Re: [cas-user] casLoginView.jsp with third parameter

2010-11-12 Thread Robert Oschwald
Thats exactly the correct way. Do not forget to overwrite hashCode() and equals() which takes your new parameters into account. See RememberMeUsernamePasswordCredentials as an example. Am 12.11.2010 um 18:52 schrieb Scott Battaglia: > You should be extending our class with your own custom cla

Re: [cas-user] Single Sign On Between Java and .Net App

2010-11-12 Thread Frederic Jacquet
Hello If compagny B can logon on A, yes Otherwise CAS is good enough ! in fact I do that daily with php and java and ... systems I don't even know the backend regards fred On 11/12/2010 05:51 PM, Vipin Jain wrote: > Thanks Marvin > The requirement is > 1. User accesses App A (Java Based Portal

Re: [cas-user] Almost there with Service Manager

2010-11-12 Thread Scott Battaglia
Bryan, Try turning up the debug level for Hibernate. That should let you know if there are any transaction issues. Cheers, Scott On Fri, Nov 12, 2010 at 5:00 PM, Bryan Wooten wrote: > Ok, everything deploys now and the database tables are created. But when > I try and add the service * > ht

Re: [cas-user] Need assistance integrating clearPass with uPortal

2010-11-12 Thread Scott Battaglia
If you want to actually see the response, you'll need to supply a proxy ticket. The fact that you get anything at least means ClearPass is turned on. Cheers, Scott On Fri, Nov 12, 2010 at 5:00 PM, Laura McCord wrote: > Okay I think I solved my problem. I discovered that there was more than one

Re: [cas-user] mod_auth_cas on Snow Leopard?

2010-11-12 Thread Bob Frank
Thanks that led me in the right direction, seems the remaining problems were related to Apache. -Bob On Nov 12, 2010, at 6:03 AM, Matt Smith wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Not familiar with this error. Is Apache returning with a 401/403 or a 50x ? Google indicates

[cas-user] Almost there with Service Manager

2010-11-12 Thread Bryan Wooten
Ok, everything deploys now and the database tables are created. But when I try and add the service https://xxx.acs.utah.edu/cas/services/j_acegi_cas_security_check it doesn't seem to be saved in the db. I see this in the log file: [#|2010-11-12T14:02:57.713-0700|INFO|glassfish3.0.1|javax.enter

Re: [cas-user] Need assistance integrating clearPass with uPortal

2010-11-12 Thread Laura McCord
Okay I think I solved my problem. I discovered that there was more than one cas-client-core jar file in my cas lib directory. Once I removed it I was able to authenticate successfully. Now, I have one more question. How to test for clearPass correctly. After I authenticate through cas I go to

Re: [cas-user] OWA and CAS

2010-11-12 Thread James Winter
Ok, more progress. The SSL certificate problem is no more, but now I get the following: Error getting response from clearPass at URL: https://cas.domain.local/cas/clearPass?ticket=ST-999-x-cas&service=https://cas.domain.local/cas/clearPass. The remote server returned an error: (500) Intern

Re: [cas-user] CAS behind a content switch (with NAT and SSL termination)

2010-11-12 Thread Marvin Addison
>> The purpose is to set cookieSecure="false" since from perspective of >> CAS the CASTGC SSO session cookie is delivered over plain HTTP. > > You are referring here to the one-way HTTP-based delivery from the > content-switch to the CAS server, or the return delivery of the TGC ? The latter. Th

RE: [cas-user] CAS behind a content switch (with NAT and SSL termination)

2010-11-12 Thread Corey Scholefield
Hi Marvin, thanks for bringing up this setting. I wanted to clarify something on your comment below: > The purpose is to set cookieSecure="false" since from perspective of > CAS the CASTGC SSO session cookie is delivered over plain HTTP. You are referring here to the one-way HTTP-based delivery

Re: [cas-user] casLoginView.jsp with third parameter

2010-11-12 Thread Scott Battaglia
You should be extending our class with your own custom class and not modifying the code. My guess is even though you think you made the changes you're probably still using the original class (that's merely a guess) On Fri, Nov 12, 2010 at 12:08 PM, Fco Javier Carreras Calero < fjcarre...@grupodi

