Re: [cas-user] CAS Active Directory LDAP Support

2010-02-11 Thread Maina Watare
Thanks Scott. The class error is gone with your advice.   I get the message "The credentials you provided are not supported by CAS" what am i not doing right... --- On Thu, 2/11/10, Scott Battaglia wrote: From: Scott Battaglia Subject: Re: [cas-user] CAS Active Directory LDAP Support To: cas

Re: [cas-user] bindAndValidate method with dual LDAP authentication backends

2010-02-11 Thread Scott Battaglia
You can try adding the method to the action-state, i.e. Not sure if that will do what you want. On Thu, Feb 11, 2010 at 11:05 AM, Andy Cowling < andy.cowl...@interactivedata.com> wrote: > Hi > > I have two autheorization handlers, each uses a disinct LDAP backend. IP > ranges are used to det

Re: [cas-user] CAS Active Directory LDAP Support

2010-02-11 Thread Scott Battaglia
Please re-read that LDAP page. There are a few points on it where it says after 3.3.2 you need to use the LdapContextSource included with Spring LDAP. On Fri, Feb 12, 2010 at 12:27 AM, Maina Watare wrote: > Thanks for your reply. > I am using CAS 3.3.5. > > --- On *Thu, 2/11/10, Scott Battaglia

Re: [cas-user] Enabling LDAP Password Policy Enforcement

2010-02-11 Thread Scott Battaglia
I think Eric made an update to the page. Not sure if that will help or not. On Thu, Feb 11, 2010 at 10:29 AM, Jeff Chapin wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > I believe that log line came from this bean: > class="org.jasig.cas.web.flow.PasswordWarningCheckAction"> >

Re: [cas-user] CAS Active Directory LDAP Support

2010-02-11 Thread Maina Watare
Thanks for your reply. I am using CAS 3.3.5. --- On Thu, 2/11/10, Scott Battaglia wrote: From: Scott Battaglia Subject: Re: [cas-user] CAS Active Directory LDAP Support To: cas-user@lists.jasig.org Date: Thursday, February 11, 2010, 8:51 AM You don't mention which CAS you're using.   If you'

Re: [cas-user] mod_auth_cas working with ssl jboss but not apache

2010-02-11 Thread Phil Ames
Hi, The error message you are receiving basically indicates that more than 4096(CAS_MAX_RESPONSE_SIZE) bytes of response data are returned when mod_auth_cas hits the service validate URL. Can you manually create a ticket and hit that URL using something like curl or wget to see how much data comes

[cas-user] mod_auth_cas working with ssl jboss but not apache

2010-02-11 Thread Lopetegui
Hi,     I have a working CAS server that is accesible via HTTPS (443) with Apache (2.2.9-10+lenny) + mod-jk (1.2.18-3etch2)+ Jboss 4.2.3  and via HTTPS to the same Jboss in a Debian etch box.     I have compiled and configured mod_auth_cas in a diferrent machine, RHEL. My mod_auth_cas configur

Re: [cas-user] CAS Active Directory Support: SPNEGO doesn't support IE8

2010-02-11 Thread jmrodriguez
Here you are my working (W2003 - AD) deployerConfigContext.xml: - http://www.springframework.org/schema/beans"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xmlns:p="http://www.springframework.org/schema/p"; xsi:schemaLocation

Re: [cas-user] CAS Active Directory LDAP Support

2010-02-11 Thread Scott Battaglia
You don't mention which CAS you're using. If you're using the most recent version of CAS check that LDAP page for the alternative to AuthenticatedLdapContextSource -Scott Battaglia PGP Public Key Id: 0x383733AA LinkedIn: http://www.linkedin.com/in/scottbattaglia On Thu, Feb 11, 2010 at 10:43

[cas-user] bindAndValidate method with dual LDAP authentication backends

2010-02-11 Thread Andy Cowling
Hi I have two autheorization handlers, each uses a disinct LDAP backend. IP ranges are used to determine which handler gets called. To distinguish what's going on in login-webflow.xml I use distinct state names: bindAndValidatePeopleLdap & bindAndValidateActiveDirectoryLdap They appear for

Re: [cas-user] CAS Active Directory Support: SPNEGO doesn't support IE8

2010-02-11 Thread Hans De Bisschop
And there I was trying to figure out why exactly CAS authentication via SPNEGO was working more or less fine in Firefox and not so well in IE8 ... and I hadn't seen the recent changes to the wiki yet. I just figured my configuration was (partially) wrong. Has anyone ever configured CAS to use S

Re: [cas-user] CAS Active Directory LDAP Support

2010-02-11 Thread David Whitehurst
Your Spring library(s) do not contain the class noted in the logs. The error is thrown because the class needed is not found on your Classpath. David On Thu, Feb 11, 2010 at 10:43 AM, Maina Watare wrote: >Hi All, > > I am a newbie on CAS. > > I want to get CAS to authenticate against Acti

[cas-user] CAS Active Directory LDAP Support

2010-02-11 Thread Maina Watare
Hi All,I am a newbie on CAS.I want to get CAS to authenticate against Active Directory username/password I have been following the article on http://www.ja-sig.org/wiki/display/CASUM/LDAP with little success.My Setup is 1. Tomcat 6.02. apache-maven-2.2.13. Windows Xp4. AD Ms Win 2008Currently i

Re: [cas-user] Enabling LDAP Password Policy Enforcement

2010-02-11 Thread Jeff Chapin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I believe that log line came from this bean: This was documented in the link below. Am I off base? I am still learning how this setup works and feeling my way around. Jeff Scott Battaglia wrote: > I don't know much about it but there's no reason

Re: [cas-user] CAS Active Directory Support: SPNEGO doesn't support IE8

2010-02-11 Thread Scott Battaglia
I'm not Dean, but there were prior emails on the cas-user or cas-dev list that a recent patch from Microsoft broke SPNEGO with existing JVMs. JDK 1.7 was already compatible. I thought they were going to backport the change to the latest 1.6 JVMs. I'm not sure if they did yet. Dean could be tal

Re: [cas-user] CAS Active Directory Support: SPNEGO doesn't support IE8

2010-02-11 Thread Marvin Addison
> Is the underlying cause of the alleged incompatibility known? > Perhaps the author of that CASUM page can offer some insight here? Care to jump in here, Dean? M -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access

Re: [cas-user] CAS Active Directory Support: SPNEGO doesn't support IE8

2010-02-11 Thread Andy Cowling
Is the underlying cause of the alleged incompatibility known? Perhaps the author of that CASUM page can offer some insight here? Marvin Addison wrote: According to the CASUM SPNEGO page JDK 1.7 is required for SPNEGO to support IE8. JDK 1.7 is not yet released. I believe we should verify

Re: [cas-user] CAS Active Directory Support: SPNEGO doesn't support IE8

2010-02-11 Thread Marvin Addison
> According to the CASUM SPNEGO page JDK 1.7 is required for SPNEGO to support > IE8. JDK 1.7 is not yet released. I believe we should verify that claim with an authoritative reference from either Sun or Microsoft. > IE8 has a "compatibility view", which I presume is used for > supporting old IE

[cas-user] CAS Active Directory Support: SPNEGO doesn't support IE8

2010-02-11 Thread Andy Cowling
According to the CASUM SPNEGO page JDK 1.7 is required for SPNEGO to support IE8. JDK 1.7 is not yet released. Ergo, CAS currently has no single sign-on support with IE8 However, IE8 has a "compatibility view", which I presume is used for supporting old IE javascript hacks. But can this "compa