Re: [cas-user] Trouble protecting resources with mod_auth_cas

2012-01-19 Thread Joel Goguen
I haven't defined any ordering (I left the Order field set to 0) and the only other service is the service manager itself (https://fortran.its.unb.ca/cas/services/**). That service isn't set to release any attributes, but if I allow it to release all attributes I see no differences in the logs

Re: [cas-user] Trouble protecting resources with mod_auth_cas

2012-01-19 Thread Joel Goguen
In case I defined something wrong, here's my attributeRepository bean defined using https://wiki.jasig.org/display/CASUM/Attributes as a reference. Each of the three attributes is guaranteed to be available on the LDAP record. bean id=attributeRepository

Re: [cas-user] JBoss Propagate principal

2012-01-19 Thread Marvin Addison
As you said is a bug related to get the Custom Principals since JBoss5. I think is fixed in JBoss7 But I've not tested yet. ... You can use a ThreadLocal variable to bind the http username to the ejb session, if you prefer a more portable solution. I would very much appreciate if you could

Re: [cas-user] CAS redirect timeout problem with AJP

2012-01-19 Thread Marvin Addison
When I entered the login credentials and hit enter the log message says and I am running into a connection timeout: I don't see any such error in the logs you cited. Liferay CAS configuration looks like: Login URL: https:// abc.test.com /so/login Logout URL: https:// abc.test.com

RE: [cas-user] Configuring CAS to trust/replace Luminis CAS.

2012-01-19 Thread Ben Branch
Phil, Many thanks for the info on git. I've never used it before. I was able to get the mod_auth_cas to compile and come up in apache. I found that my other issue was that I had misspelled 'transition' in my login-webflow.xml. We are still having issues with getting the 2 CAS systems to

Re: [cas-user] Possible timing issue, with dual servers + database

2012-01-19 Thread David Clarke
Hi, This email is resolution for this thread, on the off-chance someone sees it, and ever wonders what happened, while investigating their own issues. The below scenario was not as it seemed, I made mistake while pulling the milliseconds from the timestamps, the INSERT of the service

[cas-user] mysql cluster as a backend ticket registry

2012-01-19 Thread David Clarke
Hi, This is, partly a followup to a post I made back in October, about a possible timing issue, and today explained in a separate post to the list. I think this is about what to use for a ticket registry, but maybe it's about mysql configuration. Our CAS environment is a pair of servers, using

Re: [cas-user] Generation of keytab and changes in Kerberos file for SPNEGO

2012-01-19 Thread Chetna Pant
Hi, I have successfully generated the keytab file. But while verifying it on the server using kinit I get the following error. kinit(v5): Cannot find KDC for requested realm while getting initial credentials Below is a part of my krb5.conf file. What value do we give in kdc? [libdefaults]