Re: [cas-user] Stuck with Spring+CAS gateway configuration

2010-04-19 Thread prasanna h
All, As far as I've seen, I do not see an implementation that enables an application using a CAS 3+Spring 3 configuration to pass a gateway parameter as part of the request which I guess would accomplish what I need. I'm thinking of adding a filter which intercepts all requests and somehow talk

Re: [cas-user] I can not send query string to CAS server.

2010-04-19 Thread Marvin Addison
As I use URLencoding the service parameters, I got:

Re: [cas-user] Some question about CAS protocol (session lifetime, attributes request, etc.)

2010-04-19 Thread Marvin Addison
I believe it would be helpful to carefully review the CAS protocol documents at http://www.jasig.org/cas/protocol. A solid understanding of the protocol will help put the following answers in better context. 1/ Is there a notion of session lifetime in CAS ? How it works ? Yes. The SSO session

Re: [cas-user] Some question about CAS protocol (session lifetime, attributes request, etc.)

2010-04-19 Thread Thomas Chemineau
2010/4/19 Marvin Addison marvin.addi...@gmail.com: I believe it would be helpful to carefully review the CAS protocol documents at http://www.jasig.org/cas/protocol.  A solid understanding of the protocol will help put the following answers in better context. Thank you Marvin for your

[cas-user] $ in usernames

2010-04-19 Thread Jeff Chapin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This is not something that we *need*, or even *want*, but it's strange behavior, so I thought I would report it. One of my coworkers was stress-testing our CAS install, and for some reason the tool he was using was passing '${username}' as the actual

[cas-user] Cannot insert NULL

2010-04-19 Thread Jeff Chapin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am getting the following error -- I assume it is because I have something configured wrong, as the database schema was setup by CAS: Exception in thread pool-2-thread-174783 org.springframework.dao.DataIntegrityViolationException:

Re: [cas-user] Cannot insert NULL

2010-04-19 Thread Patrick Berry
Which version of CAS are you running? This was an issue which got resolved in 3.4.2. On Mon, Apr 19, 2010 at 7:34 AM, Jeff Chapin jeff.cha...@uni.edu wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am getting the following error -- I assume it is because I have something configured

Re: [cas-user] request.getRemoteUser() returns null in CASSHIB

2010-04-19 Thread Brian Koehmstedt
Gokula posted to the casshib list and I have responded to him there, but I wanted to respond re: What's CASSHIB for? I developed CASSHIB for a very specific reason: I didn't want developers on my campus that need to federate their applications to have to go through the process of setting up

[cas-user] Is this design good or bad or indifferent?

2010-04-19 Thread Bryan Wooten
We have a Spring application that is using CAS. This application does not use the CAS client jar as a filter. The design uses a Spring Interceptor and makes calls directly to CAS client classes. So when the application is first hit we do a response.sendRedirect() to our CAS server login URL.

Re: [cas-user] Some question about CAS protocol (session lifetime, attributes request, etc.)

2010-04-19 Thread Marvin Addison
Is there a way that the service could requests the server via a web service ? So that it will prevent my user to be redirected each time. 302 redirects are a fundamental aspect of the CAS protocol. The CAS server has a RESTful Web service API, but that is intended to be used by service

[cas-user] 3.4.2 and cas-server-support-ldap-pwd-expiration

2010-04-19 Thread Jeff Chapin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Does the module for cas 3.3.5 work with 3.4.2 on this module? Anyone have any experiences with this? - -- Jeff Chapin, Assistant Systems/Applications Administrator ITS-IS, University of Northern Iowa Phone: 319-273-3162 Email: jeff.cha...@uni.edu

Re: [cas-user] Stuck with Spring+CAS gateway configuration

2010-04-19 Thread prasanna h
Hi All, I put in the following logic to add a gateway parameter to the cas login request(in case of access to a non-secure page). final String urlEncodedService = CommonUtils.constructServiceUrl(httpRequest, httpResponse, getServiceProperties().getService(),

[cas-user] Web service authentication

2010-04-19 Thread Hudson Orsine Assumpção
Hi guys, I'm creating a web service that can't be used by anyone, so I'm trying use CAS. I've configured web.xml based in this page http://www.ja-sig.org/wiki/display/CASC/Configuring+the+JA-SIG+CAS+Client+for+Java+in+the+web.xmlbut after logged in, cas don't redirect to the correct page! e.g. I

Re: [cas-user] 3.4.2 and cas-server-support-ldap-pwd-expiration

2010-04-19 Thread Raymond D Walker
I am also interested in this functionality. From an initial look at things, it seems as though there are some updates required for this module to work with CAS 3.4.2 I'm currently hand massaging files to see if I can the module to work, but any other info on this module's expected updates or

RE: [cas-user] CAS Integration with other authentication filters

2010-04-19 Thread Bryan Wooten
Thanks! I went back and looked at my hack and 5 lines later I see exactly what you suggest. Did you see my post about our Spring implementation? There are some in the department that want me to do the same inside my authentication filter so they won't have to change their web.xml to use the

Re: [cas-user] 3.4.2 and cas-server-support-ldap-pwd-expiration

2010-04-19 Thread David . Radtke
I've just been trying to do the same. I have Downloaded 3.3.5 Modified the version numbers in the pom.xml to 3.4.2 Installed in my local Maven At this point everything looks ok, I can see the .war created in the repository, and it contains the correct Jars Then I added the dependancy to my

Re: [cas-user] Stuck with Spring+CAS gateway configuration

2010-04-19 Thread Scott Battaglia
CAS + Spring Security support doesn't support gateway at the moment. Its on my list of things to do but doesn't necessarily mesh well with the way Spring Security works. Redirecting to j_spring_cas_security_check isn't going to get you anywhere I don't think. I'm not sure if you can combine it

Re: [cas-user] Is this design good or bad or indifferent?

2010-04-19 Thread Scott Battaglia
Our CAS filters have always checked for the assertion, and not whether getRemoteUser was set (since its technically not a requirement). I wonder if it makes sense to do the following: 1. Have the CAS filters automatically check getRemoteUser (and possibly fallback to checking the assertion).

Re:[cas-user] How to enable remember me in CAS 3.4.2

2010-04-19 Thread Praveen Krishnan
Thanks for the reply scott, i understood that part (to add the custom credentials) and just wanted to confirm that the only possible way to make it work is to modify the login-webflow.xml As i mentioned in my earlier post, we were using the login-webflow.xml out of the box, but now in order