[cas-user] LDAPS Connection Setup Issues with CAS 6.6.3

2023-03-29 Thread Michael Santangelo
Hello all, I reposted this because I goofed and didn't sanitize all the hostnames. I've got CAS working fine with LDAP and now I'm trying to push hard to get it to work with LDAPS. I've got a JKS store, /etc/cas/keys/store which is a JKS file, containing two keys: PDC-CA.FQDN public

[cas-user] CAS 6.6.3 - LDAPS

2023-03-28 Thread Michael Santangelo
Hello all, I've got CAS working fine with LDAP and now I'm trying to push hard to get it to work with LDAPS. I've got a JKS store, /etc/cas/keys/store which is a JKS file, containing two keys: PDC-CA.FQDN public certificate VDC.FQDN public certificate issued from PDC-CA In my cas.properties I

Re: [cas-user] Upgrading Tomcat?

2022-11-29 Thread Michael Santangelo
manually (sigh) copy in the differences. > > Ray > > On Tue, 2022-11-29 at 12:50 -0800, Michael Santangelo wrote: > > Notice: This message was sent from outside the University of Victoria > email system. Please be cautious with links and sensitive information. > > > I'm not sure

Re: [cas-user] Upgrading Tomcat?

2022-11-29 Thread Michael Santangelo
/11/2022 22:51, Michael Santangelo wrote: > > Hello all, > > > > Is there any way to upgrade the Tomcat version included with CAS > independently of upgrading CAS itself? > > > > We are currently running Tomcat 9.0.58 that appears to be bundled with > CAS, a

[cas-user] Upgrading Tomcat?

2022-11-26 Thread Michael Santangelo
Hello all, Is there any way to upgrade the Tomcat version included with CAS independently of upgrading CAS itself? We are currently running Tomcat 9.0.58 that appears to be bundled with CAS, and I'm trying to update to the latest 9 build (I think 0.69). I have changed the line in the

[cas-user] Re: CAS SSL - How to send SSL Certificate Chain?

2022-11-04 Thread Michael Santangelo
I solved this by just including the rest of the chain in the tomcat.jks by importing them with keytool -importkeystore -srckeystore chain.jks -destkeystore tomcat.jks. -M On Thursday, November 3, 2022 at 1:55:45 AM UTC-4 Michael Santangelo wrote: > Hello all, > > I'm struggling wit

Re: [cas-user] CAS SSL - How to send SSL Certificate Chain?

2022-11-03 Thread Michael Santangelo
gt; > Ray > > On Wed, 2022-11-02 at 12:44 -0700, Michael Santangelo wrote: > > Notice: This message was sent from outside the University of Victoria > email system. Please be cautious with links and sensitive information. > > > Hello all, > > I'm struggling with ge

Re: [cas-user] CAS SSL - How to send SSL Certificate Chain?

2022-11-03 Thread Michael Santangelo
t; more details on what it thinks is amiss. > > Ray > > On Thu, 2022-11-03 at 10:18 -0700, Michael Santangelo wrote: > > Notice: This message was sent from outside the University of Victoria > email system. Please be cautious with links and sensitive information. > > Ray, >

[cas-user] CAS SSL - How to send SSL Certificate Chain?

2022-11-02 Thread Michael Santangelo
Hello all, I'm struggling with getting CAS to send the certificate chain properly and wondering if maybe I'm using the wrong lines in the config. Before this project I had: server.ssl.key-store=file:/path/to/ssl/tomcat.jks server.ssl.key-store-password=thepassword After some googling, I added

Re: [cas-user] MFA with Duo - A Lot Of Failures

2022-02-17 Thread Michael Santangelo
alidClaimException: The Token can't > be used before Thu Feb 17 20:15:11 UTC 2022. > > I don't know about your timezone, but the minute in your log statement is > before the minute when the token can be used. Looks like you are running > about 61 seconds ahead? > > On 2/17/22 14:

[cas-user] MFA with Duo - A Lot Of Failures

2022-02-17 Thread Michael Santangelo
Hello all, We have implemented Duo as an MFA provider in CAS, and it was working great in small-scale testing. We are pushing to a larger user base to test, and are frequently getting an error upon completion of the MFA process (after the user has approved the push notification): --- MFA

Re: [cas-user] Re: CAS Management Overlay 6.5 LDAP Issues?

2022-02-08 Thread Michael Santangelo
> > Felix > Am 08.02.22 um 19:13 schrieb Michael Santangelo: > > I changed my config to: > > cas.authn.ldap[0].order=0 > cas.authn.ldap[0].name=Tech Active Directory > cas.authn.ldap[0].type=AD > cas.authn.ldap[0].ldapUrl=ldap://:389 > cas.authn.ldap[0].validatePer

[cas-user] Re: CAS Management Overlay 6.5 LDAP Issues?

2022-02-08 Thread Michael Santangelo
if I can expand it to the entire Staff OU... On Tuesday, February 8, 2022 at 11:03:31 AM UTC-5 Michael Santangelo wrote: > Hello all, > > Forgive me for this, I'm brand new to CAS and I'm trying to get LDAP > working. > > I built an Ubuntu VM and did initial setup by doing: &

Re: [cas-user] CAS Management Overlay 6.5 LDAP Issues?

2022-02-08 Thread Michael Santangelo
? > > Ray > > On Tue, 2022-02-08 at 08:00 -0800, Michael Santangelo wrote: > > Notice: This message was sent from outside the University of Victoria > email system. Please be cautious with links and sensitive information. > > > Hello all, > > Forgive me for this, I'

[cas-user] Re: CAS Management Overlay 6.5 LDAP Issues?

2022-02-08 Thread Michael Santangelo
I am modifying the file project file not the file in the local /etc folder. the full path is /home//cas-management-overlay/etc/cas/config/cas.properties On Tue, Feb 8, 2022 at 12:38 PM Pablo Vidaurri wrote: > Are you modifying the cas.properties created in /etc/cas or the one in > your project

Re: [cas-user] CAS Management Overlay 6.5 LDAP Issues?

2022-02-08 Thread Michael Santangelo
to working on these things. Do you think it would make a difference? On Tuesday, February 8, 2022 at 11:13:48 AM UTC-5 Felix Schumacher wrote: > > Am 08.02.22 um 17:00 schrieb Michael Santangelo: > > Hello all, > > Forgive me for this, I'm brand new to CAS and I'm trying to g

[cas-user] CAS Management Overlay 6.5 LDAP Issues?

2022-02-08 Thread Michael Santangelo
Hello all, Forgive me for this, I'm brand new to CAS and I'm trying to get LDAP working. I built an Ubuntu VM and did initial setup by doing: 1. git clone https://github.com/apereo/cas-overlay-template 2. I did some initial config changes in the cas.properties to get SSL up and