[cas-user] Service requires basic authentication by single sign out

[xie]

We have been trying to configure a service on our CAS server, and it works fine 
except the single sign out invocation to this service. It requires namely basic 
authentication.  A possible approach could be replacing the HttpClient class, 
but I am not sure whether it is a good idea. How would you guys tackle this 
problem? Any tips/hints will be really appreciated.  

Best regards,
Xie
-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

RE: [cas-user] Service requires basic authentication by single sign out

[Ohsie, David]

Your problem description is not clear.  What is requiring basic authentication?

> -Original Message-
> From: xie [mailto:xiefei...@hotmail.com]
> Sent: Wednesday, September 18, 2013 5:01 AM
> To: cas-user@lists.jasig.org
> Subject: [cas-user] Service requires basic authentication by single sign out
> 
> We have been trying to configure a service on our CAS server, and it works
> fine except the single sign out invocation to this service. It requires namely
> basic authentication.  A possible approach could be replacing the HttpClient
> class, but I am not sure whether it is a good idea. How would you guys tackle
> this problem? Any tips/hints will be really appreciated.
> 
> Best regards,
> Xie
> --
> You are currently subscribed to cas-user@lists.jasig.org as:
> david.oh...@emc.com To unsubscribe, change settings or access archives,
> see http://www.ja-sig.org/wiki/display/JSG/cas-user


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

RE:[cas-user] Service requires basic authentication by single sign out

[xie]

CAS server issues single sign out callbacks request to a CAS client via POST. 
But the client demands this callback should be sent with basic authentication, 
namely an additional Header in this callback request:

Authorization: Basic 

Best regards,
Xie
-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] Service requires basic authentication by single sign out

[Jérôme LELEU]

Hi,

It means that your application is protected by basic auth, isn't it ? Thus
protected by CAS and a basic auth at the same time...
In any case, the component responsible for calling applications for logout
is the HttpClient class [1]. In CAS 4.0, HttpClient is no more a class, but
an interface implemented by default with SimpleHttpClient [2]. The method
called for logout is : sendMessageToEndPoint [3].
Best regards,
Jérôme

[1] :
https://github.com/Jasig/cas/blob/3.5.x/cas-server-core/src/main/java/org/jasig/cas/util/HttpClient.java
[2] :
https://github.com/Jasig/cas/blob/master/cas-server-core/src/main/java/org/jasig/cas/util/SimpleHttpClient.java
[3] :
https://github.com/Jasig/cas/blob/3.5.x/cas-server-core/src/main/java/org/jasig/cas/authentication/principal/AbstractWebApplicationService.java#L164



2013/9/19 xie 

> CAS server issues single sign out callbacks request to a CAS client via
> POST. But the client demands this callback should be sent with basic
> authentication, namely an additional Header in this callback request:
>
> Authorization: Basic 
>
> Best regards,
> Xie
> --
> You are currently subscribed to cas-user@lists.jasig.org as:
> lel...@gmail.com
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user