Re: [cas-user] I'm getting a PlatformTransactionManager related exception every time I try to load /cas

2024-08-07 Thread Dmitriy Kopylenko
availability/High-Availability-Guide.html D. On Wed, Aug 7, 2024 at 1:09 PM David Reagan wrote: > Ok, thanks. Would that be something to post on github as a bug report? > > On Wednesday, August 7, 2024 at 9:19:56 AM UTC-7 Dmitriy Kopylenko wrote: > >> I haven’t looked closely

Re: [cas-user] I'm getting a PlatformTransactionManager related exception every time I try to load /cas

2024-08-07 Thread Dmitriy Kopylenko
module helped? > > I'm still testing things, but I thought having sessions stored in the db > would be a good initial setup until I figured out HA. > > Thanks! > > - David > > On Wednesday, August 7, 2024 at 3:01:17 AM UTC-7 Dmitriy Kopylenko wrote: > >> Try g

Re: [cas-user] I'm getting a PlatformTransactionManager related exception every time I try to load /cas

2024-08-07 Thread Dmitriy Kopylenko
Try getting rid of this dependency from build.gradle: implementation "org.apereo.cas:cas-server-support-session-jdbc" On Tue, Aug 6, 2024 at 21:06 David Reagan wrote: > I've been trying to get a basic standalone instance of CAS set up using a > MariaDB db for storage. Just as a proof of concep

Re: [cas-user] Amazon Corretto Requirement cas 7.x.x

2024-08-01 Thread Dmitriy Kopylenko
Here's more info on Gradle's toolchain auto-detection: https://docs.gradle.org/8.9/userguide/toolchains.html#sec:auto_detection D. On Thu, Aug 1, 2024 at 9:24 AM Dmitriy Kopylenko wrote: > There's is this setting in gradle.properties: > > > > > > *# This p

Re: [cas-user] Amazon Corretto Requirement cas 7.x.x

2024-08-01 Thread Dmitriy Kopylenko
ds/5134ac7a54914eeb21d2b27139d19684/redirect> > 96.2 MiB/291.1 MiB* ... D. On Thu, Aug 1, 2024 at 8:56 AM Dmitriy Kopylenko wrote: > Something is messing with the build in your environment. Did you use > completely fresh overlay? > > D. > > On Thu, Aug 1, 2024 at 08:02 would

Re: [cas-user] Amazon Corretto Requirement cas 7.x.x

2024-08-01 Thread Dmitriy Kopylenko
usr/lib/jvm/zulu-21-amd64/ > > Wouldsmina > > Le jeu. 1 août 2024 à 04:56, AJ a écrit : > >> I’ve built it successfully with just OpenJDK. >> >> >> On Jul 31, 2024, at 3:21 PM, Dmitriy Kopylenko >> wrote: >> >>  >> Not actually th

Re: [cas-user] Amazon Corretto Requirement cas 7.x.x

2024-07-31 Thread Dmitriy Kopylenko
Not actually the case. Here's the successful build of overlay template (7.1.0-SNAPSHOT), freshly cloned from here: https://github.com/apereo/cas-overlay-template JDK 21 from Zulu: *> java -version* *openjdk version "21.0.4" 2024-07-16 LTSOpenJDK Runtime Environment Zulu21.36+17-CA (build 21.0

Re: [cas-user] Installing CAS 7 on Debian 12

2024-07-31 Thread Dmitriy Kopylenko
You have JRE. You need to install JDK (which includes javac compiler) D. On Wed, Jul 31, 2024 at 08:20 wouldsmina wrote: > Hello Ray, > > $ java --version > > java 21.0.4 2024-07-16 LTS > Java(TM) SE Runtime Environment (build 21.0.4+8-LTS-274) > Java HotSpot(TM) 64-Bit Server VM (build 21.0.4+

Re: [cas-user] gradlew command to generate cas.properties with all options...?

2024-07-24 Thread Dmitriy Kopylenko
./gradlew generateConfigMetadata You could view a list of tasks available by ./gradlew tasks Cheers, D. On Wed, Jul 24, 2024 at 19:30 'Matthew Gordon' via CAS Community < cas-user@apereo.org> wrote: > Hello, > > I am pretty certain a command exists to do this, but I can not for the > life of me

Re: [cas-user] How to implement DelegatedClientAuthenticationHandler class in cas v6.6.15

2024-06-27 Thread Dmitriy Kopylenko
Is this the class you're looking for? https://github.com/apereo/cas/blob/v6.6.15.1/support/cas-server-support-pac4j-core-clients/src/main/java/org/apereo/cas/support/pac4j/authentication/handler/support/DelegatedClientAuthenticationHandler.java Cheers, D. On Thu, Jun 27, 2024 at 1:41 PM Danielo D

Re: [cas-user] Help With Performance Optimisation. CAS 6.6.x

2024-02-12 Thread Dmitriy Kopylenko
9.8.0 > > On Monday, February 12, 2024 at 6:37:06 PM UTC+5:30 Dmitriy Kopylenko > wrote: > >> Which exact version of CAS (and the embedded Tomcat that it carries)? >> >> D. >> >> On Mon, Feb 12, 2024 at 06:49 Vaibhav GPT wrote: >> >>&g

