[cas-user] Re: How to get google attributes in PAC4J

2017-10-25 Thread Martin Bohun
I have a full working version of that at: https://github.com/AtlasOfLivingAustralia/ala-cas-2.0 However that version is based on cas-4.0.4/pac4j-1.7.2 so you have to adjust it to your needs; I was using it and tested it succesfully for "one click" SignUP/SignIN with: - Facebook - Google - Twitte

[cas-user] Re: How to get google attributes in PAC4J

2017-10-25 Thread Edward
Hi All, Thank you very much for your response: 1. my scope for google is: cas.authn.pac4j.google.scope=EMAIL_AND_PROFILE 2. after add logging.level.org.pac4j=DEBUG i can see in the log that google return lot of attributes: 2017-10-26 11:56:34,573 INFO [org.pac4j.oauth.profile.creator.OAuth20Prof

Re: [cas-user] CAS5 tgt ticket time out when session is inactive?

2017-10-25 Thread Duane Booher
Thanks for the response, good point. What I really mean, for a given SSO session (TGT and a created ST) in a given browser, then a new ST comes in after 2 hours. In this case we would like a new forced CAS login to occur. For example, here is how I am testing where page-a and page-b are static

Re: [cas-user] CAS5 tgt ticket time out when session is inactive?

2017-10-25 Thread Ray Bon
Duane, By session, do you mean the client application the user is working in or do you mean the SSO session? The client application is responsible for its own session expiration. CAS only sends a logout to applications if a user chooses to logout (and appropriate configuration is in place). Aft

[cas-user] CAS5 tgt ticket time out when session is inactive?

2017-10-25 Thread Duane Booher
Hello I'm running CAS5.0 with all of the tgt session defaults. We are testing we are testing tgt timeout when a tgt session is inactive with no new activity. I was assuming that the default setting of cas.ticket.tgt.timeToKillInSeconds=7200 would kill the session, however it is going beyond 2 h

Re: [cas-user] CAS5 /cas/status cas.adminPagesSecurity.ip

2017-10-25 Thread Tom Poage
> On Oct 25, 2017, at 8:42 AM, Duane Booher wrote: > > For CAS 5.0 /cas/status access, the only way I can get access is with a > single ip, such as cas.adminPagesSecurity.ip=127.0.0.1 > > My question, is there any additional pattern matching capabilities and/or a > list of ip addresses? In CA

[cas-user] Re: CAS5 /cas/status cas.adminPagesSecurity.ip

2017-10-25 Thread Ryan Schroeder
It should be a regex now, at least it is in 5.1 On Wednesday, October 25, 2017 at 10:42:43 AM UTC-5, Duane Booher wrote: > > For CAS 5.0 /cas/status access, the only way I can get access is with a > single ip, such as cas.adminPagesSecurity.ip=127.0.0.1 > > My question, is there any additional p

[cas-user] CAS5 /cas/status cas.adminPagesSecurity.ip

2017-10-25 Thread Duane Booher
For CAS 5.0 /cas/status access, the only way I can get access is with a single ip, such as cas.adminPagesSecurity.ip=127.0.0.1 My question, is there any additional pattern matching capabilities and/or a list of ip addresses? In CAS4 there use to be a subnet mask option, such as xx.xx.xx.xx/24,

Re: [cas-user] CAS Performance Bench-Marking

2017-10-25 Thread Waldbieser, Carl
Kunal, There could be many factors. The CAS service typically depends on some kind of back end for authentication and attribute release. And you probably have a load balancer in front of the service and are running multiple nodes. I would start by pulling my logs for the various dependant se

Re: [cas-user] CAS Performance Bench-Marking

2017-10-25 Thread Kunal
Hi Carl, Thanks for the quick response! Appreciate the details! I have gone through this. Actually, we ran our test with 200 concurrent login (per second) having server configuration of 4 cores and 8 GB of RAM. The average time taken by each request was 4.7 seconds, which is at much higher sid

Re: [cas-user] CAS Performance Bench-Marking

2017-10-25 Thread Waldbieser, Carl
Kunal, There are really a lot of variables to such a test. I've performed load tests for CAS 5.0.x [1] and CAS 5.1.x [2], and I tried to include good summaries of my observations. Much of the load that your CAS can carry is going to depend on your deployment architechure. There is a section o

[cas-user] CAS Performance Bench-Marking

2017-10-25 Thread Kunal
Can you please let me know what's the performance bench-marking is provided by CAS in terms of concurrent load CAS can support for given server configuration. I am using cas 5.0.3. Thanks in advance! -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - L

Re: [cas-user] CAS for Jira 7

2017-10-25 Thread Ashis
Micheal can you please help.. I have integrated CAS with JIRA. But when I open jira, user redirected to /secure/Dashboard.jspa which has jira login page, On clicking login from top right corner, cas page is opening and after successful logged in user is redirected back to CAS but again i see JI