[cas-user] Java REST api for Spring security CAS server.

2013-08-08 Thread Lijo George
HI, I am using Spring security with CAS.I can do sso between my two spring web-apps.It is working fine but now i want to perform login through rest api(form a java desktop application). I know we can enable rest api using Spring RestTemplate .But I have some doubts about the same. I have

[cas-user] Java REST api for Spring security CAS server.

2013-08-08 Thread Lijo George
HI, I am using Spring security with CAS.I can do sso between my two spring web-apps.It is working fine but now i want to perform login through rest api(form a java desktop application). I know we can enable rest api using Spring RestTemplate .But I have some doubts about the same. I have

[cas-user] Java REST api for Spring security CAS server.

2013-08-08 Thread edakkulijp
I, I am using Spring security with CAS.I can do sso between my two spring web-apps.It is working fine but now i want to perform login through rest api(form a java desktop application). I know we can enable rest api using Spring RestTemplate .But I have some doubts about the same. I have

[cas-user] Java REST api for Spring security CAS server.

2013-08-08 Thread edakkulijp
HI, I am using Spring security with CAS.I can do sso between my two spring web-apps.It is working fine but now i want to perform login through rest api(form a java desktop application). I know we can enable rest api using Spring RestTemplate .But I have some doubts about the same. I have

[cas-user] Error attempting to load CAS service application

2013-08-08 Thread stefan . paetow
Whenever I try to access /services/ on my CAS server, I get this exception: 2013-08-08 12:06:04,258 ERROR [org.jasig.cas.client.util.CommonUtils] - Connection reset java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:185) at

Re: [cas-user] Show of hands – clustering? Which backend?

2013-08-08 Thread Marvin S. Addison
I'm still reviewing the clustering options for CAS, I haven't been able to get a feeling for how popular each option is. There's enough consensus among long-time deployers to go with a cache-based backend that I'm going with simply recommending it outright for HA deployments:

Re: [cas-user] MemcacheTicketRegistry documentation question

2013-08-08 Thread Marvin S. Addison
I'm following the docs at https://wiki.jasig.org/display/CASUM/MemcacheTicketRegistry to implement an memcached ticket registry. Check out the following: http://jasig.github.io/cas/installation/Memcached-Ticket-Registry.html Although that's targeted at CAS 4.0, the configuration for memcached

[cas-user] RE: [cas-user] Show of hands - clustering? Which backend?

2013-08-08 Thread Carlos Fernandez
We're using Ehcache with manual peer configuration and disk persistence. Previously we used JPA for the ticket and service registry, but a massive dump taken by the database server cured us of that. We also use Tomcat session replication even though our load balancer does session persistence,

[cas-user] Problem setting up LDAP on CAS

2013-08-08 Thread Chandrashekar Singh
I am trying to setup LDAP authentication handler. Ultimately I would like to connect Bugzilla to cas. Bugzilla support forums are suggesting that I use LDAP. Please say: 1. if this is the best means of performing this integration or not. 2. If this is indeed the best means, please see the

[cas-user] Re: [cas-user] RE: [cas-user] Show of hands – clustering? Which backend?

2013-08-08 Thread Paul B. Henson
On 8/7/2013 11:50 AM, Danner, Mearl wrote: Using ehcache on a test cluster. It is what we will implement in production. Cool. Could I trouble you to share your ticketRegistry.xml and ehcache.xml? I pieced mine together from the outdated wiki and various mailing list and blog postings, and I

[cas-user] Re: [cas-user] Re: [cas-user] RE: [cas-user] Show of hands – clustering? Which backend?

2013-08-08 Thread Tom Poage
On 08/08/2013 11:40 AM, Paul B. Henson wrote: It also seems to only be bootstrapping the service ticket cache on startup, not the ticket granting ticket cache. I tripped on that one--the TGT config is not inheriting from the abstract definition. I added a 'parent': bean

Re: [cas-user] Problem setting up LDAP on CAS

2013-08-08 Thread Chandrashekar Singh
On 2013-08-08 14:31, Chandrashekar Singh wrote: I am trying to setup LDAP authentication handler. Ultimately I would like to connect Bugzilla to cas. Bugzilla support forums are suggesting that I use LDAP. Please say: 1. if this is the best means of performing this integration or not. 2. If

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-08 Thread Paul B. Henson
On 8/7/2013 11:59 AM, Scott Battaglia wrote: You do realize you will have to configure and tune any solution :-) Well, yah :). Before comparing solutions, I would recommend defining your requirements and your tolerance for failure (if you have not). For example, Is it acceptable that if a

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-08 Thread Paul B. Henson
On 8/7/2013 12:18 PM, Aaron Bennett wrote: What we're planning for scheduled maintenance, is using memcached-tool to push a given server's cache to another server before shutting it down for maintenance... something as simple as this.. ./memcached-tool localhost dump | nc otherhost 11211 My

[cas-user] Re: [cas-user] Re: [cas-user] Show of hands – clustering? Which backend?