Re: [cas-user] Help With Performance Optimisation. CAS 6.6.x

2024-02-12 Thread Dmitriy Kopylenko
Which exact version of CAS (and the embedded Tomcat that it carries)? D. On Mon, Feb 12, 2024 at 06:49 Vaibhav GPT wrote: > Thank you Ron for the information but I have found the issue. > > Looks like the embedded tomcat in CAS is responsible for high cpu usage. > When I switched to a standalon

Re: [cas-user] MFA User Selection Menu in CAS v7.0

2024-01-10 Thread Dmitriy Kopylenko
about it in > documentation > في الثلاثاء، 9 يناير 2024 في تمام الساعة 11:49:31 ص UTC، كتب Dmitriy > Kopylenko رسالة نصها: > >> Hi. >> >> The namespace for the property has changed in version 7: >> >> cas.authn.mfa.core.provider-selection.provider-selection-enabled=

Re: [cas-user] MFA User Selection Menu in CAS v7.0

2024-01-09 Thread Dmitriy Kopylenko
The formatting didn’t work. The updated property namespace is: cas.authn.mfa.core.provider-selection.provider-selection-enabled On Tue, Jan 9, 2024 at 06:18 Dmitriy Kopylenko wrote: > Hi. > > The namespace for the property has changed in version 7: > > cas.authn.mf

Re: [cas-user] MFA User Selection Menu in CAS v7.0

2024-01-09 Thread Dmitriy Kopylenko
Hi. The namespace for the property has changed in version 7: cas.authn.mfa.core.provider-selection.provider-selection-enabled=true as.authn.mfa.core.provider-selection.provider-selection-enabled=true Cheers, D. On Tue, Jan 9, 2024 at 05:33 Mm Mm wrote: > in cas v 6.6 there is a configurati

Re: [cas-user] CAS6 SAML usernameAttribute

2023-10-23 Thread Dmitriy Kopylenko
day, October 23, 2023 at 3:21:21 PM UTC-4 Dmitriy Kopylenko wrote: > >> Hi. >> >> Try this: >> >> usernameAttributeProvider: >> { >> @class: >> org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider >> username

Re: [cas-user] CAS6 SAML usernameAttribute

2023-10-23 Thread Dmitriy Kopylenko
Hi. Try this: usernameAttributeProvider: { @class: org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider usernameAttribute: mail } D. On Mon, Oct 23, 2023 at 2:53 PM atilling wrote: > Working on a SAML integration where the subject needs to be the user's > em

Re: [cas-user] CAS Security Releases/Patches

2023-09-19 Thread Dmitriy Kopylenko
Hi Baron. It’s the “binary only” release hidden from repo before the security “grace period” has passed. >From that post: "All source code and repository tags that contain fixes for this issue are kept privately until the grace period has passed. Note that repository tags are generally irrelevant

Re: [cas-user] requiredIpAddresses specification?

2023-02-23 Thread Dmitriy Kopylenko
> > • < > https://www.javadoc.io/doc/org.apereo.cas/cas-server-core-api-configuration-model/latest/org/apereo/cas/configuration/model/core/monitor/ActuatorEndpointProperties.EndpointAccessLevel.html > > > > Which I think are for the master branch? > > On Thu, Feb 23, 2023 at 2:

Re: [cas-user] requiredIpAddresses specification?

2023-02-23 Thread Dmitriy Kopylenko
el/core/monitor/ActuatorEndpointProperties.html > > > > But I don't see the comment you provided as an example. > > > > On Wed, Feb 22, 2023 at 5:00 AM Dmitriy Kopylenko > wrote: > >> Hello. >> >> There is a useful Gradle task available which would gen

Re: [cas-user] requiredIpAddresses specification?

2023-02-22 Thread Dmitriy Kopylenko
Hello. There is a useful Gradle task available which would generate the properties file containing ALL CAS’ properties along with documentation comments for each. Then one could use search in that file to see what’s available. To run it, simply execute ./gradlew exportConfigMetadata from the root

Re: [cas-user] how to customize a filter used in CAS?

2022-10-17 Thread Dmitriy Kopylenko
One other way to accomplish this is to disable CAS filer by setting `cas.http-web-request.header` property to false, and then to enable your version of this bean in your own configuration class by making sure it’s recognized by Spring by advertising it in META-INF/spring.factories file in your ove

Re: [cas-user] Re: Upgrade from CAS 6.5 to 6.6

2022-10-13 Thread Dmitriy Kopylenko
This is related to deprecation of RegexRegisteredService type as described here in the released notes: https://apereo.github.io/cas/6.6.x/release_notes/RC3.html#cas-registered-services If you are using JSON service registry, make sure to change all the service types from RegexRegisteredService to

Re: [cas-user] CAS 6.4.x with SPNEGO, "Factory method 'spnegoAuthentications' threw exception"

2021-09-03 Thread Dmitriy Kopylenko
Hi there. The error points to this line: https://github.com/apereo/cas/blob/master/support/cas-server-support-spnego/src/main/java/org/apereo/cas/config/SpnegoConfiguration.java#L68 where it calls Spring resource loader abstraction to load Kerboros config file and apparently the resource represen

Re: [cas-user] CAS 6.4.x with SPNEGO, "Factory method 'spnegoAuthentications' threw exception"

2021-09-02 Thread Dmitriy Kopylenko
Hi. If you could post the entire stack trace, that would help to see what might be misconfigured. Cheers, D. On Sep 2, 2021 at 09:31:17, Thierry MURGUE wrote: > Hi all, > > I have a working conf with SPNEGO for CAS 6.2.x (last tried 6.2.8). > > I’ve tried for 2 days to do the same with the ne

