Re: [cas-user] Re: Connecting SAML SP to CAS 6

2019-06-07 Thread Ray Bon
Fabian, I suggest you turn up logging to at least debug until you are ready to move to production. If I remember correctly, the service location is logged on start up. Previous advice still stands but add this: Ray On Fri, 2019-06-07 at 02:10 -0700, Fabian Schipp wrote: I

[cas-user] Re: Connecting SAML SP to CAS 6

2019-06-07 Thread Fabian Schipp
I tried both now, but there seems to be no difference. I have noticed however that whatever I put into the /etc/cas/services or /etc/cas/services the output always states 2 services being loaded from the JSON Registry. Even if I delete all services from those folders, clean build and run.

Re: [cas-user] Re: Connecting SAML SP to CAS 6

2019-06-07 Thread Fabian Schipp
I thought about using this tool too, but my dev-environment is not accessible from the internet. So it sadly is of no use for me. Am Donnerstag, 6. Juni 2019 20:19:53 UTC+2 schrieb David Curry: > > If you don't feel like (or can't) setting up a web server as an SP, you > can also use this: > >

[cas-user] Re: Connecting SAML SP to CAS 6

2019-06-07 Thread Matthew Uribe
In my experience that is not the same as /etc/cas/services. I would recommend you change that to /etc/cas/services explicitly and restart. On Friday, June 7, 2019 at 1:29:30 AM UTC-6, Fabian Schipp wrote: > > The cas.properties contains this line: > cas.serviceRegistry.json.location:

[cas-user] Re: Connecting SAML SP to CAS 6

2019-06-07 Thread Fabian Schipp
The cas.properties contains this line: cas.serviceRegistry.json.location: classpath:/services This should refer to /etc/cas/services. Wich is the location my services are stored. Also the build.gradle file contains the corresponding dependency compile

Re: [cas-user] Re: Connecting SAML SP to CAS 6

2019-06-06 Thread David Curry
If you don't feel like (or can't) setting up a web server as an SP, you can also use this: https://sptest.iamshowcase.com/ Click on Instructions > SP Initiated SSO to begin. -- DAVID A. CURRY, CISSP *DIRECTOR OF INFORMATION SECURITY* THE NEW SCHOOL • INFORMATION TECHNOLOGY 71 FIFTH AVE., 9TH

Re: [cas-user] Re: Connecting SAML SP to CAS 6

2019-06-06 Thread David Curry
> But I am not sure if this is needed - but CAS loads it successfully on boot. At least in CAS 5, SAML2 will not work if you do not have that service. I don't know if CAS 6 still requires it, but I would assume that it does unless you can find something that says it doesn't. --Dave -- DAVID A.

[cas-user] Re: Connecting SAML SP to CAS 6

2019-06-06 Thread Fabian Schipp
There is one more service called SAML2CallbackProfile wich was suggested in a tutorial: https://dacurry-tns.github.io/deploying-apereo-cas/building_server_saml_update-the-service-registry.html#create-a-service-definition-for-the-idp-endpoint { /* * The CAS SAML IdP creates this endpoint as

[cas-user] Re: Connecting SAML SP to CAS 6

2019-06-06 Thread Matthew Uribe
OK. So if root is running CAS, and root owns the json file, then that part should be fine. Do you have any other services registered that CAS is reading correctly? On Thursday, June 6, 2019 at 7:54:52 AM UTC-6, Fabian Schipp wrote: > > I am running the .war overlay. therefore I have no tomcat

[cas-user] Re: Connecting SAML SP to CAS 6

2019-06-06 Thread Fabian Schipp
I am running the .war overlay. therefore I have no tomcat user. But I checked the file, it's owned by the root user. I then checked the process running the war file environment in the jdk folder - it is also the root user. Am Donnerstag, 6. Juni 2019 15:37:05 UTC+2 schrieb Matthew Uribe: > > Is

[cas-user] Re: Connecting SAML SP to CAS 6

2019-06-06 Thread Matthew Uribe
Is the devConfluence-1558621301329267.json file readable for whatever user/service is running CAS? When I forget to change ownership of my json files to the tomcat user, I run into the same issue. On Thursday, June 6, 2019 at 7:06:50 AM UTC-6, Fabian Schipp wrote: > > Hi everyone, > > I am