Re: [cas-user] Single Sign On Between Java and .Net App

2010-11-12 Thread Marvin Addison
> 1. User accesses App A (Java Based Portal) (Company A) - Form Login > 2. User clicks a link on App A leading to App B (.Net Based App) (Company B) > - Single Sign On As long as the form in #1 is the CAS login form, you'll have a straightforward integration path. If you want to avoid the CAS log

Re: [cas-user] Single Sign On Between Java and .Net App

2010-11-12 Thread Vipin Jain
Thanks Marvin The requirement is 1. User accesses App A (Java Based Portal) (Company A) - Form Login 2. User clicks a link on App A leading to App B (.Net Based App) (Company B) - Single Sign On I think we need to use SAML for this, can we use CAS for this? On Fri, Nov 12, 2010 at 11:25 AM, Mar

Re: [cas-user] Single Sign On Between Java and .Net App

2010-11-12 Thread Marvin Addison
> Can anyone please let me know what are the steps we need to single sign on > between two Java and .Net application using CAS. I will assume you already have a CAS server available for integration with your clients. Java client - https://wiki.jasig.org/display/CASC/CAS+Client+for+Java+3.1 .NET c

[cas-user] Single Sign On Between Java and .Net App

2010-11-12 Thread Vipin Jain
Hi All, Can anyone please let me know what are the steps we need to single sign on between two Java and .Net application using CAS. Thanks Vipin -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see htt

Re: [cas-user] OWA and CAS

2010-11-12 Thread William G. Thompson, Jr.
Likely...if the certs aren't trusted CasOwa won't be able to get PGT and a subsequent PT/ST for clearPass. Bill On Fri, Nov 12, 2010 at 10:33 AM, James Winter wrote: > What does it mean that the ticket parameter is blank in that error message? > I understand that var proxyTicket = user.GetProxyT

Re: [cas-user] OWA and CAS

2010-11-12 Thread James Winter
What does it mean that the ticket parameter is blank in that error message? I understand that var proxyTicket = user.GetProxyTicketFor(ClearPassUri); is returning nothing, but is that also caused by the SSL cert? James On Fri, Nov 12, 2010 at 10:13 AM, James Winter wrote: > Progress! > > I now

Re: [cas-user] OWA and CAS

2010-11-12 Thread James Winter
Progress! I now get this response: Received response from https://mycampus.arcadia.edu/cas/clearPass?ticket=&service=https://mycampus.arcadia.edu/cas/clearPass, but cas:credientials IsNullOrEmpty. Check CAS server logs for errors. Make sure SSL certs are trusted. We don't have direct access to

Re: [cas-user] OWA and CAS

2010-11-12 Thread William G. Thompson, Jr.
On Fri, Nov 12, 2010 at 9:30 AM, James Winter wrote: > We have some additional problems (the test server is unable to access the > CAS server at all) so I'm going to have to wait until that's resolved. That would help. :) > > Both servers are using commericial certs, and I'm pretty sure Clearpa

Re: [cas-user] OWA and CAS

2010-11-12 Thread James Winter
We have some additional problems (the test server is unable to access the CAS server at all) so I'm going to have to wait until that's resolved. Both servers are using commericial certs, and I'm pretty sure Clearpass is working. When I go to /cas/clearPass I don't get a login prompt, I just get th

Re: [cas-user] OWA and CAS

2010-11-12 Thread William G. Thompson, Jr.
If you're using self-signed certs, both IIS and the CAS JVM must be configured to trust them. If you're using commercial certs there shouldn't be an issue. Have you verified Clearpass extension is working? 7. Verify ClearPass install Authenticate normally by visiting https://{host}/cas/clearPass

Re: [cas-user] OWA and CAS

2010-11-12 Thread James Winter
Sorry to be clueless, I was kind of thrown into the deep end here with the CAS/OWA implentation. What do you mean by "cert is known to the cas jvm and vice versa"? I did get a valid SSL certificate for our test server with no change. I still get the HttpContext.Current.User is null error. Thanks

Re: [cas-user] mod_auth_cas on Snow Leopard?

2010-11-12 Thread Matt Smith
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Not familiar with this error. Is Apache returning with a 401/403 or a 50x ? Google indicates this might be a base misconfiguration. A few things to check: * Do you have a .htaccess file with permissions preventing Apache from reading it? * Is the a