Re: [cas-user] How to release eduPersonTargetedID in correct format

2021-05-10 Thread Dmitriy Kopylenko
Hi there. Simply put, currently CAS server does not support encoding attribute values as nested SAML2XMLObject, just like that nested NameID value as required by eduPersonTargetedID spec. Best, D. On May 10, 2021 at 11:01:30, Marcin Roman wrote: > Thanks for your help, but it does not suffice

Re: [cas-user] TGT timeout issue with v5.3.5

2020-12-01 Thread Dmitriy Kopylenko
Hi Dave. I was just wondering, is there any reason you’d not go to the latest CAS v 6.x, as 5.x is EOL? Best, D. On Dec 1, 2020 at 13:10:26, Dave Steiner wrote: > > We are upgrading to v5.3.5 and I was just testing the TGT timeout. I am > using hazelcast and have the following settings: > >

Re: [cas-user] HandlerResult

2020-10-21 Thread Dmitriy Kopylenko
sManager, principalFactory, order); > } > > @Override > protected HandlerResult authenticateUsernamePasswordInternal( > final > UsernamePasswordCredential credential, > final > String originalPassword)

Re: [cas-user] HandlerResult

2020-10-21 Thread Dmitriy Kopylenko
Hi there. Which stub code example? You’d want to make sure you implement the correct SPI for AuthenticationHandler, which is this: https://github.com/apereo/cas/blob/6.2.x/api/cas-server-core-api-authentication/src/main/java/org/apereo/cas/authentication/AuthenticationHandler.java Best, D. On

RE: [cas-user] Cas 6.1.x Web Flow Customization

2020-05-07 Thread Dmitriy Kopylenko
resources/webflow/login folder but code not execute this file login page rendered from somewhere else.   Please suggest solution so I can write my custom code in login-webflow.xml page.   From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Dmitriy Kopylenko Sent: 07 May 2020 0

Re: [cas-user] JDBC Connection Pooling

2020-05-07 Thread Dmitriy Kopylenko
Indeed, that might be a good idea to reuse a global DataSource for all Jdbc attributes repos. Currently it’s only possible if you have a globally defined JNDI-bound DataSource (but who does JNDI these days?) ;-)  As could be seen here:  https://github.com/apereo/cas/blob/master/support/cas-serve

Re: [cas-user] Cas 6.1.x Web Flow Customization

2020-05-07 Thread Dmitriy Kopylenko
Hi there. I’d suggest you be a bit more specific regarding what you are trying to accomplish. Best, D. On May 7, 2020 at 04:16:28, 'Suhas Bansude' via CAS Community (cas-user@apereo.org) wrote: I am using cas 6.1.x version . I am trying to configure login web flow. Please help with -- - W

Re: [cas-user] Custom AUP Implementation

2020-03-11 Thread Dmitriy Kopylenko
The best way to implement AUP flow customizations would be through a pluggable Groovy script which CAS will use for 2 phases - verification and recording of acceptance fact:  https://apereo.github.io/cas/6.1.x/webflow/Webflow-Customization-AUP.html#groovy So you could do the additional work nee

Re: [cas-user] SAML Delegated Authentication Auto Redirect

2020-03-11 Thread Dmitriy Kopylenko
Set this flag to true: ${configurationKey}.autoRedirect=true where configurationKey is your pac4j client prefix path of interest. https://apereo.github.io/cas/6.0.x/configuration/Configuration-Properties-Common.html#delegated-authentication-settings Cheers, D. On March 11, 2020 at 03:57:17, Joh

Re: [cas-user] 6.2.x Gradle Compilation

2020-02-11 Thread Dmitriy Kopylenko
ies file. > > I have made it No changes. (http 404) > > Please note I do not have a json file in the /etc/cas/services directory yet. > > Jérémie > > > Le mardi 11 février 2020 15:34:45 UTC+1, Dmitriy Kopylenko a écrit : > > Hi there. > > > > K

Re: [cas-user] 6.2.x Gradle Compilation

2020-02-11 Thread Dmitriy Kopylenko
ok 13.924 secs. > > > > > > > > > > FAILURE: Build failed with an exception. > > > > > > > > > > * Where: > > > > > Script '/home//bin/cas-overlay-template-6.2/gradle/tasks.gradle' > > > > > line: 6

Re: [cas-user] 6.2.x Gradle Compilation

2020-01-31 Thread Dmitriy Kopylenko
> > > > > > I have changed my gradle.properties > > > > > to cas.version=6.2.0-RC2 > > > > > (I copied it right from the posting. ) > > > > > > > > > > and I get: > > > > > > > > > > C

Re: [cas-user] Re: CAS 6.x Error while deploying cas.war in tomcat

2020-01-08 Thread Dmitriy Kopylenko
Wednesday, November 13, 2019 at 8:58:43 AM UTC-5, Dmitriy Kopylenko wrote: For what it's worth - if anyone is deploying CAS 6.1 to external Tomcat versions that do not have the newer API, and do not want to either upgrade Tomcat or use CAS in the embedded mode, add this line to your cas.prope

Re: [cas-user] 6.2.x Gradle Compilation

2020-01-02 Thread Dmitriy Kopylenko
docs.gradle.org/6.0.1/userguide/command_line_interface.html#sec:command_line_warnings Thank you, Jérémie Le jeudi 2 janvier 2020 14:24:48 UTC+1, Dmitriy Kopylenko a écrit : Hi there. Change version of CAS to 6.2 RC2 in gradle.properties like so: cas.version=6.2.0-RC2 Best, D. From: Jérémie Pilette Rep

