Re: [cas-user] username verification before check password

Hi, Not really intuitive but passwordless webflow with an attribute forcing password for everyone will look like that. Stéphane Le ven. 30 juin 2023, 12:20, Seb UNESS a écrit : > Hi, > > I want to validate username exist before validate password. > In fact, i want : > 1- page to put username

Re: [cas-user] Hazelcast not working for single node/non-clustered environment - 6.5.8

Hi, It looks like your single node cluster can see your multi node cluster and refuse to connect to it because they are not at same version of hazelcast. I think you have a mistake in your properties because you're missing the discovery :

Re: [cas-user] CAS v6.4 problem with OIDC claim name mappings in the ID Token

Hi, Do you know if this problem has been solved in 6.4.6 ? Stéphane Le lun. 31 janv. 2022, 09:22, Rodolphe Prin a écrit : > Hi, > I noticed the same behavior. > Version : 6.4.4.2 > > `cas.authn.oidc.core.include-id-token-claims=true` allows to get the > claims in the token, but with the

Re: [cas-user] same user with 2 logins and MFA

Or if you're on 6.2 you could try {uid} if I understand correctly this : https://apereo.github.io/2020/04/17/620rc4-release/#principal-resolution-via-person-directory Le jeu. 16 juil. 2020 à 14:45, Stef a écrit : > Ok I think that's your issue here. > mfaProvider is empty when your us

Re: [cas-user] same user with 2 logins and MFA

Ok I think that's your issue here. mfaProvider is empty when your username is u...@domain.name because {0} does not exist in your attribute table in that case because {0} = u...@domain.name So you could add a new entry in the table +--+-+ | uid| mfaProvider |

Re: [cas-user] deploy docker image as root instead of /cas using war overlay with cas 6.1

I think you have to use server.contextPath=/ if you're using embedded tomcat Le mer. 15 juil. 2020 à 22:42, Landon Heinrichs a écrit : > I would like the deploy of cas to be at https://myUrl.com/ instead of > https://myUrl.com/cas > > currently I'm deploying it with docker using the cas

Re: [cas-user] same user with 2 logins and MFA

Hi Patrick, Have you tried with: cas.authn.ldap[0].principalAtrributeId=uid This should tell to CAS that the user attribute is your uid and not the login provided in the login form. Stéphane Le mer. 15 juil. 2020 à 17:58, Patrick Proniewski < patrick.proniew...@univ-lyon2.fr> a écrit : >

Re: [cas-user] cas-management application

Hi Bryan, If you want to completely disable version control you can do this in build.gradle: bootWar { entryCompression = ZipEntryCompression.STORED overlays { // https://docs.freefair.io/gradle-plugins/current/reference/#_io_freefair_war_overlay // Note: The "excludes"

Re: [cas-user] Re: OpenID Connect CAS module does not display required attributes (as iss, sub, aud, exp) if claims are set.

you should remove the attributeReleasePolicy and replace it with "scopes" : [ "java.util.HashSet", [ "openid", "profile", "email", "address" ] ] Le jeu. 25 juin 2020 à 15:59, Jakub Fridrich < jakub.fridr...@klikpojisteni.cz> a écrit : > I tried adding to Release policy (to service),

[cas-user] Per-service authentication settings

uot;, "id" : 1, "requiredHandlers" : [ "java.util.HashSet", [ "QueryAndEncodeDatabaseAuthenticationHandler" ] ] } So if I add more services, the QueryAndEncodeDatabaseAuthenticationHandlers are not distinguishable and the service is still not linked to a specific query. I hope my

Re: [cas-user] Change query and encode database authentication hashing algorithm.

Yes, for now it is only the appended part which is blocking. But I could also imagine other algorithms that are not supported now, think about pepper or adding the salt every iteration. In my opinion it would be great to add the possibility to choose your hash class, just like you select your

[cas-user] Change query and encode database authentication hashing algorithm.

Hi Cas Community, I am trying to setup a cas server with query and encode database authentication handler. In the current application, the encrypted password is calculated with 20 runs of SHA-512 with an APPENDED salt. However since this encoding is delegated to Apache Shiro's