[cas-user] CAS Cluster, but, only validate ST and TGT if the call comes from the server issued it

2016-08-08 Thread Yan Zhou
Hello, I have two CAS (CAS 4.1.9 overlay) servers running separately, they both point to the same 3rd server running memcached. Is that shared ticket registry (i.e., the 3rd server is the ticket store, shared by the two CAS server)? However, if the call to generate TGT or ST are made on serv

Re: [cas-user] Configuring CAS Server and CAS Service in a multi-domain environment

2016-08-08 Thread Misagh Moayyed
I haven’t entirely kept up with this thread, so sorry if I am off base here but there is no configuration on the CAS server side. If you’re using proxy auth and you have multiple versions/nodes of the app that receive the PGT, you need to make sure that PGT is shared across nodes. -- Misagh From

[cas-user] Configuring CAS Server and CAS Service in a multi-domain environment

2016-08-08 Thread Alexandre Arcanjo de Queiroz
There is a special configuration in CAS Server or in CAS Services in a multi-domain environment? I am using CAS Server 4.0.7, CAS Client 3.4.1, Spring version 3.2.3.RELEASE and Spring Security CAS 3.2.9.RELEASE. -- You received this message because you are subscribed to the Google Groups "CAS

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread John Bradley
Done: https://github.com/apereo/cas/issues/1942. Thanks! On Monday, August 8, 2016 at 2:31:57 PM UTC-4, Misagh Moayyed wrote: > > Never mind. I see the problem. Sorry about the spam. Go ahead and file an > issue please. > > -- > Misagh > > From: Misagh Moayyed > Reply: Misagh Moayyed > Date

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread John Bradley
Done: https://github.com/apereo/cas/issues/1942 Thanks! -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To post to this group,

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread Misagh Moayyed
Never mind. I see the problem. Sorry about the spam. Go ahead and file an issue please. --  Misagh From: Misagh Moayyed Reply: Misagh Moayyed Date: August 8, 2016 at 11:22:34 AM To: CAS Community Subject:  Re: [cas-user] Ticket encryption using Memcached not working Correction: 4.2.5-SNAPS

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread Misagh Moayyed
Correction: 4.2.5-SNAPSHOT. Sorry.  --  Misagh From: Misagh Moayyed Reply: Misagh Moayyed Date: August 8, 2016 at 11:16:53 AM To: CAS Community Subject:  Re: [cas-user] Ticket encryption using Memcached not working Switch your logs to DEBUG, and possibly, switch to 4.2.4-SNAPSHOT. Paste the

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread Misagh Moayyed
Switch your logs to DEBUG, and possibly, switch to 4.2.4-SNAPSHOT. Paste the logs back please. --  Misagh From: John Bradley Reply: John Bradley Date: August 8, 2016 at 11:09:30 AM To: CAS Community Cc: mmoay...@unicon.net Subject:  Re: [cas-user] Ticket encryption using Memcached not workin

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread John Bradley
Thanks, Misagh! We're getting somewhere. CAS is no longer throwing an error before the "Log In Successful" page renders, at least. That page now partially reads "You, nobody, have successfully logged into the Central Authentication Service." While I am happy to see this page again, I do not thi

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread John Bradley
Thanks, Misagh! We're getting somewhere. CAS is no longer throwing an error before the "Log In Successful" page renders, at least. That page now partially reads "You, nobody, have successfully logged into the Central Authentication Service." While I am happy to see this page again, I do not thi

Re: [cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread Misagh Moayyed
- You should be able to put the alias definition into the deployerConfigContext.xml file. I have updated the docs to note this. - Your encryption key is of the wrong size. Check with the docs on the key length.  - Also a bug in the docs: remove the seed.  --  Misagh From: John Bradley Reply: J

[cas-user] Ticket encryption using Memcached not working

2016-08-08 Thread John Bradley
I am working on a clustered CAS 4.2.4 installation (deployed to two Linux-based Tomcat servers) based on the overlay template at https://github.com/Jasig/cas-overlay-template.git. I am using two Memcached instances for ticket management. These Memcached instances are on separate servers in diff

Re: [cas-user] CAS 5 does not read cas.properties file

2016-08-08 Thread Philippe MARASSE
Thanks for your replies, I was not on the good branch, now I am :-). Following Dmitriy's directions, I've modified application.properties to include : spring.profiles.active=native spring.cloud.config.server.native.searchLocations=file:///etc/chl/cas5/config The properties file is read, but...

Re: [cas-user] CAS 5 does not read cas.properties file

2016-08-08 Thread Misagh Moayyed
Simply put, you should be following the docs here: https://github.com/apereo/cas-overlay-template/tree/5.0 There is no “propertyFileConfigurer.xml”. Using “deployerConfigContext.xml” is also useless for most if not all cases.  --  Misagh From: Philippe MARASSE Reply: Philippe MARASSE Date: Au

Re: [cas-user] CAS 5 does not read cas.properties file

2016-08-08 Thread Dmitriy Kopylenko
This should shed some light on CAS v5 configuration facilities: https://apereo.github.io/cas/development/installation/Configuration-Management.html D. > On Aug 8, 2016, at 10:42 AM, Philippe MARASSE > wrote

[cas-user] CAS 5 does not read cas.properties file

2016-08-08 Thread Philippe MARASSE
Folks, I'm preparing a new CAS service for our organisation (we use CAS 3.5 for years now :-) ), my plan is to upgrade to v5 in order to use MFA. I'm using maven overlay (from https://apereo.github.io/cas/development/installation/Maven-Overlay-Installation.html ) and json service registry Unfort

[cas-user] Request for feedback: CAS release EOL policy

2016-08-08 Thread Misagh Moayyed
Fellow CASers,  The CAS PMC has been reviewing a proposal on CAS release management and EOL policies. The following blog post briefly describes a summary of what this proposal is and how it might affect you: https://mmoayyed.github.io/2016/08/08/cas-eol-policy-proposal/ Please review and post

[cas-user] Re: CAS Server, Spring Security CAS and CAS Client with ajax requests in a multidomain environment

2016-08-08 Thread Alexandre Arcanjo de Queiroz
In some cases, CAS set origin = null when redirect to "https://gallifrey.com.br/analytics/j_spring_cas_security_check?ticket=ST-14-RbL5dc2AZFWG9NtlXZBX-gallifrey.com.br"; -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this

[cas-user] Re: CAS Server, Spring Security CAS and CAS Client with ajax requests in a multidomain environment

2016-08-08 Thread Alexandre Arcanjo de Queiroz
In some cases, CAS set origin = null when redirect to "https://gallifrey.com.br/analytics/j_spring_cas_security_check?ticket=ST-14-RbL5dc2AZFWG9NtlXZBX-gallifrey.com.br"; Em segunda-feira, 8 de agosto de 2016 09:10:13 UTC-3, Alexandre Arcanjo de Queiroz escreveu: > > I am using CAS Server versio

[cas-user] CAS Server, Spring Security CAS and CAS Client with ajax requests in a multidomain environment

2016-08-08 Thread Alexandre Arcanjo de Queiroz
I am using CAS Server version 4.0.7 in a multidomain environment. First the user logs in a portal, a PHP page (using PHP-CAS) in tardis.com.br domain. The CAS Server is in tardis.com.br domain too. If the user logs in successfully, the portal enables a button that redirects to the principal CAS