Re: [cas-user] Redirection on successful login

2012-12-05 Thread Farzan Qureshi
Hi, Sorry I am bit a noob here. Can you please give me a sample so that I can work it out. Thanks. On 5 December 2012 23:21, jleleu wrote: > nstead of having a simple redirect defined in webflow : > view="externalRedirect:${requestScope.response.url}" /> > you can create a class inheriting

RE: re:[cas-user] How to add a Login Banner to CAS

2012-12-05 Thread Lazar, Michael E
Hi, Andrew Tillinghast. from Connecticut College was gracious enough to send me to his github with updates to their interrupts addon, and I was able to get it working for our acceptable use page. Since I'm not sure if they're ok on the east coast I can forward the URL he gave me. https://github

re:[cas-user] How to add a Login Banner to CAS

2012-12-05 Thread James Lorenzen
A fellow co-worker stumbled across this article on the CAS wiki which seems might have our answer: https://wiki.jasig.org/display/CASUM/Acceptable+Use+interface+for+Login+Webflow -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change sett

Re: [cas-user] LDAP Configuration Question

2012-12-05 Thread Andrew Morgan
On Wed, 5 Dec 2012, Ourada, John wrote: As part of our conversion to using LDAP against AD instead of a custom validator, I am thinking of the following and would like to run it by the group. I am planning on using the FastBindLdapAuthenticationHandler since I only have one OU (People) in wh

Re: [cas-user] Re: [cas-user] Cas and o365 Email

2012-12-05 Thread Laura McCord
By the way, I did check and Shibboleth is authenticating through CAS so that part is done. -Laura On Dec 5, 2012, at 3:28 PM, Jason A Everling wrote: > It works fine for us, no issues. Yes you need the ECP part for Shibboleth but > it is already installed by default for a while now. You just h

[cas-user] Re: [cas-user] Cas and o365 Email

2012-12-05 Thread Jason A Everling
It works fine for us, no issues. Yes you need the ECP part for Shibboleth but it is already installed by default for a while now. You just have to enable it which they outline in their wiki which is pretty simple. Our mobile users and outlook users haven't had any issues. For those not using Mic

[cas-user] LDAP Configuration Question

2012-12-05 Thread Ourada, John
As part of our conversion to using LDAP against AD instead of a custom validator, I am thinking of the following and would like to run it by the group. I am planning on using the FastBindLdapAuthenticationHandler since I only have one OU (People) in which to look and I don't need to any special

RE: [cas-user] Cas and o365 Email

2012-12-05 Thread Curtis Long
We were evaluating CAS for this, but never implemented (although we use CAS for other services). A heads up that when Microsoft says "supports CAS" they mean "can work with CAS but requires Shibboleth for ECP with mobile devices". - Curtis -Original Message- From: Laura McCord [mailto

Re: [cas-user] Cas and o365 Email

2012-12-05 Thread Laura McCord
Unfortunately, our CAS instance is backed by Oracle's LDAP and not Active Directory. Laura On Dec 5, 2012, at 2:07 PM, Gasper, John wrote: > Hi Laura, > > EWU is just about to go live with O365, so we had a similar need, but because > we didn't want to have 2 un-connected single sign-on solut

RE: [cas-user] Cas and o365 Email

2012-12-05 Thread Gasper, John
Hi Laura, EWU is just about to go live with O365, so we had a similar need, but because we didn't want to have 2 un-connected single sign-on solutions we took a different approach. I recently implemented an authentication provider for CAS that delegates authentication to ADFS (this uses ADFS'

Re: [cas-user] CAS 3.5: X509CertificateCredentialsToSubjectPrinciplalResolver not resolving Certificate

2012-12-05 Thread Marvin Addison
> I have made modifications to the cas-server-support-ldap code to see if I > can get some print statements out of the resolver, however, it appears I am > not even getting in the CredentialsToLDAPAttributePrincipalResolver. Are you sure that you've successfully authenticated to the container? If

[cas-user] Re: [cas-user] Cas and o365 Email

2012-12-05 Thread Jason A Everling
It is not supported by Microsoft, Shibboleth and Active Directory Federation services are supported, we had to put a Shibboleth server up for it to work. We configured Office 365 to authenticate to Shibboleth which redirects to CAS for logins. User never sees the Shibboleth pages it just acts as

[cas-user] CAS 3.5: X509CertificateCredentialsToSubjectPrinciplalResolver not resolving Certificate

2012-12-05 Thread dsilvia
I have been viewing the posts associated with the X509 resolvers and have not been able to figure out why I am having issues trying to get the CAS to authenticate users via Client certs from a CAC. Should I be able to authenticate directly to CAS and getting the "Log In Successful" page. Apache To

[cas-user] Cas and o365 Email

2012-12-05 Thread Laura McCord
Hi, I was wondering if anyone has configured CAS SSO to o365 email? If so, I would love to hear your experience with the topic. Thanks, Laura -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see htt

[cas-user] Note to ClearPass users of CAS 3.5

2012-12-05 Thread Domazlicky, Eric
I would recommend to any users of CAS 3.5 with ClearPass configured to take a look at the changes in the pull request for CAS-1209: https://issues.jasig.org/browse/CAS-1209 https://github.com/Jasig/cas/pull/151 Basically the pull request removes the CAS Authentication Filter from clearPass-confi

Re: [cas-user] Help with Person Directory Configuration (CAS Attributes)

2012-12-05 Thread Misagh Moayyed
Jonathan, 2) The person directory project supports cascading queries. That might help you to some extent to develop recursive queries, but if that's not sufficient, you can always roll your own impl that makes the right calls down the level you'd like. Effectively, that would entail providing

RE:[cas-user] Help with Person Directory Configuration (CAS Attributes)

2012-12-05 Thread Danner, Mearl
The issue with Active Directory is the search referrals returned as part of the query. Basically the configuration tells the LDAP client in CAS to ignore them. If it chases the referrals the query will fail. -Original Message- From: Jonathan Windle [mailto:jonathan.win...@bellevuecolleg

Re: [cas-user] Jasig-CAS single sign out issue with Java clients/JBoss

2012-12-05 Thread Rodrigo Parra
That was clarifying indeed, Marvin. I am almost positive that it is a network issue so I will look into it. Thanks for your help, I will keep you posted. It might take me a couple of days, though. 2012/12/4 Marvin Addison > > If you notice something wrong at a first glance, let me know please.