Re: [cas-user] caching attributes?

2013-10-01 Thread Scott Battaglia
I looked at migrating to Spring 3's caching APIs and its more effort than I expected it to be. I'll have to defer it for now. On Thu, Sep 19, 2013 at 7:59 PM, Paul B. Henson wrote: > > From: Scott Battaglia [mailto:scott.battag...@gmail.com] > > > > I can't promise anything but I'll see if we c

Re: [cas-user] shib-cas-authenticator gone?

2013-10-01 Thread William G. Thompson, Jr.
Yes, the repo along with a critical security fix is now available: https://github.com/Unicon/shib-cas-authenticator/ Best, Bill On Mon, Sep 30, 2013 at 6:02 PM, Steve Podell wrote: > I'd also like to consider it for a few months in the future. Is this > authenticator coming back? > Thanks, >

Re: [cas-user] mod_auth_cas release?

2013-10-01 Thread Matt Smith
Yes, mod_auth_CAS has been suffering from some extended release-rot. We are looking to cut a 1.10 shortly. Binary releases are not something we are looking to provide ourselves - I would prefer to see Linux distro packages that take care of dependencies, etc., for that. I will nudge the Fedora/E

Re: [cas-user] CAS 3.4.2.1 - Services management KO...

2013-10-01 Thread Kurt Jn Marie
Hello All, I am new to CAS, but I have almost completed my CAS server configurations. I have a few questions of which I am hoping to get some answers from the CAS experts. 1. I am using mysql to manage services. After my first entry, I can no longer access the services management page https://cas

Re: [cas-user] mod_auth_cas release?

2013-10-01 Thread Paul B. Henson
On Tue, Oct 01, 2013 at 02:12:42PM -0700, Misagh Moayyed wrote: >I would definitely welcome a binary release. The build process can be a >bit tedious and long, specially to prepare the environment. >Sounds like we might need a decent CI tool to at least publish >snapshots somewhere.

Re: [cas-user] Disk write failure

2013-10-01 Thread Tom Poage
On 10/01/2013 10:50 AM, Tom Poage wrote: >> 2013-10-01 09:21:19,836 ERROR [net.sf.ehcache.store.disk.DiskStorageFactory] >> - >> java.util.ConcurrentModificationException >> at java.util.HashMap$HashIterator.nextEntry(HashMap.java:894) >> at java.util.HashMap$EntryIterator.next(Ha

Re: [cas-user] mod_auth_cas release?

2013-10-01 Thread Misagh Moayyed
I would definitely welcome a binary release. The build process can be a bit tedious and long, specially to prepare the environment. Sounds like we might need a decent CI tool to at least publish snapshots somewhere. Bamboo? Travis? - Original Message - From: "Paul B. Henson" To: c

[cas-user] mod_auth_cas release?

2013-10-01 Thread Paul B. Henson
It looks like the last mod_auth_cas release (1.0.9.1) is over three years old. Reviewing the changes since then, there are at least a few I think I'd like to have. Are there any plans to cut a new release, or is mod_auth_cas switching to the "just use the latest git checkout" philosophy some projec

Re: [cas-user] mod_auth_cas with memcached backend

2013-10-01 Thread Marvin S. Addison
Hi Guys, what do you think about such feature? It could be very useful in Reverse proxy cluster with mod_auth_cas working as CAS client. There are two stores that I'm aware of in mod_auth_cas: assertion data (referred to as cookies) and proxy tickets. I imagine memcached could be used for both

Re: [cas-user] List Tickets by UserName

2013-10-01 Thread Misagh Moayyed
The ticket registry in the CAS 3.5.x release line does not allow a caller to retrieve a list of tickets. You could review the EhcacheTicketRegistry.java file in the master branch of course and see if for the time being that can be supplied to your local overlay. - Original Message - F

Re:[cas-user] List Tickets by UserName

2013-10-01 Thread Rakesh
hi, Looks the like active-sso-session-report addon does not support Ehcache ticket registry as I get the following message { "notAvailable" : "The underlying implementation of does not support a bulk retrieval of tickets" } Is there anything else that I could try to get the list of active

[cas-user] Disk write failure

2013-10-01 Thread Tom Poage
Anyone see this? Observed (so far) in only one of three nodes. Start of the school year, so systems are busy. > 2013-10-01 09:20:53,809 ERROR [net.sf.ehcache.store.disk.DiskStorageFactory] > - > 2013-10-01 09:20:54,056 ERROR [net.sf.ehcache.store.disk.DiskStorageFactory] > - > 2013-10-01 09:

