Re: [cas-user] Issues using CAS JSON Service Registry. CAS 5.0.0.RC4-SNAP

2016-10-20 Thread Facundo Bove
Yes, sorry. I did not explained that. The same issue happens with RC4.Snapshot and RC3 Gradle Overlay + Json Service Registry. Regards, El jueves, 20 de octubre de 2016, 18:38:46 (UTC-3), Misagh Moayyed escribió: > > > I am confused. You had RC4 initially in your config, yet your report in >

[cas-user] Any objections to freezing the CAS 5 RC4 release?

2016-10-20 Thread Baron Fujimoto
Hello CAS 5 users, We find ourselves in a situation where we would like to deploy a "frozen" version of CAS 5 to our community of CAS users ASAP. The minimum version we could use for this purpose is RC4. It's my understanding that the cut of a new release (which would therefore freeze RC4) is

Re: [cas-user] 5.0.0RC4 Trying to release one ldap attribute mapped to multiple values

2016-10-20 Thread Eric Allen
Thank you. I knew it was there somewhere, I just didn't think to change it in the service. On Thursday, October 20, 2016 at 3:57:59 PM UTC-6, Misagh Moayyed wrote: > > Yes, but it’s a lot easier if you do: > >

Re: [cas-user] 5.0.0RC4 Trying to release one ldap attribute mapped to multiple values

2016-10-20 Thread Misagh Moayyed
Yes, but it’s a lot easier if you do:  https://apereo.github.io/cas/development/integration/Attribute-Release-Policies.html   Resolve sAMAccountName. Don’t map it at resolution time. Map it at release time which is where that change belongs.  From: Eric Allen Reply: Eric

Re: [cas-user] Issues using CAS JSON Service Registry. CAS 5.0.0.RC4-SNAP

2016-10-20 Thread Misagh Moayyed
I am confused. You had RC4 initially in your config, yet your report in your last email references RC3. Please clarify.  From: Facundo Bove Reply: Facundo Bove Date: October 20, 2016 at 10:36:57 PM To: CAS Community Cc: 

[cas-user] 5.0.0RC4 Trying to release one ldap attribute mapped to multiple values

2016-10-20 Thread Eric Allen
In previous versions of CAS I could map one ldap attribute to mutliple values. I am having a hard time figuring that out with the principalAttributeList. The reason is I have different services that need the same data but with different released attribute names. Previously you could do

Re: [cas-user] Issues using CAS JSON Service Registry. CAS 5.0.0.RC4-SNAP

2016-10-20 Thread Facundo Bove
Hello Misagh, Thanks for answering :) I have isolated the issue. It seems to be related to the gradle overlay. If you add cas-server-support-json-service-registry to a clean cas-gradle-overlay version 5.0.0.RC3 and try to run it, it fails. However if you add

[cas-user] How CAS protect server side API in separate apps?

2016-10-20 Thread Yan Zhou
Hi We have CAS 4.1.x overlay. We have one webapp and one backend services. Two different WAR files, both apps are casified. Webapp runs at localhost:8080/myapp, backend service runs at localhost:8080/xyzservice (same domain). After user login successfully into /myapp, its

[cas-user] Failed fetching TGT key - RuntimeException

2016-10-20 Thread mailzico
Hi, I am not exactly sure if this is the perfect list to ask my question but as I am getting this error from my Cas server 4.0.. so... :-) By default there is no problem getting ticket and authentications but sometimes I am getting this error in log which is resulting authentication failure

[cas-user] Re: Assistance with x509 + LDAP

2016-10-20 Thread Natan Zeferino
Folks I'm trying to configure CAS 5.0.0 RC1 with X509 Authentication, but it isn't working. I'm getting errors: org.springframework.beans.factory.UnsatisfiedDependencyException: Error creating bean with name 'x509AuthenticationConfiguration': Unsatisfied dependency expressed through field

[cas-user] Re: CAS Proxy Authentication and Server Side Integration

2016-10-20 Thread Alexandre Arcanjo de Queiroz
Generating X509 certificate for every server-side request. Em quinta-feira, 20 de outubro de 2016 06:10:51 UTC-2, Misagh Moayyed escreveu: > > > > On Wednesday, October 19, 2016 at 8:19:15 PM UTC+3:30, Alexandre Arcanjo > de Queiroz wrote: >> >> I have 2 applications: The first is a Java

[cas-user] Server-side communication and logout using proxy tickets

2016-10-20 Thread Alexandre Arcanjo de Queiroz
Hi. I have this code for invoke a REST webservice from webapp1 in webapp2: @Override protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException { final String targetUrl = "https://localhost:8443/webapp2/protected;; final CasAuthenticationToken

[cas-user] Re: CAS Proxy Authentication and Server Side Integration

2016-10-20 Thread Misagh Moayyed
On Wednesday, October 19, 2016 at 8:19:15 PM UTC+3:30, Alexandre Arcanjo de Queiroz wrote: > > I have 2 applications: The first is a Java front-end application and the > second is a Java REST Web Application both protecting with CAS. I am using > Proxy Authentication to implements the

[cas-user] Re: non-expiring tgt

2016-10-20 Thread Misagh Moayyed
You define an expiration policy, as it's documented to let the TGT never expire, and by extension your AT would not then expire. ...which is a very very bad idea by the way. Switch to a version that gets you that functionality (separate ATs from TGTs) instead in a more reasonable way. On

Re: [cas-user] Issues using CAS JSON Service Registry. CAS 5.0.0.RC4-SNAP

2016-10-20 Thread Misagh Moayyed
You will need to submit your overlay to the issues project so it can duplicated. This is more likely pilot error. From: Facundo Bove Reply: Facundo Bove Date: October 19, 2016 at 4:08:17 PM To: CAS Community Subject:  [cas-user] Issues