Re: [cas-user] Service Registry in database

2013-03-14 Thread Andrew Morgan
I did some more testing on this today. I tried changing out the c3p0 pooled connection for the org.apache.commons.dbcp.BasicDataSource class. No change. The error trace in the browser leads me to believe it has something to do with creating a TGT: by: org.springframework.transaction.CannotCr

Re: [cas-user] CAS authentication and authorization ?

2013-03-14 Thread William G. Thompson, Jr.
On Thu, Mar 14, 2013 at 10:39 AM, Lê, Hà Hong Viêt wrote: > Hello, > > > > We are currently trying to setup a CAS server in order to manage > authentication for all ours services. > > > > We are also debating CAS’s perimeter : some would like to add some > information useful for authorization in t

RE: [cas-user] CAS authentication and authorization ?

2013-03-14 Thread Lê , Hà Hong Viêt
Thanks for the feedback ! I'd aslo like to let the client handle authorization. Using SAML is not mandatory in order to add custom attribute : its seems that the cas client is able to parse the CAS2.0 response with the function protected Map extractCustomAttributes(final String xml) https://gith

RE: [cas-user] Mod-auth-cas pro y ticket support

2013-03-14 Thread J Lopez
Thank you David. I will test ir. El 13/03/2013 19:07, "Ohsie, David" escribió: > In my experience, mod_auth_cas will gladly validate a proxy ticket as long > as you point it at "proxyValidate" instead of "serviceValidate" as the > ticket validation URI. What it won't do is validate the proxyChai

Re: [cas-user] CAS authentication and authorization ?

2013-03-14 Thread Adam P Causey
We let the clients using CAS handle authorization themselves, but we did extend CAS to pass along custom attributes using SAML 1.1. You may want to look into this, but any clients that want the additional attributes would need to use SAML to read the custom SAML namespace. We have had issues with

Re: [cas-user] CAS authentication and authorization ?

2013-03-14 Thread Curtis Ruck
In my opinion, which may differ from community at large... CAS doesn't provide authorization, but may be used in conjunction of a separate authorization scheme through attributes. We set a "role" attribute, and our applications require various roles. Some of our applications implement additional

[cas-user] CAS authentication and authorization ?

2013-03-14 Thread Lê , Hà Hong Viêt
Hello, We are currently trying to setup a CAS server in order to manage authentication for all ours services. We are also debating CAS's perimeter : some would like to add some information useful for authorization in the response after ticket validation. For example : james.bond