RE: [cas-user] JVM Heap Kept Growing every day

2017-08-28 Thread Tom O'Neill
RJ, I could be missing something but your most recent summary of the heap behavior sounds pretty normal. Your arguments have the JVM heap initializing at 2 GB and maxing out at 4 GB. When garbage collection occurs, some of the memory used by the heap should be freed up. Sometimes this doesn’t w

[cas-user] Re: SAML metadata problem when upgrade from 5.2.0-RC1 to 5.2.0-RC2

2017-08-28 Thread Andy Ng
Thanks for the reply, Misagh! Since the release of RC3 is coming, I think I will wait till then and then try upgrading to RC3, and report back whether the problem is solved or not. I don't upgrade now is because now upgrading to RC3-SNAPSHOT I see lots "cannot find symbol" error in my maven and

Re: [cas-user] JVM Heap Kept Growing every day

2017-08-28 Thread RJ
Here is another take at this: Started CAS with -Xms2048m -Xmx4096m about 12 days ago. Interesting things from stats file is that jvm.memory.heap.committed & jvm.memory.heap.init haven't changed since beginning. 2147483648 is the same value from the beginning. jvm.memory.heap.usage has varied fr

Re: [cas-user] Re: How to embed the login form in the client page?

2017-08-28 Thread Ray Bon
If application B is acting on behalf of the user, then proxying is what you are looking for. https://apereo.github.io/cas/5.1.x/installation/Configuring-Proxy-Authentication.html If application B is running background tasks, then the one 'special' user in application B can use CAS REST api to lo

[cas-user] Re: MFA Gauth registry fails to register multiple users

2017-08-28 Thread Mark Klinchin
I have the same situation with CAS 5.1.3 with both JSON and MongoDB. Somewhat related question is whether I can use container managed datasource (java:comp/env/jdbc/...) instead of database URL (with login and password) to store Google Authenticator registrations? Thank you Mark On Thursday,

Re: [cas-user] Re: How to embed the login form in the client page?

2017-08-28 Thread SOPHIE Fang
Totally agree... i already have cold-feet as i am reading more into it As I am customizing the login page, i will probably accept your suggestion.:) May i ask another question? I have an Application A which is Java based and Application B which is Python based. Application B calls Applicati

Re: [cas-user] Re: How to embed the login form in the client page?

2017-08-28 Thread Ray Bon
Sophie, CAS definitely has a lot of moving parts. Patience, small steps and lots of testing. If I understand correctly, your client application has a login form. You should be able to use REST to pass that user's credentials to the CAS server without having to redirect. If that is the route yo

Re: [cas-user] Re: How to embed the login form in the client page?

2017-08-28 Thread SOPHIE Fang
Thank you for the speedy answer! Really Appreciate it!! My questions might sound pretty silly to someone already quite familiar with the CAS Protocal. But still newbie as i am, may i ask..: Why the REST Protocol sounds like it's for application-to-application authentication. Will it really help m

[cas-user] CAS 5.2.0-RC3-SNAPSHOT handle authentication exception

2017-08-28 Thread Fabio Martelli
Hi, what are the best practices to handle a Ldap authentication exception? I need to successfully authenticate active directory disabled users. Where can I act? Thank you in advance for your help. BR, F. -- Fabio Martelli https://it.linkedin.com/pub/fabio-martelli/1/974/a44 http://blog.tira

Re: [cas-user] CAS5.1.x Long Term Authentication(Remember Me) configuration confused.

2017-08-28 Thread Ray Bon
See https://apereo.github.io/cas/5.1.x/installation/Configuring-Ticket-Expiration-Policy.html and https://apereo.github.io/cas/5.1.x/installation/Configuration-Properties.html#tgt-expiration-policy. Add these to cas.properties: cas.ticket.tgt.rememberMe.enabled=true cas.ticket.tgt.rememberMe.ti

Re: [cas-user] Re: How to embed the login form in the client page?

2017-08-28 Thread Ray Bon
Is this what you are looking for? https://apereo.github.io/cas/5.1.x/protocol/REST-Protocol.html Ray On Mon, 2017-08-28 at 07:21 -0700, SOPHIE Fang wrote: Did you find the way to do it? Thx! 在 2017年3月21日星期二 UTC-4上午10:24:34,Hao Wu写道: Hello all, I want to embed the login form in the client page, w

[cas-user] Re: How to embed the login form in the client page?

2017-08-28 Thread SOPHIE Fang
Did you find the way to do it? Thx! 在 2017年3月21日星期二 UTC-4上午10:24:34,Hao Wu写道: > > Hello all, > I want to embed the login form in the client page, without reidrection, > have googled for some solutions about 3.x or 4.x, is there any solutions > for 5.x? Thanks > > -- - Website: https://apereo.g

[cas-user] Thread count keeps growing at tomcat 8.5 with CAS 5.1

2017-08-28 Thread Song, Doe-Hyun
Good Morning All, Since we go to production with CAS 5.1, we keep having growing Thread counts. We use ehcache for HA implementation and ldap for authentication. Two types of threads - Timer and pool-3-thread - keep growing as time goes. Any suggestion to debug this issue? Thread dump : Full

Re: [cas-user] Mongodb x509 authentification

2017-08-28 Thread Misagh Moayyed
> I have a mongodb cluster (version 3.4.7) and it configures to use x509 > authentification (mode : requireSSL). > I read apereo cas documentation, but I didn't find anything about the > configuration CAS with x509 authentification of mongodb cluster. > Information : > I use version 5.1.1 of CAS

Re: [cas-user] SAML metadata problem when upgrade from 5.2.0-RC1 to 5.2.0-RC2

2017-08-28 Thread Misagh Moayyed
Switch to RC3 SNAPSHOT please. You likely have duplicate caffein dependencies, and RC3 should fix that. > From: "Andy Ng" > To: "CAS Community" > Sent: Monday, August 28, 2017 3:16:45 AM > Subject: [cas-user] SAML metadata problem when upgrade from 5.2.0-RC1 to > 5.2.0-RC2 > Hi all, here's my

[cas-user] SAML metadata problem when upgrade from 5.2.0-RC1 to 5.2.0-RC2

2017-08-28 Thread Andy Ng
Hi all, here's my problem: _ Background: Version: CAS 5.2.0-RC2 Topic: SAML 2.0 Problem: When I tried to upgrade from CAS 5.2.0-RC1 to CAS 5.2.0-RC2 (CAS 5.2.0-RC1 works completely fine). I have some error with "scopedTarg

Re: [cas-user] cas5.1.1 + cas-services-management-overlay

2017-08-28 Thread sesharaju sv
Hello Jérémie I think you have missed to configure the cas-management application in CAS Server services. Please do add the CAS Management application URL in your services registry and try log you should be able to login. Thanks Seshu On 27 August 2017 at 22:27, Jérémie Pilette wrote: > Hello,