FW: [cas-user] Cas server not working with http

2020-05-12 Thread 'Suhas Bansude' via CAS Community
Hi.. Please help me with this issue I have 2 sites /App1 and /App2. CAS was working without SSL in that it would take App1 to the login site and authenticate correctly. The issue was if you tried to access via another site(App2), it would ask you to sign in again. Once I enabled SSL and tri

Re: [cas-user] CAS V5.3 with Zoom SSO???

2020-05-12 Thread David Curry
We're running it with CAS 5.2.x as a SAML2 service. I didn't personally set it up, but the guy who did says it was just a "regular" SAML2 setup (they're pretty routine for us these days). Release the attributes Zoom wants and tell it which attribute is what, and you're good to go. --Dave -- DAVI

[cas-user] CAS V5.3 with Zoom SSO???

2020-05-12 Thread Keith Alston (Staff)
Anyone set up Zoom SSO with CAS?? Any pointers/tips?? -Keith Alston keit...@regent.edu Regent University 757-619-3421 -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- Yo

Re: [cas-user] TGC timeout issue

2020-05-12 Thread Ray Bon
Boris, The TGC is only used as a way to 'find' the TGT. As long as the TGT is valid, the cookie is valid. By default, TGC is valid for the session, maxAge = -1. There is a most recently used option for TGT, https://apereo.github.io/cas/6.1.x/ticketing/Configuring-Ticket-Expiration-Policy.html#ti

Re: [cas-user] CAS with LDAP: ObjectGUID retrieved with attribute repository different than with authentication handler

2020-05-12 Thread Jonathon Taylor
Benjamin, We are running into a similar issue with CAS 5.3.15.1. In our case AD is a secondary attribute repository and we specifically need the objectGUID. We are seeing the same behavior where the GUID is not being converted correctly. We use a third-party vendor for CAS customizations/suppo

[cas-user] TGC timeout issue

2020-05-12 Thread Boris P1
Good morning, I'am working on the "Remember Me" feature of CAS v5.3. Thanks to the Maven overlay, in order to make the TGT timeout depend on the last service access, i made the Long-Term Ticket Granting Ticket support a TimeoutExpirationPolicy instead of HardTimeoutExpirationPolicy, in the Re

Re: [cas-user] CAS with LDAP: ObjectGUID retrieved with attribute repository different than with authentication handler

2020-05-12 Thread Benjamin Bini
The property for AttributeRepository does not exist. For the authentication handler though it returns the GUID correctly. Le mercredi 6 mai 2020 04:14:31 UTC+2, dfisher a écrit : > > On Mon, May 4, 2020 at 4:42 AM Benjamin Bini > wrote: > >> Is this a known issue? Is there a problem with my conf

Re: [cas-user] CAS, Chrome 80 and SameSite cookies policy

2020-05-12 Thread Andy Ng
Hi all, I have encounter this samesite issue as well for our 5.3.x CAS servers, and I come up with an ugly custom fix, I am sharing here if anyone need quick fix. Since I manage multiple SPs for our CAS, and one SP with a different domain use CAS inside an iframe which trigger this issue. The

Re: [cas-user] POST to /cas/oauth2.0/accessToken: 403 Access Denied

2020-05-12 Thread Mohsen Ebrahimi
No. I copied logs from different times. Client and server are synchronizing with one NTP server. On 2020-05-11 20:22, Ray Bon wrote: Mohsen, The time stamp for 'whenActionWasPerformed' is a minute before the other log items. Is it possible that there is clock difference between computers or o