Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-09-02 Thread William G. Thompson, Jr.
On Fri, Sep 2, 2011 at 3:28 AM, Philippe MARASSE wrote: > Thanks for the information Bill, I think the test cannot guess that it have > to use our proxy to reach www.mint.com ;-). > > I was just wondering if I could ignore the result of these tests and go > ahead, as Scott suggest, I can build wit

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-09-02 Thread Philippe MARASSE
Thanks for the information Bill, I think the test cannot guess that it have to use our proxy to reach www.mint.com ;-). I was just wondering if I could ignore the result of these tests and go ahead, as Scott suggest, I can build without testing. I'm upgrading my desktop to JDK7 and build :-)

Re:[cas-dev] LDAP Password Policy Enforcement evolution...

2011-09-01 Thread William G. Thompson, Jr.
LPPE Update 2011.09.01 I took a shot at merging the enhanced ldap exceptions and password expiration warning directly into cas-server-ldap-support on the feature branch: https://source.jasig.org/cas3/branches/cas-server-3.4.10-lppe/ I was able to directly merge the enhanced ldap exception handlin

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-09-01 Thread Scott Battaglia
The curse of needing to unit test your thing that check certs. You can always execute with skiptests. Cheers, Scott On Thu, Sep 1, 2011 at 3:52 PM, William G. Thompson, Jr. wrote: > Philippe, > > The build errors were unrelated to anything I was doing. The test was > failing with HttpBasedCr

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-09-01 Thread William G. Thompson, Jr.
Philippe, The build errors were unrelated to anything I was doing. The test was failing with HttpBasedCredentials using https://www.mint.com/, perhaps it was down? Anyway build is working now, but still needs some clean up. More later... Bill On Thu, Sep 1, 2011 at 10:45 AM, William G. Thomp

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-09-01 Thread William G. Thompson, Jr.
Philippe, Sorry, I think you may have caught the feature branch in a bad state. I got overly ambitious last night and then ran out of steam. I've merged a few more support classes and getting very close to something that could be reasonable for a 3.5 release. Give me a day to get svn back it sh

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-09-01 Thread Philippe MARASSE
Folks, [...] a) check out and build CAS-3.4.10-LPPE-SNAPSHOT and install in a local mvn repo (mvn clean package install) https://source.jasig.org/cas3/branches/cas-server-3.4.10-lppe/ It did not build on my computer (ubuntu 10.10) :-( : - SVN export : OK - mvn clean package => cyclic refere

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-31 Thread Philippe MARASSE
Great :-). I think I'll be able to build & test most cases tomorrow. Since I've not put my customized CAS 3.4.8 into production in our organization, I'll take some time to test your 3.4.10 update and almost all cases against our Active Directory (the most difficult case to reproduce is a nearly

Re:[cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-30 Thread William G. Thompson, Jr.
LPPE Update 2011.08.30 I've been polishing the LPPE code on the feature branch with the intent to make the integration touch points as small as possible. So far I've been able to remove the forked LdapCasImpl (thanks for the tip, Marvin) which also knocked out LdapCas interface and the forked app

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread William G. Thompson, Jr.
That time works for me. On Mon, Aug 29, 2011 at 11:03 AM, Marvin Addison wrote: > How about 1400-1500 EDT on #jasig-cas today? > > M > > -- > You are currently subscribed to cas-dev@lists.jasig.org as: wgt...@gmail.com > To unsubscribe, change settings or access archives, see > http://www.ja-sig

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Andrew Petro
Resolved the conflict. I can do 2-3pm Eastern. Andrew On 08/29/2011 11:23 AM, Marvin Addison wrote: I've a conflict, but if it works for and is valuable to others, don't let that stop it. I chose 2-3 arbitrarily. Are you available the hour before or after? For whatever it's worth: I sugg

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Marvin Addison
> I've a conflict, but if it works for and is valuable to others, don't let > that stop it. I chose 2-3 arbitrarily. Are you available the hour before or after? > For whatever it's worth: I suggest a higher-bandwidth communication > mechanism.  A Google Hangout, e.g., allowing video and voice di

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Andrew Petro
I've a conflict, but if it works for and is valuable to others, don't let that stop it. For whatever it's worth: I suggest a higher-bandwidth communication mechanism. A Google Hangout, e.g., allowing video and voice discussion. Andrew On 08/29/2011 11:03 AM, Marvin Addison wrote: How about

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Marvin Addison
How about 1400-1500 EDT on #jasig-cas today? M -- You are currently subscribed to cas-dev@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread William G. Thompson, Jr.
I would welcome that. I'm mostly focused on this task at the moment and my schedule is fairly flexible this week. I could probably do any proposed time slot. Bill On Mon, Aug 29, 2011 at 10:14 AM, Scott Battaglia wrote: > Bill, > Per our discussion on the #jasig-cas chat, we should probably s

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Scott Battaglia
The regular dev chat is on Friday. On Mon, Aug 29, 2011 at 10:31 AM, Jeff Chapin wrote: > What day of the week? > > Thanks, > Jeff > > On Mon, Aug 29, 2011 at 9:26 AM, Marvin Addison > wrote: > >> When would this chat be? > > > > We have a weekly developer chat on IRC channel #jasig-cas from 1

