[cas-user] Re: [cas-dev] Re: Release Announcement: CAS Security Patches

2019-10-02 Thread Andy Ng
Hello CAS team, Would like to know, would this vulnerability be posted to https://groups.google.com/a/apereo.org/forum/#!forum/cas-appsec-public as well? It would be hard for my colleagues to keep track of any CAS security vulnerability, if these vulnerability is only posted here & the apereo

Re: [cas-user] How to use os environment variables in CAS properties to hide sensitive information?

2019-10-02 Thread Ray Bon
One option is spring cloud config, https://apereo.github.io/cas/6.0.x/configuration/Configuration-Server-Management.html You can also specify values in setenv.sh for tomcat (if you use that): CATALINA_OPTS="$CATALINA_OPTS -Dcas.host.name=tomt" See here, https://apereo.github.io/cas/6.0.x/confi