Re: [cas-user] Re: Service Registry - Store in MySQL database

2020-03-24 Thread Nguyen Tran Thanh Lam
Dear Mr Mathieu HETRU I have tried your solution, It's working fine but the service seem store temporary on RAM. It doesn't write to directory (/etc/cas/services-repo) or database. This lead to service will disappear when I restart cas-management. Thanks Vào Th 3, 24 thg 3, 2020 vào lúc 23:13

[cas-user] ticketGrantingTicketCookieGenerator.xml

2020-03-24 Thread Fernando Gómez
Hello!!!, i hope can help me, for the new policies of google, I need that SameSite of the Cookie that is generated when creating the ticketGranting in: ticketGrantingTicketCookieGenerator.xml take the value of "None", I do not get the way to do it, you have idea how I can do, what should I

Re: [cas-user] Re: Keycloak Backchannel Logout and CAS

2020-03-24 Thread 'Maksim Kopeyka' via CAS Community
I debugged CAS and found strange behavior 1. Keycloak sends correct request to "/idp/profile/SAML2/POST/SLO" endpoint 2. CAS sends redirect to "/cas/logout" in both cases (http and https) however session will be invalidated in http mode only -

Re: [cas-user] Re: Service Registry - Store in MySQL database

2020-03-24 Thread Mathieu HETRU
hello Bob, i have the solution : remove the git feature from the war file (produced by gradlew) in order to cas-management 6.1.x works fine : add this line in the build.gradle (in the bootWar step) : --- excludes = ["**/cas-mgmt-config-version-control*.jar", "**/cas-mgmt-config-delegated*.jar",

Re: [cas-user] Re: SAML functions very slow

2020-03-24 Thread Hayden Sartoris
Successfully reproduced this here. That's very informative actually. It takes us here:

Re: [cas-user] Service Registry - Store in MySQL database

2020-03-24 Thread Michele Melluso
Hi Bob, I'm glad to hear it. I will try to see if it deserves a PR at least to start a discussion about it. Regards Michele On Tuesday, March 24, 2020 at 4:02:15 PM UTC+1, Bob wrote: > > Hello Michele, > > Finally managed to get it working by commenting out the code you > mentioned. Now it

[cas-user] Re: Service Registry - Store in MySQL database

2020-03-24 Thread Bob
Thanks Mathieu, I tried that also but never could get cas-management 6.1.x working (it kept using the built-in git repo, despite having properties set not to use that) with the MySQL data. Finally I gave up on cas-management and have used the workaround from Michele instead. Thanks, Bob On

Re: [cas-user] Service Registry - Store in MySQL database

2020-03-24 Thread Bob
Hello Michele, Finally managed to get it working by commenting out the code you mentioned. Now it does read the JSON files and store it in MySQL database. I exported the database records as a SQL script and then reinstated the code so it should be good to go. Thank you very much again! Regards,

Re: [cas-user] OpenID Connect (pac4j integration) simultaneous login in several windows/tabs fails

2020-03-24 Thread Jérôme LELEU
Hi, We should have a session per tab if ever it's possible or no session at all. But this is definitely a hard topic, I'm not sure it's worth the deal to work on that. In any case, it's more a pac4j issue than a CAS one, you would have the same problem with all pac4j implementations (JEE, Shiro,

[cas-user] Re: SAML functions very slow

2020-03-24 Thread John Bond
Following up on this thread, it seems we have managed to reduce the lag on our infrastructure by adding the following to /et/cas/config/cas.properties spring.autoconfigure.exclude=org.springframework.boot.autoconfigure.web.embedded.EmbeddedWebServerFactoryCustomizerAutoConfiguration I'm

Re: [cas-user] OpenID Connect (pac4j integration) simultaneous login in several windows/tabs fails

2020-03-24 Thread mlabib
Thanks, Jérôme, for the explanation. As I understand it there would have to be more state to be pushed around to fix the issue - maybe even the session made unnecessary? Still I am quite unsure where this should be discussed. Do you think this qualifies as a pac4j issue? Should I open a CAS

Re: [cas-user] CAS Logout Issue

2020-03-24 Thread Ramakrishna G
Hi Maksim, Yes I had resolved this problem. I had specified logoutType & logoutUrl in service file. { "@class" : "org.apereo.cas.services.RegexRegisteredService", "serviceId" : "^(https|http)://.*", "name" : "testId", "id" : 1, "logoutType" : "BACK_CHANNEL", "logoutUrl" :

Re: [cas-user] OpenID Connect (pac4j integration) simultaneous login in several windows/tabs fails

2020-03-24 Thread Jérôme LELEU
Hi, I'm not surprised of this issue. pac4j relies on one session (distributed or not) to perform a login process. When starting the login process in a tab, you put some data in the session. If meanwhile, in another tab, a login process is performed, the previous data have been erased and the

[cas-user] OpenID Connect (pac4j integration) simultaneous login in several windows/tabs fails

2020-03-24 Thread mlabib
Hi group, since I am not sure where to better report a bug, I am doing it here. I am also looking for advice if the pac4j issue tracker might be a better place to report. We are using CAS Server 6.1.5 to federate the customer login to several of our services via OpenID Connect. It came to

Re: [cas-user] CAS Logout Issue

2020-03-24 Thread 'Maksim Kopeyka' via CAS Community
Hi Ramakrishna, Did you solve your issue? I have the same problem with SSL session which is alive after backchannel logout. On Wednesday, May 23, 2018 at 2:32:41 PM UTC+3, Ramakrishna G wrote: > > Ok Ray. Thanks for your help!! > > Anyone who has worked on Mod_auth_cas along with CAS server pls