Re: [cas-user] Sending domain parameter

2013-11-14 Thread Alberto Cabello Sánchez
On Wed, Nov 13, 2013 at 04:44:49PM +, Idan Fridman wrote: Hi Alberto, I am building cas.war with maven. But I don't havnt download the source code. I run maven install and copy the CAS.WAR into my tomcat deployment. That's how I should treat it right? Hi, Idan, Here is my entire source

[cas-user] Shibboleth IDP with CAS

2013-11-14 Thread H Sheth
Hi I have CAS 3.5.2 server integrated with my application. We need SAML 2.0, hence we have decieded to use Shibboleth with CAS. I have installed Shibboleth IDP . I have updated configuration in Shibboleth IDP as mentioned at https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration .

[cas-user] Sequence number in ticket granting ticket id

2013-11-14 Thread Guido Wimmel
Hi, is there a specific reason why CAS by default includes sequence numbers in the generated ticket granting ticket ids? (e.g. TGT-1-x, TGT-2-x, ...) With the help of the sequence numbers, one could perform traffic analyses (e.g. determining how many logins there are in a given

Re: [cas-user] Sequence number in ticket granting ticket id

2013-11-14 Thread Pelit Mamani
I'm no expert, but IMHO it seems like a cool catch :) Not critical for my project, but nice keep in mind. Shouldn't it be easy to implement your own org.jasin.cas.util.UniqueTicketIdGenerator? Just a minor unrelated note - I hope your CAS connections are HTTPS...? because when I hear traffic

[cas-user] how to Retrieve more than one result for multiple rows attributeRepository

2013-11-14 Thread ray
Hi, I am trying to setup CAS to return attributes(user permissions) related to an authenticated user. These attributes reside in an oracle database. I have managed to get some attributes returning correctly however the queries return only the first result. I can see in the logs that I am

RE: [cas-user] how to Retrieve more than one result for multiple rows attributeRepository

2013-11-14 Thread Idan Fridman
I'll try to give farther explanation: I expect my multi-value Attribute: PERMISSION_NAME to be king of list or anything other type which hold multi valued results. However I get only the first one: ROLE_PERMISSIONS_MY_EVENTS. Any idea why ? -Original Message- From: ray

RE: [cas-user] how to Retrieve more than one result for multiple rows attributeRepository

2013-11-14 Thread Idan Fridman
Hi, Maybe the problem appears because I am using MergingPersonAttributeDaoImpl which is wrapping the SingleRowJdbcPersonAttributeDao that I am using ? -Original Message- From: Idan Fridman Sent: Thursday, November 14, 2013 2:41 PM To: cas-user@lists.jasig.org Subject: RE: [cas-user] how

[cas-user] Strange CAS (or Liferay) issue

2013-11-14 Thread Angelo Immediata
Hi there I'm usign CAS with Liferay 5.2.3 I had this strange issue. An user tried to log on my portal He used his own laptop and he confirmed to me that he never left this laptop to other colleagues; he is the only one in using this computer When he tried to login on the Portal, the CAS login

[cas-user] How to config ServicesRegistry and Database Connection with POSTGRESQL

2013-11-14 Thread Đào Văn Phong
Hi everybody, I tried config ServicesRegistry and Database Connection with POSTGRESR follow this guide https://wiki.jasig.org/display/CASUM/Configuring but failed. I hope someone help me for issue. Thank you so much. -- *ĐÀO VĂN PHONG* *Hai Phong Private University* -- You are currently

Re: [cas-user] Sequence number in ticket granting ticket id

2013-11-14 Thread Marvin Addison
With the help of the sequence numbers, one could perform traffic analyses (e.g. determining how many logins there are in a given timespan), which might be undesired. You would need credentials in order to perform such an analysis. I suppose a curious user could perform this analysis on his or

[cas-user] Notifications

2013-11-14 Thread Steve Cook
Does anyone have a solution for displaying messages on the CAS login screen. I would like to post service outage notices and maybe even emergency notifications on the main login screen when appropriate. I guess what makes this difficult is that there won't always be a message to display and it

[cas-user] RE : Notifications

2013-11-14 Thread HURTEVENT VINCENT
Hi, we have the same interest in displaying messages or news on CAS login view and we're thinking about a Javascript code which fetchs feeds from our main institutionnal CMS. De : Steve Cook [steve.c...@humber.ca] Date d'envoi : jeudi 14 novembre 2013 16:42

[cas-user] RE : Notifications

2013-11-14 Thread HURTEVENT VINCENT
RSS feeds, De : HURTEVENT VINCENT Date d'envoi : jeudi 14 novembre 2013 16:48 À : cas-user@lists.jasig.org Objet : RE : Notifications Hi, we have the same interest in displaying messages or news on CAS login view and we're thinking about a Javascript code

Re: [cas-user] Notifications

2013-11-14 Thread Laura McCord
Hi Steve, We customized our login to allow a dept to add custom messaging using information that is stored in a xml file (accessible through a url). Then, we add the url to the Theme Name field in the services registry. Our customizations look to see if there is any information in the xml

RE:[cas-user] Notifications

2013-11-14 Thread Ted Fisher
That is what we do - although ours is just retrieving a JSON feed. Ted F. Fisher Information Technology Services [Description: BGSU] From: HURTEVENT VINCENT [mailto:vincent.hurtev...@univ-lyon1.fr] Sent: Thursday, November 14, 2013 10:49 AM To: cas-user@lists.jasig.org Subject: [cas-user] RE :