Re: [cas-user] 6.2.x Gradle Compilation

2020-01-02 Thread Dmitriy Kopylenko
Hi there. Change version of CAS to 6.2 RC2 in gradle.properties like so: cas.version=6.2.0-RC2 Best, D. From: Jérémie Pilette Reply: cas-user@apereo.org Date: January 2, 2020 at 7:57:00 AM To: CAS Community Subject:  [cas-user] 6.2.x Gradle Compilation Hi everybody, I have a problem with

Re: [cas-user] Re: CAS 6.x Error while deploying cas.war in tomcat

2019-11-13 Thread Dmitriy Kopylenko
For what it's worth - if anyone is deploying CAS 6.1 to external Tomcat versions that do not have the newer API, and do not want to either upgrade Tomcat or use CAS in the embedded mode, add this line to your cas.properties ->  spring.autoconfigure.exclude=org.springframework.boot.autoconfigure.w

Re: [cas-user] CAS 5.3.12, Groovy Multifactor Policy, anyone successfully used logger/LOGGER for debugging,

2019-09-26 Thread Dmitriy Kopylenko
There is no logger instance available to your Groovy class. You’ll have to create an instance yourself e.g. static final org.slf4j.Logger log = org.slf4j.LoggerFactory.getLogger(GroovyMultifactorPolicy) Best, D. From: randomuser878 Reply: cas-user@apereo.org Date: September 26, 2019 at 9:57

Re: [cas-user] OpenID Connect issues

2019-09-24 Thread Dmitriy Kopylenko
why did it persist after I restarted the service? On Tuesday, September 24, 2019 at 10:59:05 AM UTC-4, Shawn Cutting wrote: cas.authn.oidc.jwksFile=file:/etc/cas/keystore.jwks On Tuesday, September 24, 2019 at 10:57:02 AM UTC-4, Dmitriy Kopylenko wrote: What is the value of cas.authn.oidc.jwksFile

Re: [cas-user] OpenID Connect issues

2019-09-24 Thread Dmitriy Kopylenko
What is the value of cas.authn.oidc.jwksFile property? D. From: Shawn Cutting Reply: cas-user@apereo.org Date: September 24, 2019 at 10:49:24 AM To: CAS Community Subject:  [cas-user] OpenID Connect issues I am trying to setup CAS to function as an OpenID provider, and am running into a r

Re: [cas-user] Re: [CAS 6.0] Attribute Mappings to SAML Identifiers Broken in CAS 6.0

2019-08-08 Thread Dmitriy Kopylenko
Just confirmed - fixed in 6.1.0-RC4 Best, D. From: Josh G Reply: cas-user@apereo.org Date: July 31, 2019 at 11:10:11 AM To: CAS Community Subject:  [cas-user] Re: [CAS 6.0] Attribute Mappings to SAML Identifiers Broken in CAS 6.0 Has anyone else experienced this issue? This is holding up

Re: [cas-user] Where is AbstractCasWebflowConfigurer

2019-04-25 Thread Dmitriy Kopylenko
Add a maven dependency on cas-server-core-webflow-api module. Best, D. From: Michael MacEachran Reply: cas-user@apereo.org Date: April 24, 2019 at 10:48:37 PM To: cas-user@apereo.org Subject:  [cas-user] Where is AbstractCasWebflowConfigurer According to the documentation https://apereo.g

Re: [cas-user] AuthenticationInterrupt + Groovy + autoRedirect

2019-01-30 Thread Dmitriy Kopylenko
n ( DOSI ) Pôle Infrastructures Université d'Avignon et des Pays de Vaucluse Tèl : 04.90.16.26.04 -- De: "Dmitriy Kopylenko" À: "cas-user" Envoyé: Mercredi 30 Janvier 2019 16:13:02 Objet: Re: [cas-user] AuthenticationInterrupt + Groovy + autoRedirect Hi. there are getters setter

Re: [cas-user] AuthenticationInterrupt + Groovy + autoRedirect

2019-01-30 Thread Dmitriy Kopylenko
Direction Opérationnelle des Systèmes d'Information ( DOSI ) Pôle Infrastructures Université d'Avignon et des Pays de Vaucluse Tèl : 04.90.16.26.04 -- De: "Dmitriy Kopylenko" À: "cas-user" Envoyé: Mercredi 30 Janvier 2019 15:47:37 Objet: Re: [cas-user] AuthenticationInt

Re: [cas-user] AuthenticationInterrupt + Groovy + autoRedirect

2019-01-30 Thread Dmitriy Kopylenko
Hi, can you post an example of your Groovy interrupt script - how you construct and return InterrupResponse object in particular. Cheers, D. From: Sébastien B Reply: cas-user@apereo.org Date: January 30, 2019 at 9:26:25 AM To: CAS Community Subject:  [cas-user] AuthenticationInterrupt + Gro

Re: [cas-user] [6.x] [REST Protocol] [Request a Service Ticket] HTTP 200 - empty body

2019-01-29 Thread Dmitriy Kopylenko
Hi, there was one custom HttpMessageConverter added in 6.0 which messes up with the body of a response on the way back during content negotiation (if by default Accept header value is set to */*):  https://github.com/apereo/cas/blob/master/core/cas-server-core-services-api/src/main/java/org/aper

