Re: [cas-user] Re: No generated SAML metadata after migration

2023-11-02 Thread Ray Bon
Mohamed, I have not used JPA for any cas config. The metadata should be in some table in the datastore. see https://apereo.github.io/cas/6.6.x/installation/Configuring-SAML2-DynamicMetadata-JPA.html Ray On Thu, 2023-11-02 at 20:28 +0100, Mohamed Amdouni wrote: Notice: This message was sent

[cas-user] Re: CAS6.4.x, common-codec error with SAML delegated AuthN

2023-11-02 Thread Yan Zhou
never mind, we had the same class brought by another 3rd party dependenceis. Yan On Thursday, November 2, 2023 at 1:46:23 PM UTC-4 Yan Zhou wrote: > > I looked at the code. it seems that either 1.15 or 1.16.0, both should > work.Not sure why we get NoSuchMethod error. > > /** Encoder

Re: [cas-user] Re: No generated SAML metadata after migration

2023-11-02 Thread Mohamed Amdouni
Thank you Ray for your response. In previous versions the two dependencies are present. So I would like to keep the top options if possible. I think there is a problem getting the service locator or and the generator bean when the two dependencies are presents When keeping only jpa, do you

Re: [cas-user] CAS 6.6.x CSS with SSL Offload

2023-11-02 Thread Ray Bon
Is it possible that vip...themes is protected/secured and needs login to access? Check your developer console to see where the redirects are going. Check cas logs to see which URIs are unprotected (shows on startup). Ray On Thu, 2023-11-02 at 09:24 -0700, atilling wrote: Notice: This message was

Re: [cas-user] Re: No generated SAML metadata after migration

2023-11-02 Thread Ray Bon
Mohamed, jpa is an alternative to file system storage (default). Services can use the file system as well. If you do not need/use it, remove it. Ray On Thu, 2023-11-02 at 18:24 +0100, Mohamed Amdouni wrote: Notice: This message was sent from outside the University of Victoria email system.

Re: [cas-user] Strange delegated SAML Error on RHEL (CAS6.4.6.6)

2023-11-02 Thread Yan Zhou
well, we finally figured it out. It is not CAS, we have some network security that is blocking the request. I was just wget to get the login page from one of the servers, it worked fine, that made me think; why it did not work when I access from laptop. Thx! On Tuesday, October 24, 2023 at

[cas-user] Re: CAS6.4.x, common-codec error with SAML delegated AuthN

2023-11-02 Thread Yan Zhou
I looked at the code. it seems that either 1.15 or 1.16.0, both should work.Not sure why we get NoSuchMethod error. /** Encoder used to produce chunked output. */ @Nonnull private static final Base64 CHUNKED_ENCODER = new Base64(76, new byte[] { '\n' }, false,

Re: [cas-user] CAS 7 MFA broken since last build

2023-11-02 Thread Javi Finarfin
> For the record, it *looks like* it needs a service parameter, but I´m yet receiving a 403 This yet I don't know if it's necessary Because it was a security problem, while debugging I added the endpoint manually here:

[cas-user] [6.6.13] cas-overlay-template slow rendering of login page

2023-11-02 Thread spfma.tech via CAS Community
Hi, I was planning to update our 6.4.2 instances to 6.6.13, when I discovered something strange : when the login page is called for the first time on a freshly launched browser (or after total cache cleaning), it takes ages to be rendered (over 20s). But all subsequent calls are fine as long

[cas-user] Re: No generated SAML metadata after migration

2023-11-02 Thread Mohamed Amdouni
Hello, When removing the saml-idp-metadata-jpa from the dendencies I’m able to generate the idp metadata from the endpoint /idp/metadata and files are generated on startup (idp metadata and certs ) in the folder /cas/saml. Is it wrong to keep both idp-metadat and idp-metadata-jpa ? As I

[cas-user] CAS 6.6.x CSS with SSL Offload

2023-11-02 Thread atilling
Offloading SSL to F5 BigIP In cas.properties we have: server.port=8080 server.ssl.enabled=false if we go to https://node.domain.tld:8080/cas/login the page displays fine and the CSS is loaded if we go to https://vip.domain.tld/cas/login the page displays but the CSS is not loaded

[cas-user] CAS6.4.x, common-codec error with SAML delegated AuthN

2023-11-02 Thread Yan Zhou
Hi there, CAS 6.4.6.6 overlay, using CAS for SAML delegated authN, getting this error when go to /cas/login page, while it is generating CAS sp-metadata.xml CAS comes with commons-codec-1.15.jar, one some RHEL, I had success with replacing it with commons-codec-1.16.0.jar, but it still fails