Re: [cas-user] CAS - apache fails to SSL-handshake

2013-10-01 Thread Henrik Alstad
Fixed it. The openssl s_client was a really neat tool...didn't know about it. I'm a rookie about this :) I was so fixed on the client-side, but the error was actually at the cas-end. I use JDK6 temporairly due to a dependency, and it turns out, OpenJDK6 got a bug. I installed Suns JDK instead of O

Re: [cas-user] CAS - apache fails to SSL-handshake

2013-10-01 Thread Michael Herring
Correct, MOD_AUTH_CAS is looking to verify your CAS server via CASCertificatePath. -Michael On Tue, Oct 1, 2013 at 11:10 AM, Henrik Alstad wrote: > Yes, that is correct. > fet(front-end test) is the apache server. > bet(back-end test) is the cas-server. > > So I assume Marvin meant that CASCert

Re: [cas-user] CAS - apache fails to SSL-handshake

2013-10-01 Thread Henrik Alstad
Yes, that is correct. fet(front-end test) is the apache server. bet(back-end test) is the cas-server. So I assume Marvin meant that CASCertificatePath should point to a directory or file with a certificate from bet, not fet? :) Cheers, henrik On Tue, Oct 1, 2013 at 3:37 PM, Michael Herring wrot

Re: [cas-user] [cas-user]What are advantages and downside when use MYSQL than LDAP for CAS authentication?

2013-10-01 Thread Đào Văn Phong
> > Hi, > Generally, the good technology is the one you already have installed and > managed in your infrastructure. > LDAP is known to be very fast for read operations, but less efficient for > writes. MySQL might not be as fast for reads but certainly better for > writes. > Unless you have very h

Re: [cas-user] CAS - apache fails to SSL-handshake

2013-10-01 Thread Michael Herring
I see a slight difference between hostnames, is that expected? apache: svg-comp-fet.example.no cas: svg-comp-bet.example.no -Michael On Tue, Oct 1, 2013 at 9:19 AM, Marvin S. Addison wrote: > I couldnt make much sense of the log. >> > > I'll try to point out some things. > > > [Tue Oct 01 1

Re: [cas-user] CAS - apache fails to SSL-handshake

2013-10-01 Thread Marvin S. Addison
I couldnt make much sense of the log. I'll try to point out some things. [Tue Oct 01 11:26:47 2013] [debug] ssl_engine_init.c(807): Configuring RSA server certificate [Tue Oct 01 11:26:47 2013] [debug] ssl_engine_init.c(846): Configuring RSA server private key [Tue Oct 01 11:26:48 2013] [info]

[cas-user] mod_auth_cas with memcached backend

2013-10-01 Thread Leszek Miś
Hi Guys, what do you think about such feature? It could be very useful in Reverse proxy cluster with mod_auth_cas working as CAS client. /lm -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http

Re: [cas-user] CAS 3.4.2.1 - Services management KO...

2013-10-01 Thread Sébastien Toulmonde
Hi Jérôme, Yeah sorry about the lenghty-ugly stack trace, I've got no real way to format it... Here's my cas.properties file where I define the entry points: cas.securityContext.serviceProperties.service=https://d1109142:8181/cas/services/j_acegi_cas_security_check cas.securityContext.casProcess

Re: [cas-user] CAS 3.4.2.1 - Services management KO...

2013-10-01 Thread Jérôme LELEU
Hi, Your stacktrace is hard to read. I see an "Access is denied" and a redirection through the authentication entry point, which is pretty normal when you are not authenticated and try to access a protected page. The main settings are the urls of the services webapp and entry point ("CAS URLs" in

Re: [cas-user] [cas-user]What are advantages and downside when use MYSQL than LDAP for CAS authentication?

2013-10-01 Thread Jérôme LELEU
Hi, Generally, the good technology is the one you already have installed and managed in your infrastructure. LDAP is known to be very fast for read operations, but less efficient for writes. MySQL might not be as fast for reads but certainly better for writes. Unless you have very high trafic on y

[cas-user] CAS 3.4.2.1 - Services management KO...

2013-10-01 Thread Sébastien Toulmonde
Hi CAS gurus, I'm having the strangest issue right now regarding the services management app... It's no more accessible: I get a blank screen (https://cas-server:8181/cas/services) I've tried on several servers, including a separate workstation, and hit several DBs - same issue. I'm using Mys

[cas-user] [cas-user]What are advantages and downside when use MYSQL than LDAP for CAS authentication?

2013-10-01 Thread Đào Văn Phong
Hi everybody, I have a question and I don't know the answer to that question. I need someone who can help me answer that question. What are advantages and downside when use MYSQL than LDAP for CAS authentication? Thank you so much. -- *ĐÀO VĂN PHONG* *Hai Phong Private University* -- You