[cas-user] Re: CAS 5.0.3.1 Release Announcement

2017-03-07 Thread Warren White
I am upgrading from v4.2.2 to the latest, first time, using cas-overlay-template. When I execute "git branch -a", it shows: * master remotes/origin/4.1 remotes/origin/4.2 remotes/origin/5.0 remotes/origin/HEAD -> origin/master remotes/origin/cas41-with-HZ-and-LDAP remotes/origin/maste

[cas-user] Re: CAS 5.0.3.1 Release Announcement

2017-03-07 Thread Warren White
I am new to upgrading, and will be moving from 4.2.2 to the latest. Using cas-overlay-template, I execute "git branch -a", it shows the following: Enter code her* master remotes/origin/4.1 remotes/origin/4.2 remotes/origin/5.0 remotes/origin/HEAD -> origin/master remotes/origin/cas41-wi

[cas-user] Re: LDAP attribute problems after upgrade to 5.0.3.x

2017-03-07 Thread Baron Fujimoto
In the interest of due diligence, is anyone else out there using 5.0.3.1 with 389DS LDAP for authentication credentials and attributes that we could compare config/notes with? On Mon, Mar 06, 2017 at 04:20:43PM -1000, Baron Fujimoto wrote: >We recently upgraded from 5.0.2 to 5.0.3.1, but had to ro

[cas-user] SAML setup

2017-03-07 Thread John Wynstra
I am trying to add saml support to CAS 5.0.3 maven overlay. After adding the following dependency to pom.xml org.apereo.cas cas-server-support-saml-idp ${cas.version} the repackaged CAS.WAR file will deploy but not start on TomCat. I have not configured any of the saml properties in cas

Re: [cas-user] Re: CAS 5 with ADFS 3.0

2017-03-07 Thread Robert Ledermüller
Never mind. I've found the github issue regarding this problem. Many thanks for directing me into the right direction. https://github.com/apereo/cas/issues/2148 https://github.com/apereo/cas/pull/2156 -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https:/

Re: [cas-user] CAS 5.0 Monitoring - Dashboard

2017-03-07 Thread Ray Bon
Nikolas, Looks like the dashboard is configured to use http instead of https. It sends http when requesting authentication and even when you change the URL to https, it sends http for ticket validation. Ray On Tue, 2017-03-07 at 00:27 -0800, Nikolas Stylianides wrote: Hi there. I have configure

Re: [cas-user] Check your 'Require' directive in Apache

2017-03-07 Thread David Hawes
We'll need more information to troubleshoot. What version of Apache and mod_auth_cas? What is the full config? How are the other Apache instances similar/different? Are the proper authz modules loaded? On 7 March 2017 at 10:14, RJ Guroo wrote: > One of the applications is reporting HTTP 500: > >

Re: [cas-user] Re: CAS 5 with ADFS 3.0

2017-03-07 Thread Robert Ledermüller
Thanks for your response! Could you give me a bit more details about the Relying State? Where did you made your fixes? Just in config files or did you patched any of the provided classes / thymeleaf templates from CAS? In my logs I can at least see that CAS is recognizing the query param from A

Re: [cas-user] Recommendation on Ticket Storage

2017-03-07 Thread RJ Guroo
Hazelcast seems to be doing great with CAS. We are also working on getting this working. On Mon, Mar 6, 2017 at 2:30 PM, Wickham, Jeremy wrote: > We have been users of the Memcached Ticket Registry for a few years now > (Current Production CAS is v4.0.4). I am currently looking to upgrade our >

[cas-user] Re: [CAS 5.x.x] RADIUS MFA issue, don't redirecting to "radius token password page" after login

2017-03-07 Thread Jozef Kotlar - EEA.sk
Hello, I was struggling with the same problem - I found out, that I had to switch MFA explicitly in services using: { "@class" : "org.apereo.cas.services.RegexRegisteredService", "serviceId" : "^http://localhost:/.*";, "name" : "localhost", "theme" : "apereo", "id" : 1003, "d

[cas-user] Check your 'Require' directive in Apache

2017-03-07 Thread RJ Guroo
One of the applications is reporting HTTP 500: Apache error log: [VirtualHost: main] configuration error: couldn't check access. Check your 'Require' directive: /app01/home.jsp [VirtualHost: main] Request Failed for : /app01/home.jsp, Resp Code : [500], mod_auth_cas seems to be the standard

Re: [cas-user] Re: CAS 5 with ADFS 3.0

2017-03-07 Thread RJ Guroo
How did you generate the IDP certs? What are your exact versions ? On Tue, Mar 7, 2017 at 9:21 AM, Lê Thành wrote: > I have fixed this issue. The problem occurs when CAS redirect to the AD > FS, it did not retain Relying State. You can fix this by saving this param > and resend it with the redir

Re: [cas-user] Re: CAS 5 with ADFS 3.0

2017-03-07 Thread Lê Thành
I have fixed this issue. The problem occurs when CAS redirect to the AD FS, it did not retain Relying State. You can fix this by saving this param and resend it with the redirecting url to AD FS. Good luck On Tue, Mar 7, 2017, 8:50 PM Robert Ledermüller < robert.ledermuel...@gmail.com> wrote: > H

[cas-user] Re: CAS 5 with ADFS 3.0

2017-03-07 Thread Robert Ledermüller
Hi, I'm having the exact same issue. Did you found any solution yet? Best -- Robert On Tuesday, November 22, 2016 at 11:37:36 AM UTC+1, Lê Thành wrote: > > Hi, > > I'm configuring CAS 5.0.0 (Release) to work with AD FS 3 by SAML2 > Authentication. In my case CAS act as an IdP, everything work f

[cas-user] Properties documentation

2017-03-07 Thread Javi
Hi, I'm new in CAS and I'm trying to find the explanation of the properties listed here: https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#ldap-authentication Are they explained anywhere? BR Javi -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing li

[cas-user] CAS 5.0 Monitoring - Dashboard

2017-03-07 Thread Nikolas Stylianides
Hi there. I have configured the Admin pages security with SSO (LDAP authentication) with my CAS. I also set an adminuser.properties with: user=xxx,ROLE_ADMIN Domain: myservice Once i access /cas/status/dashboard it redirects to /cas/login with url paramter service value set at http%3A%2F%2Fmy