Re: [cas-user] CAS 6.1.0-RC2 JWT error

2019-01-15 Thread Dmitriy Kopylenko
=28800 cas.ticket.tgt.hardTimeout.timeToKillInSeconds=28800 cas.ticket.tgt.throttledTimeout.timeToKillInSeconds=28800 cas.ticket.tgt.throttledTimeout.timeInBetweenUsesInSeconds=5 On Tuesday, January 15, 2019 at 1:36:26 PM UTC-6, Dmitriy Kopylenko wrote: What’s the value of your tgt expiration

[cas-user] CAS client auto config support 2.1.0

2018-11-01 Thread Dmitriy Kopylenko
Folks, The CAS client auto config support 2.1.0 has been released (depends on the latest Java CAS client 3.5.1):  https://github.com/Unicon/cas-client-autoconfig-support Cheers, D. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: htt

[cas-user] Java CAS client 3.5.1

2018-11-01 Thread Dmitriy Kopylenko
Folks, the Java CAS client version 3.5.1 has been released:  https://github.com/apereo/java-cas-client/releases/tag/cas-client-3.5.1 Cheers, D. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: ht

Re: [cas-user] Rerequesting CAS attributes

2018-10-31 Thread Dmitriy Kopylenko
You might want to look into and configure attribute caching policy such that it will basically re-resolve them from attribute sources every time ST gets validated, hence you’ll get a fresh set of attributes every time CAS ST validation protocol dance happens: https://apereo.github.io/cas/5.2.x/

Re: [cas-user] Re: CAS 5.2.0 How to configure cas in that way so that it listen to HTTP?

2018-10-04 Thread Dmitriy Kopylenko
This might help:  https://apereo.github.io/cas/5.3.x/planning/Security-Guide.html#secure-transport-https Cheers, D. From: Pedro Rosas Silva Reply: cas-user@apereo.org Date: October 4, 2018 at 1:44:06 PM To: cas-user@apereo.org Subject:  Re: [cas-user] Re: CAS 5.2.0 How to configure cas in tha

Re: [cas-user] How to enable MFA by service rather than globally

2018-09-21 Thread Dmitriy Kopylenko
You could always do a custom Groovy script trigger which will be executed and its outcome examined by CAS for each authentication transaction to decide whether to trigger any mfa transaction or not:  https://apereo.github.io/cas/5.3.x/installation/Configuring-Multifactor-Authentication-Triggers.h

Re: [cas-user] Error in CAS Management(5.2) app after authentication with the CAS Server (5.3.2)

2018-08-24 Thread Dmitriy Kopylenko
This might help  https://apereo.github.io/cas/development/installation/Troubleshooting-Guide.html#no-subject-alternative-names D. From: vivekanand yaram Reply: cas-user@apereo.org Date: August 24, 2018 at 10:00:46 AM To: cas-user@apereo.org Subject:  Re: [cas-user] Error in CAS Management(5.2

RE: [cas-user] RE: CAS 5 SAML2 Azure AD delegated authentication

2018-08-08 Thread Dmitriy Kopylenko
cas.properties file, CAS doesn’t start.   Lynn Dickison   From: cas-user@apereo.org On Behalf Of Dmitriy Kopylenko Sent: Tuesday, August 7, 2018 10:53 AM To: cas-user@apereo.org Subject: Re: [cas-user] RE: CAS 5 SAML2 Azure AD delegated authentication   You could try cas.authn.pac4j.saml[0

Re: [cas-user] RE: CAS 5 SAML2 Azure AD delegated authentication

2018-08-07 Thread Dmitriy Kopylenko
You could try cas.authn.pac4j.saml[0].useNameQualifier=false Best, D. From: Dickison, Lynn E Reply: cas-user@apereo.org Date: August 7, 2018 at 9:53:30 AM To: cas-user@apereo.org Subject:  [cas-user] RE: CAS 5 SAML2 Azure AD delegated authentication I saw on another posting that someone el

Re: [cas-user] CAS 5.2.3 "500:Internal Server Error" with Groovy

2018-02-22 Thread Dmitriy Kopylenko
urve there).  And it looks like there’s a CAS plugin for web flow, so I’m hoping that might be a good place to put some debugging code. Thanks, Brian On Feb 10, 2018, at 12:48 PM, Man H wrote: Indeed!! El sábado, 10 de febrero de 2018, Dmitriy Kopylenko escribió: Thanks for confirming. Sou

Re: [cas-user] CAS5.2 Connect to LDAP

2018-02-22 Thread Dmitriy Kopylenko
You might want to post relevant log entries, so folks are able to look at it and try to help you. Cheers, D. From: Kevin Liu Reply: cas-user@apereo.org Date: February 22, 2018 at 2:32:58 PM To: CAS Community Subject:  [cas-user] CAS5.2 Connect to LDAP Hello, I can't seem to make heads or

Re: [cas-user] how do I capture audit log trail for unauthorized users who are denied access to a service in an accessStrategy configuration of one of my JSON files?

