Re: [cas-user] CURL error #35: error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error

2013-04-11 Thread Joachim Fritschi
From the error message i guess you are using phpcas. Please have a look at https://wiki.jasig.org/display/CASC/phpCAS+troubleshooting for instructions on how to figure out your problem. But from the looks of it it has nothing to do with phpcas and is an underlying ssl problem. It might be

Re: [cas-user] Cas Server authentication to external Web-Services.

2013-04-11 Thread Robert Oschwald
Here are the rough steps how I created a WsAuthenticationHandler for CAS 3.4.xx using SpringWS 1.5.4 and JaxB marshalling. Use the recommended Maven Overlay project setup as stated in the CAS CASUM Wiki manual. 1. Implement a WsAuthenticationHandler which extends

[cas-user] CAS as a SAML service provider

2013-04-11 Thread Chang, Marty
Hello, everyone, do you by chance know whether CAS can be setup as a SAML 2.0 or 1.1 service provider? We have a product that currently have no SSO capability, but by bolting CAS to it in theory we should be able to achieve SSO via SAML through CAS into this end product. Marty… -- You are

[cas-user] Custom Credentials problem

2013-04-11 Thread kanzel
Hello. I've created CustomCredentials but NOT by extending UsernamePasswordCredentials. My credentials contains only one property(string). Also, I've created CredentialsToPrincipalResolver and CredentialsAuthenticationHandler. Now, what are next steps? When I submit my credentials, look like they

[cas-user] CAS 3.3.5-how to rewrite CAS login URL

2013-04-11 Thread Rohit Kotecha
Hi All, I am using CAS 3.3.5 with Spring web application and it's working fine. When any user click on any secure resource, it will be redirected to CAS login page. and browser shows url like : http://localhost:/cas-server-webapp-3.3.5/login?service

re:[cas-user] CAS as a SAML service provider

2013-04-11 Thread jleleu
Hi, I assume you mean identity provider instead of service provider. Please read : https://groups.google.com/forum/?fromgroups=#!searchin/jasig-cas-user/SAML/jasig-cas-user/rKK5Gsv3-3g/aXMvARR8fzkJ Best regards, Jérôme -- You are currently subscribed to cas-user@lists.jasig.org as:

re:[cas-user] CAS 3.3.5-how to rewrite CAS login URL

2013-04-11 Thread jleleu
Hi, Spring Security CAS client uses a single service url when redirecting to /cas/login url. It works that way as the original protected url is always saved before redirection to be restored after authentication. If you want to control the url post authentication, you need to do that on

Re: [cas-user] CAS as a SAML service provider

2013-04-11 Thread Chang, Marty
Hello, Jérome, Thank you for the quick response! Actually in my case I _do_ mean service provider. We are planning to use Salesforce as the SAML 2.0 IdP, where users would click a link within Salesforce to be passed through to Self-Service Banner. SSB out of the box does not support SAML, so one

Re:[cas-user] CAS as a SAML service provider

2013-04-11 Thread jleleu
Hi, Did you take a look at https://code.google.com/p/casshib/ ? Best regards, Jérôme -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

RE: re:[cas-user] CAS 3.3.5-how to rewrite CAS login URL

2013-04-11 Thread Rohit Kotecha
HI, Thanks for quick reply. I don’t want to control post authentication url. I want to control the url when CAS's login page is displayed to user. From my spring web application when user click on any secure link, it will redirected to CAS's login page. That is ok. But URL in the browser at

Re: [cas-user] Use other credentials than UsernamePasswordCredentials

2013-04-11 Thread Frederico Guilherme Zveiter de Albuquerque
Hi, Kanzel. Could you be more specific? What are you trying to achieve? *Frederico Zveiter* -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] Use other credentials than UsernamePasswordCredentials

2013-04-11 Thread Mihalj Kanzel
Well, if You could explain to me how can I write my own credentials? For instance Credentials with just one property(string), but other than UsernamePasswordCredentials (NOT to extends this class!!!), and use it in CAS. My biggest problem is in binding that credentials. I've allready

[cas-user] Executing method upon login, regardless of page chosen

2013-04-11 Thread Bruno
I am using CAS 3.1.3 (yes I know, prehistoric) and love it. I have an application that must execute a bit of code after the user logged in, regardless of what page he is going to. For example, it could check his birth date in the database and set a bday flag in the session so that all pages

Re: [cas-user] FacebookObject serialization problem.

2013-04-11 Thread Frederico Guilherme Zveiter de Albuquerque
Thanks, Jérôme. Any tip on a temporary workarounds? *Frederico Zveiter* On Thu, Apr 11, 2013 at 11:07 AM, jleleu lel...@gmail.com wrote: Hi, CAS-1151 is not exactly the same problem, it was about serialization also but Java serialization not Kryo serialization. It has been fixed, but

Re:[cas-user] FacebookObject serialization problem.

2013-04-11 Thread jleleu
Hi, I did some tests : all classes that should be serialized with Kryo must be registered in Kryo. It's done here : https://github.com/Jasig/cas/blob/3.5.x/cas-server-integration-memcached/src/main/java/org/jasig/cas/ticket/registry/support/kryo/KryoTranscoder.java, initialize method. Classes

RE:[cas-user] Unable to see attributes in the response xml.

2013-04-11 Thread Ben Branch
All, Found the issue. I did not have the org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver bean defined in my deployerConfigContext.xml. After adding this and restarting my cas services, I was then able to see my attributes in the xml response. Ben Branch

Re: [cas-user] Executing method upon login, regardless of page chosen

2013-04-11 Thread Scott Battaglia
Is there a reason you can't keep the code where it is (in terms of the method) but move it above the slightly unreliable database logic? -Scott Battaglia PGP Public Key Id: 0x383733AA LinkedIn: http://www.linkedin.com/in/scottbattaglia On Thu, Apr 11, 2013 at 11:20 AM, Bruno

[cas-user] Cross-Origin Resource Sharing

2013-04-11 Thread Venkat
Hi We are trying use CAS REST API to get TGT and service ticket. We are trying to do this from java script. We are getting the below error. XMLHttpRequest cannot load https://host123:8443/cas/v1/tickets. Origin http://localhost:8080 is not allowed by Access-Control-Allow-Origin. CAS response

Re: [cas-user] Cross-Origin Resource Sharing

2013-04-11 Thread Curtis Ruck
I've found the best mechanism for this is placing a remote proxy between applications (including CAS) and the users. -- Curtis Ruck Anytime: 210-857-1126 On Thu, Apr 11, 2013 at 7:10 PM, Venkat venkatesh.madhipa...@vce.comwrote: Hi We are trying use CAS REST API to get TGT and service