Re: [cas-user] Kill all CAS sessions

2009-04-13 Thread Scott Battaglia
We don't allow you to issue a kill command to the CAS server at this
moment.  Depending on your backing storage, you may be able to implement
something specific to your backend.

-Scott


On Mon, Apr 13, 2009 at 11:55 AM, Diego Benedicto  wrote:

>
> Hi all,
>
> Is there a way to kill all CAS sessions ?
> I want from an external web application to choose "CLOSE CAS" and update a
> column in a table and kill all living CAS sessions (all the TGT I think)
>
> Thanks in advance,
> Diego
> --
> View this message in context:
> http://www.nabble.com/Kill-all-CAS--sessions-tp23024291p23024291.html
> Sent from the CAS Users mailing list archive at Nabble.com.
>
>
> --
> You are currently subscribed to cas-user@lists.jasig.org as:
> scott.battag...@gmail.com
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

[cas-user] Kill all CAS sessions

2009-04-13 Thread Diego Benedicto

Hi all,

Is there a way to kill all CAS sessions ? 
I want from an external web application to choose "CLOSE CAS" and update a
column in a table and kill all living CAS sessions (all the TGT I think)

Thanks in advance,
Diego
-- 
View this message in context: 
http://www.nabble.com/Kill-all-CAS--sessions-tp23024291p23024291.html
Sent from the CAS Users mailing list archive at Nabble.com.


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


RE: [cas-user] Logout from CAS an user

2009-04-13 Thread Pieslak, Brian
This is also a feature I am looking for on my product's roadmap, so whatever 
solution is identified, could someone please socialize the 
design/implementation on the CAS wiki?

Thanks,
-Brian


From: Diego Benedicto [diego.benedi...@gmail.com]
Sent: Monday, April 13, 2009 11:44 AM
To: cas-user@lists.jasig.org
Subject: [cas-user] Logout from CAS an user

Hi all,

I need to logout from CAS a user from an external web application...

For example: logged as an admin in a web application that selects to block a
user ( a column in a table) and in this moment the web application send a
request to CAS that logout this user (I would secure the request with a
Proxy Ticket)

Thanks in advance,
Diego
--
View this message in context: 
http://www.nabble.com/Logout-from-CAS-an-user-tp23024111p23024111.html
Sent from the CAS Users mailing list archive at Nabble.com.


--
You are currently subscribed to cas-user@lists.jasig.org as: bpies...@metier.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


[cas-user] Logout from CAS an user

2009-04-13 Thread Diego Benedicto

Hi all, 

I need to logout from CAS a user from an external web application...

For example: logged as an admin in a web application that selects to block a
user ( a column in a table) and in this moment the web application send a
request to CAS that logout this user (I would secure the request with a
Proxy Ticket)

Thanks in advance,
Diego
-- 
View this message in context: 
http://www.nabble.com/Logout-from-CAS-an-user-tp23024111p23024111.html
Sent from the CAS Users mailing list archive at Nabble.com.


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


RE: [cas-user] tracking failed login attempts

2009-04-13 Thread Craig Squires
I think a custom authentication handler is probably the right way to do
this, given the plugin architecture. For example, if you are using
openLDAP as your authentication back end and you have the password
policy overlay in place, the back end database takes care of failed
login tracking etc.

Craig

On Sat, 2009-04-11 at 08:41 -0400, Pieslak, Brian wrote:
> I came up with a simpler solution that seems to be working for me, but
> it seems highly customized to my needs.
>  
> Rather than messing with login-webflow.xml, and I subclassed
> org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler to
> create my own JDBC authenticationHandler to handle my custom logic.
> This allows me to add my additional queries to my jdbc
> authenticationHandler bean in deployerConfigContext.xml.
>  
> Its not elegant, but it does seem to be working just fine.
> -Brian
> 
> __
> From: Scott Battaglia [scott.battag...@gmail.com]
> Sent: Friday, April 10, 2009 11:50 PM
> To: cas-user@lists.jasig.org
> Subject: Re: [cas-user] tracking failed login attempts
> 
> 
> Brian,
> 
> What is your purpose for tracking failed login attempts?  Auditing?
> 
> -Scott
> 
> -Scott Battaglia
> PGP Public Key Id: 0x383733AA
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
> 
> 
> On Fri, Apr 10, 2009 at 8:11 PM, Pieslak, Brian 
> wrote:
> I tried to get caught up on the account lockout discussions
> from the archives, but I never really saw a clear answer to
> what I'm trying to accomplish.
>  
> I need the ability to track failed login attempts.
> I see in the login-webflow.xml where the
> "authenticationViaFormAction" bean is used for the
> authentication flow.
>  
> I'm thinking its possible to modify the "submit" action state
> to look like the following:
>  
>  
>method="submit" />
>   
>   
>   
>  
> 
>  
>   
>   
>  
> 
>   Where I'm inserting my own "trackFailedLogin" action-state,
> taking my action (which is successful) and then returning to
> the "viewLoginForm".   I also still need the loginForm to
> display the "Invalid Username Or Password" message.   
>  
> So 2 questions:
> 1.) Does this seem like a good approach, or should I be doing
> this another way?
> 2.)Will my comment about the loginForm knowing its in an error
> state work, or does the transition of my new action bean need
> to return "error" in order to keep the webflow in an error
> state?
>  
> Thanks for the help,
> -Brian
>   
> 
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: 
> scott.battag...@gmail.com
> 
> 
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
> 
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: 
> bpies...@metier.com
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
> 
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: csqui...@mun.ca
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user