2018-02-12 Thread Dmitriy Kopylenko
. Cheers, D. From: Dmitriy Kopylenko Reply: Dmitriy Kopylenko Date: February 9, 2018 at 10:06:39 AM To: cas-user@apereo.org Subject:  Re: [cas-user] how do I capture audit log trail for unauthorized users who are denied access to a service in an accessStrategy configuration of one of my JSON

Re: [cas-user] Issues with service registry on 5.2.2

2018-02-12 Thread Dmitriy Kopylenko
thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou thankyou .. That was driving me absolutely bonkers... On Friday, February 9, 2018 at 4:52:55 PM UTC-6, Dmitriy Kopylenko wrote: For CAS versions 5.2+ use

Re: [cas-user] CAS 5.2.3 "500:Internal Server Error" with Groovy

2018-02-10 Thread Dmitriy Kopylenko
ce. Thanks! Brian On Feb 10, 2018, at 11:38 AM, Dmitriy Kopylenko wrote: Let me suggest to get the Groovy script out of equation completely. Switch this groovy bypass off, and try to perform entire duo 2 factor authentication trans

Re: [cas-user] CAS 5.2.3 "500:Internal Server Error" with Groovy

2018-02-10 Thread Dmitriy Kopylenko
Let me suggest to get the Groovy script out of equation completely. Switch this groovy bypass off, and try to perform entire duo 2 factor authentication transaction. If it completes successfully and then you again enable groo

Re: [cas-user] Re: Upgrade CAS 3.5.2 to CAS 5.x

2018-02-09 Thread Dmitriy Kopylenko
So, few points. On the class names between 3 and 5 - you don’t have to worry about it anymore (well, as long as you don’t need to extend CAS and program against its internals and extension points). The general theme of CAS v5

Re: [cas-user] Issues with service registry on 5.2.2

2018-02-09 Thread Dmitriy Kopylenko
For CAS versions 5.2+ use cas.serviceRegistry.json.location property:  https://apereo.github.io/cas/development/installation/Configuration-Properties.html#json-service-registry Cheers, D. From: Christopher Myers Reply: cas-user@apereo.org Date: February 9, 2018 at 2:29:46 PM To: CAS Community

Re: [cas-user] how do I capture audit log trail for unauthorized users who are denied access to a service in an accessStrategy configuration of one of my JSON files?

2018-02-09 Thread Dmitriy Kopylenko
for me to grab and use the value of the username, the tomcat access log would capture the denied attempt for me. Carl On Friday, February 9, 2018 at 10:06:44 AM UTC-5, Dmitriy Kopylenko wrote:The short answer is - there is currently no audit trail advice weaved at the audit point you are after

Re: [cas-user] how do I capture audit log trail for unauthorized users who are denied access to a service in an accessStrategy configuration of one of my JSON files?

2018-02-09 Thread Dmitriy Kopylenko
The short answer is - there is currently no audit trail advice weaved at the audit point you are after. Best, D. From: crdaudt Reply: cas-user@apereo.org Date: February 9, 2018 at 10:00:18 AM To: CAS Community Subject:  Re: [cas-user] how do I capture audit log trail for unauthorized users

Re: [cas-user] CAS REST API - ST on SAML protected services

2018-01-31 Thread Dmitriy Kopylenko
This should give you an idea: https://github.com/apereo/cas/blob/master/support/cas-server-support-saml-core/src/main/java/org/apereo/cas/support/saml/SamlProtocolConstants.java#L23 https://github.com/apereo/cas/blob/master/support/cas-server-support-saml/src/main/java/org/apereo/cas/support/saml

Re: [cas-user] Inspektr audit says AUTHENTICATION_SUCCESS on authentication failures

2018-01-23 Thread Dmitriy Kopylenko
https://github.com/apereo/inspektr D. On Tue, Jan 23, 2018 at 5:38 AM -0500, "Oscar del Pozo" wrote: There is a bug in the module inspektr-audit-1.7.1

Re: [cas-user] Upgrade CAS 3.3.5 to 4 or 5?

2017-09-06 Thread Dmitriy Kopylenko
CAS v4 is end-of-life and not officially supported, so my reccomendation would be the latest available v5. Best, D. From: Micas Camela Reply: cas-user@apereo.org Date: September 6, 2017 at 11:50:14 AM To: CAS Community Subject:  [cas-user] Upgrade CAS 3.3.5 to 4 or 5? Hi there! I have CA

Re: [cas-user] API for SSO session management?

2017-09-06 Thread Dmitriy Kopylenko
GET /status/ssosessions/getSsoSessions POST /status/ssosessions/destroySsoSession?ticketGrantingTicket={TGT_VALUE} Here’s a CLI example (written in Go) demonstrating the use of getSsoSessions and getAvailability endpoints: https://github.com/cas-projects/casctl D. From: Waldbieser, Carl Reply:

Re: [cas-user] Where exactly can views be found?

2017-07-20 Thread Dmitriy Kopylenko
ged the property to spring.thymeleaf.prefix=file:/etc/cas/config/templates, this seems to have worked, but now if I don't include every template blows up instead of using the default one. On Thursday, July 20, 2017 at 10:59:33 AM UTC-5, Dmitriy Kopylenko wrote: There is no such directory in the overla

Re: [cas-user] Where exactly can views be found?

