[cas-user] JPA Service Registry and MySQL (or Mariadb)

I was trying to make Service registry work with mysql (or mariadb). I am using CAS version 5.2.1. I had 2 problems : *Problem 1 *: Specified key was too long; max key length is 767 bytes when creating table RegisteredServiceImpl_Props *Solution* : use mysql 5.7 (need to be verified) or mariad

[cas-user] Re: Error creating SamlRegisteredService_AttributeNameFormats Table

I had the same problem. The problem was the key column used a reserved keyword (key). But, according to https://stackoverflow.com/questions/2889871/how-do-i-escape-reserved-words-used-as-column-names-mysql-create-table (martin smith answer), it is possible to used reserved keyword for column

[cas-user] Is there a way to force users to configure their custom security questions while login for the 1st time.

Hello Everyone, I am currently using CAS 5.2.0 and I have few questions regarding Password reset security questions. Is there a way 1. to force users to configure their custom security questions when the user login for the 1st time? 2. password change lockout with too many incorre

Re: [cas-user] issue with expiration TGC or TGT ?

cas.tgc.path=/cas/ cas.tgc.maxAge=-1 cas.tgc.domain=${cas.server.name} cas.tgc.rememberMeMaxAge=-1 cas.tgc.encryptionKey= cas.tgc.signingKey= # TGT Expiration Policy # https://apereo.github.io/cas/5.1.x/installation/Configuration-Properties.html#tgt-expiration-policy cas.ticket.tgt.timeout.maxTim

Re: [cas-user] issue with expiration TGC or TGT ?

Thank you Ray. If i remove it,i think default value will apply... I will try to adjust to rememberme value. Thanks you for your message. What is your configuration about tgc ? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo

Re: [cas-user] Ldap Authentication with Active Directory

Wajih, We use oracle LDAP. I have never used AD. These are the fields that we use: cas.authn.ldap[0].type=AUTHENTICATED cas.authn.ldap[0].ldapUrl= cas.authn.ldap[0].connectTimeout= cas.authn.ldap[0].baseDn= cas.authn.ldap[0].userFilter= cas.authn.ldap[0].bindDn= cas.authn.ldap[0].bindCredential= c

Re: [cas-user] CAS 5.1.6 TGT is destroyed early - but only during high volume

Duane, Is the problem the total number of logins or the rate of logins? Could ehcache be 'filling up'? I seem to recall that ehcache can be configured with a maximum cache size. Ray On Thu, 2018-01-18 at 10:22 -0800, Duane Booher wrote: Hi, we have been running a new production upgrade to CAS 5.

[cas-user] CAS 5.1.6 TGT is destroyed early - but only during high volume

Hi, we have been running a new production upgrade to CAS 5.1.6 for about a week. Most things are working, however during our peak login times, our TGT sessions do not last the expected default of two hours and require the user to re-login early. We have a two host cluster with ehcache enabled.

[cas-user] ldap preAuthenticate and postAuthenticate

Hello, CAS 5.2.x we want to overwrite ldap preAuthenticate and postAuthenticate functions. In prior version (4.2.x), we were able to overwrite these functions. Is there any guide on how to do this in 5.2.x thanks -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.

Re: [cas-user] issue with expiration TGC or TGT ?

Romain, It looks like maxTimeToLiveInSeconds takes priority over rememberMe, https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#tgt-expiration-policy Try removing maxTimeToLiveInSeconds. Ray On Thu, 2018-01-18 at 00:01 -0800, vallee.romain wrote: Thank you Mister Ray

Re: [cas-user] Steam OpenId2 auth

That's just the way Steam returns the steamId per their doc: https://partner.steamgames.com/doc/features/auth#website So at some point you'd need to strip it off the end. I ended up extending ClientAuthenticationHandler to do some extra work so I pull out the steamId there. -- - Website: https

Re: [cas-user] Problems building/running 5.3.0-RC1 and/or 5.3.0-RC2-SNAPSHOT with Maven overlay

Thanks, Alberto. Of course, when I go try to rebuild things this morning to try that suggestion, it errors out with a completely different error.(before I even apply that correction) having nothing to do with the original error. I think 5.3.0-RC2-SNAPSHOIT building with Maven is just broken right

Re: [cas-user] Steam OpenId2 auth

Hi, I guess it depends on the way you built your SteamOpenIdClient, but in pac4j you can control which attribute is used for the identifier. Thanks. Best regards, Jérôme On Wed, Jan 17, 2018 at 11:30 PM, FritzTheWonderMutt < fritzthewonderm...@gmail.com> wrote: > This works: > > @Autowired >

Re: [cas-user] sso sessions

Anyone else experiencing this problem? I could really use some help resolving this issue; we have 38K records now in our ticketgrantingticket table. Thanks, -Jeff On Wed, Jan 17, 2018 at 9:38 AM, Jeffrey Ramsay wrote: > I have a bit more information on this problem; it is occurring when the > a

[cas-user] Any examples for an ASP.Net MVC 5 OWIN based application using OIDC to CAS?

Does anyone have any examples of how to setup the service and the web app as a client? I can make it redirect to the the CAS login, CAS then tries to rediirect but I'm getting an "Ignoring malformed request". Thanks! -- CONFIDENTIALITY NOTICE: The contents of this email message and any attac

Re: [cas-user] Problems building/running 5.3.0-RC1 and/or 5.3.0-RC2-SNAPSHOT with Maven overlay

This error > Bean instantiation via factory method failed; nested exception is > org.springframework.beans.BeanInstantiationException: Failed to > instantiate [nz.net.ultraq.thymeleaf.LayoutDialect]: Factory method > 'layoutDialect' threw exception; nested exception is > java.lang.NoClassDefFoundE

Re: [cas-user] issue with expiration TGC or TGT ?

Thank you Mister Ray Bon for your answer. ok i will remove my cas.tgc.rememberMeMaxAge propoerties . so, do you know why if i check rememberMe checkbox, my session kill with "cas.ticket.tgt.timeout.maxTimeToLiveInSeconds" parameters and not "cas.ticket.tgt.rememberMe.timeToKillInSeconds" param