Re: [cas-user] Re: Cannot connect to mdq.incommon.org

2022-03-10 Thread Petr Fišer
Hello, If the proxy settings do not work, you still should be able to manipulate the URL of InCommon service... either to point it somewhere where it can reach the data or to disable it completely. If i remember the source code correctly, you do not have to specify only an URL but a filesystem

Re: [cas-user] Client IP via Reverse Proxy

2022-03-10 Thread Misagh
Sorry. Didn't realize you are on 6.3.x. Use: cas.audit.alternate-client-addr-header-name=X-Forwarded-For On Fri, Mar 11, 2022, 8:40 AM Misagh wrote: > >- cas.audit.engine.alternate-client-addr-header-name= > > >- > >Request header to use to identify the client address. > >If

Re: [cas-user] Client IP via Reverse Proxy

2022-03-10 Thread Misagh
- cas.audit.engine.alternate-client-addr-header-name= - Request header to use to identify the client address. If the application is sitting behind a load balancer, the client address typically ends up being the load balancer address itself. A common example for a header here

[cas-user] Client IP via Reverse Proxy

2022-03-10 Thread Colin Ryan
Folks, I know there's lots of info on this but I just can't seem to make it go, it should be a no brainer...but...alas... I'm running CAS 6.3 in a Docker Container with embedded Spring Tomcat. In front of this is Apache2 Reverse Proxy with straight forward ProxyPass/ProxyPassReverse

[cas-user] Re: CAS v6.4 problem with OIDC claim name mappings in the ID Token

2022-03-10 Thread John Wagenleitner
Hi Rodolphe, Thank you for sharing the information, this is really helpful. This work-around may be something we look into implementing. John On Thu, Mar 10, 2022 at 12:46 AM Rodolphe Prin wrote: > Hi, > this is what I did to deal with that problem : > in my case I was retrieving attributes

Re: [cas-user] Re: Cannot connect to mdq.incommon.org

2022-03-10 Thread Ray Bon
Juan, You can manage your services without cas-management. We use LDAP to store our service entries. The service JSON is in the description attribute. If you are using a different storage system, you should be able to create/edit the service entries using the tools for that storage system. I

Re: [cas-user] Re: Cannot connect to mdq.incommon.org

2022-03-10 Thread Juan María Reina Ortiz
Hello everybody Doesn't anybody have to deal with this? I mean, having a cas-management installed on a server behind a proxy... In that case, can anybody point me to a different place where I could find some help? Cheers! El jueves, 3 de marzo de 2022 a las 8:16:11 UTC+1, Juan María Reina

[cas-user] custom cas-management

2022-03-10 Thread Mathieu HETRU
Hello, i search how custom and add a value in field "policy" in the tab "multifactor" in the forms of the application cas-management version 6.3.7.1 i search too how custom the search engine of cas management version 6.3.7.1 there is people know how i can do this ? best regards Mathieu HETRU

[cas-user] Re: CAS v6.4 problem with OIDC claim name mappings in the ID Token

2022-03-10 Thread Rodolphe Prin
Hi, this is what I did to deal with that problem : in my case I was retrieving attributes from the authentication source (LDAP) with the following configuration ``` cas.authn.ldap[0].principal-attribute-list=displayName,givenName,mail,sn cas.authn.ldap[0].additional-attributes=memberOf ``` and