2017-07-20 Thread Dmitriy Kopylenko
There is no such directory in the overlay. You need to create one i.e. src/main/resources/templates and then copy the default templates that you are going to be modifying from here:  https://github.com/apereo/cas/tree/master/webapp/resources/templates and off you go. Cheers, D. From: Toby Arc

Re: [cas-user] X509 principal resolver to extract substring from CN

2017-07-17 Thread Dmitriy Kopylenko
You’d want to do something like this: 1) Define your own impl of the principal resolver that does the parsing of CN 2) Plug that in via re-defining the x509AuthenticationEventExecutionPlanConfigurer bean. Here’s the current bean definition for you to serve as an example:  https://github.com/aper

Re: [cas-user] Managing access to which services/websites users have access to when using SSO

2017-07-06 Thread Dmitriy Kopylenko
https://apereo.github.io/cas/development/installation/Configuring-Service-Access-Strategy.html D. From: Roy Langa Reply: cas-user@apereo.org Date: July 6, 2017 at 10:06:26 AM To: CAS Community Subject:  [cas-user] Managing access to which services/websites users have access to when using SSO

Re: [cas-user] Release Attributes from LDAP Authentication

2017-06-30 Thread Dmitriy Kopylenko
Correct - i.e. CAS server implementation of CAS protocol v2 does not provide support for principal attributes. Cheers, D. From: David Huebner Reply: David Huebner Date: June 30, 2017 at 8:40:05 AM To: Dmitriy Kopylenko , cas-user@apereo.org Subject:  Re: [cas-user] Release Attributes from

Re: [cas-user] Release Attributes from LDAP Authentication

2017-06-30 Thread Dmitriy Kopylenko
If your client is using CAS protocol version 2 for service ticket validation, they will not receive any attributes as protocol v2 does not support it. Switch to protocol version 3 in order to receive principal attributes. https://apereo.github.io/cas/5.1.x/protocol/CAS-Protocol.html Cheers, D.

Re: [cas-user] How to configure / inject DataSource into AbstractUsernamePasswordAuthenticationHandler (CAS 5.1)

2017-06-28 Thread Dmitriy Kopylenko
You could follow an example of the Jdbc authn handler configuration:  https://github.com/apereo/cas/blob/master/support/cas-server-support-jdbc/src/main/java/org/apereo/cas/adaptors/jdbc/config/CasJdbcAuthenticationConfiguration.java Cheers, D. From: 'Adalbert Schwafel' via CAS Community Reply:

Re: [cas-user] [CAS 5.0.1] Unable to browse any link of my CAS Client web application after successful user authentication through CAS Server

2017-06-20 Thread Dmitriy Kopylenko
Hi there. For a simpler CASification of Spring Boot apps via CAS Java client (without much configuration ceremony), you might want to try this ->  https://github.com/Unicon/cas-client-autoconfig-support And here’s a sample Boot app demonstrating the use of this library ->  https://github.com/cas-

Re: [cas-user] custome passwordEncoder in CAS 5.1

2017-05-17 Thread Dmitriy Kopylenko
rsion=NONE #cas.authn.jdbc.query[0].principalTransformation.prefix= But I go this  : [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -   ANd I don t see my passwordEncrypt logs Le mercredi 17 mai 2017 15:08:23 UTC+2, Dmitriy Kopylenko a écrit : Wrong link. Use this one:  https://apereo

Re: [cas-user] custome passwordEncoder in CAS 5.1

2017-05-17 Thread Dmitriy Kopylenko
Wrong link. Use this one:  https://apereo.github.io/cas/development/installation/Configuration-Properties.html#database-authentication From: Dmitriy Kopylenko Reply: Dmitriy Kopylenko Date: May 17, 2017 at 9:07:24 AM To: cas-user@apereo.org Subject:  Re: [cas-user] custome passwordEncoder in

Re: [cas-user] custome passwordEncoder in CAS 5.1

2017-05-17 Thread Dmitriy Kopylenko
In 5.1 you do it by means of the following property: cas.authn.jdbc.query[0].passwordEncoder.type=com.example.CustomPasswordEncoder https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#database-authentication Cheers, D. From: Mathieu Plasse Reply: cas-user@apereo.org

Re: [cas-user] externalize bootstrap.properties config

2017-05-15 Thread Dmitriy Kopylenko
http://cloud.spring.io/spring-cloud-static/spring-cloud.html#customizing-bootstrap-properties D. From: Nader Karimi Reply: cas-user@apereo.org Date: May 15, 2017 at 11:26:11 AM To: CAS Community Subject:  [cas-user] externalize bootstrap.properties config Is it possible to place bootstrap.

Re: [cas-user] Extending CAS 5 Webflows - build instructions?

2017-05-12 Thread Dmitriy Kopylenko
Try this one for the info on configuration mechanism:  https://apereo.github.io/2017/02/21/cas-autocfg-strategy/ Note, this applies to CAS 5.1. In CAS 5.0.x line, the configuration classes are contributed to Spring app ctx. by means of component scanning, so in order for CAS to pick ‘em up in 5.

Re: [cas-user] attribute alias in CAS 5?