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Jeff Chapin
What day of the week? Thanks, Jeff On Mon, Aug 29, 2011 at 9:26 AM, Marvin Addison wrote: >> When would this chat be? > > We have a weekly developer chat on IRC channel #jasig-cas from 1400-1500 EDT. > > M > > -- > You are currently subscribed to cas-dev@lists.jasig.org as: > jeff.cha...@uni.ed

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Scott Battaglia
I was thinking earlier in order not to block Bill. But if Bill's not blocked... On Mon, Aug 29, 2011 at 10:26 AM, Marvin Addison wrote: > > When would this chat be? > > We have a weekly developer chat on IRC channel #jasig-cas from 1400-1500 > EDT. > > M > > -- > You are currently subscribed to

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Marvin Addison
> When would this chat be? We have a weekly developer chat on IRC channel #jasig-cas from 1400-1500 EDT. M -- You are currently subscribed to cas-dev@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Jeff Chapin
When would this chat be? On Mon, Aug 29, 2011 at 9:14 AM, Scott Battaglia wrote: > Bill, > Per our discussion on the #jasig-cas chat, we should probably sync up on how > this integrates with the proposed changes in the 4.x branch.  Should we do > scheduled chat time?  I think Marvin would be inte

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-29 Thread Scott Battaglia
Bill, Per our discussion on the #jasig-cas chat, we should probably sync up on how this integrates with the proposed changes in the 4.x branch. Should we do scheduled chat time? I think Marvin would be interested in this too. Cheers, Scott On Fri, Aug 26, 2011 at 5:12 PM, William G. Thompson,

Re:[cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-26 Thread William G. Thompson, Jr.
LPPE Update I've completed the merge of LPPE into the feature branch on https://source.jasig.org/cas3/branches/cas-server-3.4.10-lppe/ such that I can build and install CAS 3.4.10-LPPE-SNAPSHOT in my local mvn repo. This allows me to build a cas server with the feature via simple local maven over

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-25 Thread Scott Battaglia
There's been no agreement to include this in CAS3. Why are you putting the branch in there? On Thu, Aug 25, 2011 at 9:11 PM, William G. Thompson, Jr. wrote: > Folks, > > I've started a feature branch off of 3.4.10 to investigate > incorporating LPPE into the baseline here: > https://source.jasi

Re:[cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-25 Thread William G. Thompson, Jr.
Folks, I've started a feature branch off of 3.4.10 to investigate incorporating LPPE into the baseline here: https://source.jasig.org/cas3/branches/cas-server-3.4.10-lppe/ The lppe module (cas-server-support-ldap-ppolicy) is mostly additions, and it looks like they can be easily bypassed via a co

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-25 Thread Marvin Addison
> Has anyone gotten any version of the code to work with OpenLDAP? No AFAIK. > OpenLDAP doesn't send the extended error messages (account > locked, password expired, etc) like SunDS and Active Directory do, so > there's no way to tell one authentication exception from another. The the ppolicy st

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-25 Thread Eric Pierce
Has anyone gotten any version of the code to work with OpenLDAP? From what I understand, OpenLDAP doesn't send the extended error messages (account locked, password expired, etc) like SunDS and Active Directory do, so there's no way to tell one authentication exception from another. I think the o

Re:[cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-24 Thread William G. Thompson, Jr.
LPPE status update... 3.4.8 patch applied and tagged: https://source.jasig.org/sandbox/cas-password-policy/tags/cas-server-support-ldap-pwd-expiration-3.4.8/ CAS 3.4.10 changes pulled into LPPE and tagged: https://source.jasig.org/sandbox/cas-password-policy/tags/cas-server-support-ldap-pwd-expir

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-23 Thread Andrew Petro
Sounds like a great move to me, since this code isn't yet a part of the CAS distribution and since the CAS codebase is working on a migration to github anyway. Andrew I would be interested in being updated with your progress, if you don't mind letting the list have occasional status update

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-23 Thread Jeff Chapin
I am using the 3.4.7 version with the 3.4.8 patch applied. I would be willing to share, once I get something functional working. I need to sit down and plug away at this for a while. I'm not really a Java coder, so I am taking longer than I would like to get this working. Jeff On Tue, Aug 23, 201

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-23 Thread William G. Thompson, Jr.
On Tue, Aug 23, 2011 at 1:56 PM, Jeff Chapin wrote: > I have been working on this module as well, trying to get it to fit in > with our business needs . I have been looking into changing the > hard-coded return codes for AD into configuration items, so that it > will work more cleanly with other L

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-23 Thread Jeff Chapin
I have been working on this module as well, trying to get it to fit in with our business needs . I have been looking into changing the hard-coded return codes for AD into configuration items, so that it will work more cleanly with other LDAP servers. I would be interested in being updated with you

Re: [cas-dev] LDAP Password Policy Enforcement evolution...

2011-08-23 Thread Marvin Addison
> I intend to apply the 3.4.8 patch, cut a tag, and then bring the 3.4.x > branch up to 3.4.10, and cut another tag.  I'd like to get to a > sustainable process and possibly figure out how to get this into the > core at some point if that makes sense. Sounds like a plan. I'm fairly interested in