.
>>>
>>> The documentation does not describe any additional configuration or
>>> changes in the service configurations that are required to use entityId
>>> when it's provided in the request. Has anyone been able to make this work
>>> or have any suggestions what I'm missing?
>>>
>>> -dirk
>>>
>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to cas-user+unsubscr...@apereo.org.
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAJ%3D0EZzWiiS1dhpQLNYTQ2oL-JggGd3AkjSoMBmHVJvkcsGWrg%40mail.gmail.com
>>> 
>>> .
>>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAC_RtEb7XqvqLdYtVaSatKqhw29StzbYxjENnk2nBxLa%2BgWVPg%40mail.gmail.com
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAJ%3D0EZw6uk17tR9oCpmv56VFbawsKM6mc31qK2QHkH5xjubC0g%40mail.gmail.com.