2017-05-05 Thread Dmitriy Kopylenko
You could try to use per-service mapped attribute release policy:  https://apereo.github.io/cas/5.0.x/integration/Attribute-Release-Policies.html#return-mapped D. From: Adam Causey Reply: cas-user@apereo.org Date: May 5, 2017 at 1:15:21 PM To: cas-user@apereo.org Subject:  [cas-user] attribut

Re: [cas-user] Overloading Bean Configuration does not work in 5.0.4

2017-05-04 Thread Dmitriy Kopylenko
:-( This means I need to overlay the whole CasValidationConfiguration bean. Am 04.05.2017 um 17:46 schrieb Dmitriy Kopylenko : The reason is that currently serviceValidateController bean in CAS is not @ConditionalOnMissingBean D. From: robertoschwald  Reply: cas-user@apereo.org  Date: May 4, 2017 at

Re: [cas-user] Overloading Bean Configuration does not work in 5.0.4

2017-05-04 Thread Dmitriy Kopylenko
The reason is that currently serviceValidateController bean in CAS is not @ConditionalOnMissingBean D. From: robertoschwald Reply: cas-user@apereo.org Date: May 4, 2017 at 11:40:26 AM To: CAS Community Subject:  [cas-user] Overloading Bean Configuration does not work in 5.0.4 I need to ov

Re: [cas-user] REST authentication and attributes

2017-04-06 Thread Dmitriy Kopylenko
Currently in both 5.0.x and master branches, the configuration for the REST authn handler “blindly" sets the person directory principal resolver, disregarding any attributes returned from the remote HTTP resource: https://github.com/apereo/cas/blob/5.0.x/support/cas-server-support-rest-authentic

Re: [cas-user] Tutorial for custom DB authentication with 5.1 (or 5.0)

2017-03-20 Thread Dmitriy Kopylenko
This might help -> https://apereo.github.io/2017/02/02/cas51-authn-handlers/ Cheers, D. From: 'Adalbert Schwafel' via CAS Community Reply: cas-user@apereo.org Date: March 20, 2017 at 6:41:56 AM To: CAS Community Subject:  [cas-user] Tutorial for custom DB authentication with 5.1 (or 5.0) D

Re: [cas-user] Custom Yubikey registry

2017-03-09 Thread Dmitriy Kopylenko
Which version of CAS? D. From: Dimitri Gavrilov Reply: cas-user@apereo.org Date: March 9, 2017 at 6:46:41 AM To: CAS Community Subject:  [cas-user] Custom Yubikey registry Hello community,   Have anyone already implemented custom YubiKeyAccountRegistry and compiled it into the CAS?  

Re: [cas-user] SAML setup

2017-03-08 Thread Dmitriy Kopylenko
Add this repository to your overlay’s pom: shibboleth-releases https://build.shibboleth.net/nexus/content/repositories/releases D. From: John Wynstra Reply: cas-user@apereo.org Date: March 7, 2017 at 3:15:07 PM To: cas-user@apereo.org Subject:  [cas-user] SAML setup

Re: [cas-user] Re: Attributes in Rest Authentication 5.0.1

2017-03-01 Thread Dmitriy Kopylenko
Use version 5.1.0-RC2 or 5.0.3.1 in your overlay. Cheers, D. From: Ivan Cordon Reply: cas-user@apereo.org Date: March 1, 2017 at 8:31:12 AM To: CAS Community Subject:  [cas-user] Re: Attributes in Rest Authentication 5.0.1 I think this bug is related with my issue: https://github.com/aper

Re: [cas-user] Re: Cas 5.x on WildFly

2017-02-23 Thread Dmitriy Kopylenko
Try this:  http://docs.spring.io/spring-boot/docs/1.5.1.RELEASE/reference/htmlsingle/#howto-create-a-deployable-war-file that is - exclude embedded tomcat from either Maven or Gradle overlay build as described there. D. From: Gokhan Mansuroglu Reply: cas-user@apereo.org Date: February 23,

Re: [cas-user] CAS/Sprint Security Issue

2017-02-19 Thread Dmitriy Kopylenko
Bring in bootstrap.properties into your Maven/Gradle overlay’s src/main/resources and UNSET this property ->  https://github.com/apereo/cas/blob/5.0.x/webapp/cas-server-webapp/src/main/resources/bootstrap.properties#L24 Note to devs - perhaps we should unset this property by default to not to ex

Re: [cas-user] Cas 5.0.2 et Cas Services Management : tables containing services registry are deleted every time I stop tomcat

2017-02-18 Thread Dmitriy Kopylenko
Make sure that this property is set to “update”: cas.serviceRegistry.jpa.ddlAuto=update Or even better, in production never rely on this Hibernate feature to mess with your DB schema during bootstrap. I’d recommend, creating the schema via this Hibernate mechanism once in dev/test environment t

Re: [cas-user] Setting up CAS 5.0.2 Server and Banner XE 404 cas/samlValidate?

2017-02-13 Thread Dmitriy Kopylenko
https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#ldap-authentication  see lines 16-20 From: Dmitriy Kopylenko Reply: Dmitriy Kopylenko Date: February 13, 2017 at 12:17:38 PM To: cas-user@apereo.org Subject:  Re: [cas-user] Setting up CAS 5.0.2 Server and Banner XE

Re: [cas-user] Setting up CAS 5.0.2 Server and Banner XE 404 cas/samlValidate?

2017-02-13 Thread Dmitriy Kopylenko
Are you “resolving” the attributes?  https://apereo.github.io/cas/5.0.x/integration/Attribute-Resolution.html There are 2 pieces to attributes in CAS: 1) resolution, 2) release. First you need to resolve them from the target authentication store (or some other attribute repository), then release

RE: [cas-user] Error starting CAS 5.x (conflicting module versions, Groovy)

2017-02-06 Thread Dmitriy Kopylenko
I just want to add to what Misagh said. If you have this in your cas/build.gradle: apply from: 'https://raw.githubusercontent.com/apereo/cas/master/gradle/overrides.gradle’ change it to apply from: 'https://raw.githubusercontent.com/apereo/cas/5.0.x/gradle/overrides.gradle’ Cheers, D. From: M

  1   2   3   >