2013-08-08 Thread Paul B. Henson
On 8/7/2013 12:25 PM, Tom Poage wrote: Ehcache over RMI w/ automatic peer discovery. Thanks for the info; more detail in a previous reply, but would you mind sharing your ticket registry and ehcache configuration? -- Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-08 Thread Marvin S. Addison
My (limited and possibly inaccurate) understanding of memcached, specifically the client implementation for CAS, is that a particular key is hashed, and based on the outcome of that, the client looks for it on a specific node. So I'm not sure what good a copy of the data on another node will do

Re: [cas-user] Show of hands – clustering? Which backend?

2013-08-08 Thread Paul B. Henson
On 8/8/2013 6:10 AM, Marvin S. Addison wrote: http://jasig.github.io/cas/planning/High-Availability-Guide.html Thanks for providing this documentation; it's a bit more up to date and more understandable than the actual official wiki :). Maybe it could be integrated into the official site as

Re: [cas-user] RE: [cas-user] Show of hands - clustering? Which backend?

2013-08-08 Thread Paul B. Henson
On 8/8/2013 7:29 AM, Carlos Fernandez wrote: We're using Ehcache with manual peer configuration and disk persistence. So far it seems the unofficial poll shows a higher percentage of ehcache versus memcached deployments. At the risk of becoming repetitive :), would you mind sharing your

RE: [cas-user] Luminis 4.3 and External CAS

2013-08-08 Thread Carlos Fernandez
Ben, Getting Luminis 4 to authenticate to external CAS apparently involves programming. See the last comment in: http://www.lumdev.net/node/3444 This is the best solution I've seen so far, and I still don't know what the requisite custom login filter would need to do, so I've been

RE: [cas-user] Luminis 4.3 and External CAS

2013-08-08 Thread Danner, Mearl
I believe Luminis 5 is the only version that has it's own CAS. We are running a version of 4 (not sure the level) and it does not. Mearl Danner Systems Programmer Samford University Technology Services http://www.samford.edu From: Ben Branch [mailto:bbra...@uco.edu] Sent: Thursday, August 08,

Re: [cas-user] Luminis 4.3 and External CAS

2013-08-08 Thread cfernand
Luminis 5 comes bundled with CAS 3.2.something, but allows one to point the admin and portal tiers to an external instance (we use 3.5.2). Luminis 4 uses CAS 2 as an optional component. Best regards, -- Carlos M. Fernández Sr. Enterprise Systems Admin Saint Joseph's University W: 610-660-1501

[cas-user] EhCache on CAS 3.4.11

2013-08-08 Thread St Laurent, Mark
Can anyone point me to some correct documentation for installing EhCache on CAS 3.4.11? When I try installing it in accordance with the wiki, I get the following error on the Maven package: [ERROR] \maven\work\root\src\main\java\org\jasig\cas\ticket\registry\EhcacheTicketRegistry.java:[36,7]

Re: [cas-user] Luminis 4.3 and External CAS

2013-08-08 Thread Smith, Daniel
There is an internal CAS in Luminis 4 but it is not full featured. We talked with Ellucian about this very issue and if I recall correctly, their suggestion was to have the external CAS trust the internal CAS. However, we want to move away from Luminis so we did not want everyone to be required to

RE: [cas-user] MemcacheTicketRegistry documentation question

2013-08-08 Thread Aaron Bennett
-Original Message- From: Marvin S. Addison [mailto:marvin.addi...@gmail.com] Sent: Thursday, August 8, 2013 10:02 AM To: cas-user@lists.jasig.org Subject: Re: [cas-user] MemcacheTicketRegistry documentation question I'm following the docs at

[cas-user] Re: [cas-user] Re: [cas-user] Re: [cas-user] RE: [cas-user] Show of hands – clustering? Which backend?

2013-08-08 Thread Paul B. Henson
On 8/8/2013 11:52 AM, Tom Poage wrote: I tripped on that one--the TGT config is not inheriting from the abstract definition. I added a 'parent': Cool, thanks for the tip. Would you mind sharing the rest of your configuration so I can see if you fixed anything else I have broken :)? Thanks…

[cas-user] TGT and single-sign-out

2013-08-08 Thread Tom Freestone
We are using a ehcache backed ticket registry. We have implemented single-sign-out on our cas server. I was curious how the single-signout is tracked in the ticket registry? If you configure ehcache for 100,000 TGT's and only 60,000 are active (e.g. not evicted from ehcache), you will see the