RE: [cas-user] Question re: mod_auth_cas vs. cas java filters

2010-08-27 Thread Bryan Wooten
Thanks, I am still get the error:num=20. I wonder if the issue is that the root cert for our CAS server is chained? Anyway I'll get the guys that run our CAS server to resend me the root certs. Maybe they just didn't send me the right cert. Bryan Wooten bryan.woo...@utah.edu Work: 801.585.93

RE: [cas-user] Question re: mod_auth_cas vs. cas java filters

2010-08-27 Thread Matthew J. Smith
Bryan- Run your openssl s_client command again, but specify -CApath to point to the same location as CASCertificatePath. If that doesn't clear up your error:num=20, then something is amiss with your root cert. -Matt On Fri, 2010-08-27 at 15:24 -0400, Bryan Wooten wrote: > Thanks for the reply.

RE: [cas-user] Question re: mod_auth_cas vs. cas java filters

2010-08-27 Thread Bryan Wooten
Thanks for the reply. Our cas server is ulogin.utah.edu, it's cert's CN is *.utah.edu. It didn't even occur to me that java was doing the server validation behind the scenes... Now I am even more curious as to why our java CASified apps can talk to our CAS server with no problem but my apache

Re: [cas-user] Question re: mod_auth_cas vs. cas java filters

2010-08-27 Thread Marvin Addison
> I have set “CASAllowWildcardCert On” in the cas.conf file.  The CN on my CAS > server certificate is *.utah.edu. What's the exact CN of your CAS server? Sometimes intervening namespace parts, e.g. cas.itu.utah.edu, aren't supported by wildcard validation routines. (Java is like this, for examp

Re: [cas-user] Question re: mod_auth_cas vs. cas java filters

2010-08-27 Thread Marvin Addison
> The mod_auth_cas will validate the CAS server’s certificate if > “CASValidateServer On” is set in the cas.conf file. The java filters don’t > seem to have this feature. It's correct that the Java filters don't have support for this, but the reason is that the underlying JVM performs certificate

[cas-user] Question re: mod_auth_cas vs. cas java filters

2010-08-27 Thread Bryan Wooten
The mod_auth_cas will validate the CAS server's certificate if "CASValidateServer On" is set in the cas.conf file. The java filters don't seem to have this feature. Because of this I believe that setting "CASValidateServer Off" is not really a "bad thing". I am still having trouble getting my

[cas-user] Alternative authenticating

2010-08-27 Thread Andrew Wang
Hi ... I was wondering if it was possible to have a remote site with: https://cas.server.com/cas/login";> I've added an Authenticaton handler that takes "SomeBigGeneratedHash" and the username ... does some checking and lets user in if things are ok. I noticed 2 hidden tags on the cas login

Re: [cas-user] New on CAS

2010-08-27 Thread amit kohan
Right, this CAS has made so not user-friendly I tried that twice too but didin't get to the point. Please let me know if you find a solution. Thanks On Fri, Aug 27, 2010 at 8:22 AM, Victor Careaga wrote: > Hi all > > i am new on CAS and start trying connect with a MS AD and .NET vs2010 but > th

Re: [cas-user] New on CAS

2010-08-27 Thread Victor Careaga
Hi, Thx for the advice, i download the client but something not work on vs2010 i think first need connect my CAS instalation with AD another issue here, https://wiki.jasig.org/display/CASUM/Active+Directory, thx for the help i think im really lost here Grettings 2010/8/27 Scott M. Holodak > Hi

RE: [cas-user] New on CAS

2010-08-27 Thread Scott M. Holodak
Hi, That page is a little out of date. Take a look at the .NET CAS Client. It includes a sample WebForms app that should help you get started. The Wiki also contains details on CASifying ASP.NET MVC apps. CAS Client: https://wiki.jasig.org/display/CASC/.Net+Cas+Client MVC Info: https://wiki.

Re: [cas-user] JpaTicketRealm on Oracle 11g R2

2010-08-27 Thread Marvin Addison
> We'd be interested in: > > * what problem you discovered Again, I should emphasize the issue I referred to has nothing to do with CAS. Here's the commit message in our source for the fix: - Specify the Oracle 10g dialect. Failure to do so results in

[cas-user] New on CAS

2010-08-27 Thread Victor Careaga
Hi all i am new on CAS and start trying connect with a MS AD and .NET vs2010 but the examples in https://wiki.jasig.org/display/CASC/ASP.NET+Forms+Authentication dont working for me maybe miss something well if something have a tutorial or examples about this type of configuration please share, a

Re: [cas-user] CAS User Experience

2010-08-27 Thread Patrick Berry
On Wed, Aug 25, 2010 at 7:28 AM, Patrick A. Treptau wrote: > Thank you for all your input. I have a short follow-up question: I > understand that you are all seem to be using a unified login with the same > look and feel that redirects the user to a page with a list of CASified > services. Are yo