[cas-user] relaxed cas ticket for generic uri

2019-09-16 Thread George Proost
Hi Cas Group, A service ticket for a url that is also valid for sub urls, including paths and query parameters etc.. Use case restful web services, ticket for base url path and valid for all sub-paths. How does one accomplish that? Thanks in advance George -- - Website: https://apereo.gith

Re: [cas-user] CAS configuration options

2019-09-16 Thread nomit babraa
Hi Thanks for the advice Alas cas.standalone.configurationDirectory=classpath:/src/resources did not work I'll play around with the other options you mentioned and see if I can get it working - the docs do seem to say it is possible :) cheers n On Sun, 15 Sep 2019 at 00:46, Andy Ng wrote:

Re: [cas-user] CAS configuration options

2019-09-16 Thread Andy Ng
Hi Nomit, Sorry previous was on my phone so it is hard for me to verified the pathing, *classpath:/src/resources* definitely is incorrect, my bad. The relation is: classpath:/ = src/main/resources So, maybe you can try setting it as: cas.standalone.configurationDirectory=classpath:/ And put y

Re: [cas-user] Re: cas 6.x oauth always returns new token

2019-09-16 Thread Pablo Vidaurri
Thanks for the response. It's just not the behavior when using a spring based oauth server. On Mon, Sep 9, 2019 at 8:45 AM Andy Ng wrote: > Hi psv, > > This behavior you described is by OAuth 2 design, wasn't really CAS doing > something weird. > > For your above step, after your client get the

[cas-user] CAS Oauth server using with postman with POST

2019-09-16 Thread Pablo Vidaurri
I'm trying to request a token for grant type of client_credentials. If I put all my parameters as query parameters it get back a token: https://www.mydomain.com/auth/oauth2.0/accessToken?grant_type=client_credentials&client_id=myClient&client_secret=

[cas-user] Re: CAS Oauth server using with postman with POST

2019-09-16 Thread Pablo Vidaurri
I've found another posting that worked for me: Example: curl -X POST \ https://www.mydomain.com/auth/oauth2.0/accessToken \ -H 'authorization: Basic myEncodedCredentials' \ -H 'cache-control: no-cache' \ -H 'content-type: application/x-www-form-urlencoded' \ -d 'grant_type=client_creden

Re: [cas-user] relaxed cas ticket for generic uri

2019-09-16 Thread Ray Bon
George, The service identifier [serviceId] can be a regex, see https://apereo.github.io/cas/6.0.x/services/Configuring-Service-Access-Strategy.html for examples. Ray On Mon, 2019-09-16 at 02:06 -0700, George Proost wrote: Hi Cas Group, A service ticket for a url that is also valid for sub url

[cas-user] CAS 5.3 OIDC / Service Registry bug?

2019-09-16 Thread Lucas Francisco Delgado Duarte
Hello! I have an working CAS 5.3 and i'm trying to use OIDC, but my user profiles are not respecting my configuration. While debugging the application during the OIDC profile attribute release and filtering process, i've found a potential issue and would like to check if its a bug or intentional fe

[cas-user] CAS - Docker - SLO

2019-09-16 Thread Bryan Wooten
Ok I have 800+ servers using CAS, SLO is an ongoing issue. So now I have a major department moving to Docker, my SLO "solution" to SLO does work at ( forwarding SLO requests in a load balanced sticky session env). It depends on static DNS server names. Anyone doing Docker SLO? It is all new terri

Re: [cas-user] CAS - Docker - SLO

2019-09-16 Thread Ray Bon
Bryan, What is the 'ongoing issue'? If the client is not handling the logout request, it is a client problem. If it is not being sent, a CAS problem. Ray On Mon, 2019-09-16 at 17:00 -0600, Bryan Wooten wrote: Ok I have 800+ servers using CAS, SLO is an ongoing issue. So now I have a major dep