RE: [cas-user] CAS/ADFS/WS-Federation

2013-11-14 Thread Gasper, John
Hi Brian, Sorry I'm late to the ball. Did you get this figured out? I'd start by examining the data posted to CAS from ADFS. In Chrome you can use the Network tab in the Dev tools and look at the post headers. I'd take the posted response and save it to an .xml and open it in IE or Chrome for

Aw: Re: [cas-user] Sequence number in ticket granting ticket id

2013-11-14 Thread Guido Wimmel
Hi, I also think that the information that can be gained in this way is of limited use, but if you were very strict, you could still demand that no such such information could be obtainable. I still wonder whats the purpose of the sequence numbers - probably to absolutely ensure

RE:[cas-user] Notifications

2013-11-14 Thread Ben Branch
Steve, We made direct modifications to the $CAS_APP/WEB-INF/view/jsp/default/ui/casLoginView.jsp file to display messages on the login screen. Maybe not ideal, but it did work for what we needed. I hope this helps. Ben Branch UNIX/Linux Administrator University of Central Oklahoma ITIL

Re: Re: [cas-user] Sequence number in ticket granting ticket id

2013-11-14 Thread Marvin Addison
I still wonder what's the purpose of the sequence numbers - probably to absolutely ensure uniqueness? I believe that's correct. The guidelines for unique identifiers that I'm familiar with recommend including both sequential data and secure random data, and the format of CAS TGTs is consistent

RE:[cas-user] ClearPass with Load-Balanced CAS

2013-11-14 Thread St Laurent, Mark
Still having issues with this. We've narrowed it down to the EncryptedMapDecorator. If we implement it without the encryption it works, but then the ClearPass credentials are stored in clear text, which isn't an acceptable solution. If anyone who has deployed ClearPass in a load-balanced CAS

Re: [cas-user] How to config ServicesRegistry and Database Connection with POSTGRESQL

2013-11-14 Thread Marvin Addison
I tried config ServicesRegistry and Database Connection with POSTGRESR follow this guide https://wiki.jasig.org/display/CASUM/Configuring but failed. I hope someone help me for issue. Here's the data source config for our overlay that used PG: bean id=dataSource

Re: [cas-user] Notifications

2013-11-14 Thread MichaelEDLICH
Hi, It´s very interresting, We havn't java devolpers in our organization, and we have this need for long time! Envoyé de mon iPhone Le 14 nov. 2013 à 16:50, Laura McCord lmcc...@ucmerced.edu a écrit : Hi Steve, We customized our login to allow a dept to add custom messaging using

Re: [cas-user] Notifications

2013-11-14 Thread MichaelEDLICH
Can you send some détails ? Thanks ! Michael. Le 14 nov. 2013 à 21:59, MichaelEDLICH mich...@edlich.net a écrit : Hi, It´s very interresting, We havn't java devolpers in our organization, and we have this need for long time! Envoyé de mon iPhone Le 14 nov. 2013 à 16:50, Laura

Re: [cas-user] Notifications

2013-11-14 Thread Laura McCord
Sure, no problem. Let me take a moment to package it up and I'll send it to your email address. Laura On 11/14/13 3:01 PM, MichaelEDLICH wrote: Can you send some détails ? Thanks ! Michael. Le 14 nov. 2013 à 21:59, MichaelEDLICH mich...@edlich.net mailto:mich...@edlich.net a écrit :

RE:[cas-user] Notifications

2013-11-14 Thread Mosior, Benjamin
Just to chime in, we use jQuery Ajax to integrate with the Ektron CMS for our announcements and information sections. The CMS returns some XML, we parse out the HTML element, and then populate the empty divs/ that have specific IDs. You can see it in action here:

RE: [cas-user] CAS/ADFS/WS-Federation

2013-11-14 Thread Brian Clayton
Hi John, Thanks for the response (and creating the ws-federation module!). I haven't gotten it working yet, although I took a bit of a break to catch up on other stuff. I've attached the wresult form data as an XML file. The only other form element passed was wa=wsignin1.0. The XML from ADFS

Re: [cas-user] ClearPass with Load-Balanced CAS

2013-11-14 Thread Tom Poage
On 11/14/2013 12:50 PM, St Laurent, Mark wrote: Still having issues with this. We’ve narrowed it down to the EncryptedMapDecorator. If we implement it without the encryption it works, but then the ClearPass credentials are stored in clear text, which isn’t an acceptable solution. If anyone who

Re: [cas-user] ClearPass with Load-Balanced CAS

2013-11-14 Thread Tom Poage
On 11/14/2013 03:07 PM, Tom Poage wrote: E.g. I see reference to SHA-512 in EncryptedMapDecorator.java and suspect it may not be supported with the standard JCE policy. Nope, that's wrong: http://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html#MessageDigest Tom.

Re: [cas-user] Notifications

2013-11-14 Thread Isaac Davis-King
We have a cron job (perl script) on our CAS servers that grabs an RSS feed of our IT alerts as well as a couple of marketing messages and images, and parses them into html fragments that are written to local files. These files are incorporated into the login page template via jsp includes. This

RE: [cas-user] ClearPass with Load-Balanced CAS

2013-11-14 Thread St Laurent, Mark
Yeah, just got done trying it in the test environment, no effect. Thanks, -- Mark St. Laurent Web Systems Administrator Yavapai College (928) 717-7654 http://www.yc.edu -Original Message- From: Tom Poage [mailto:tfpo...@ucdavis.edu] Sent: Thursday,

RE: [cas-user] ClearPass with Load-Balanced CAS

2013-11-14 Thread Misagh
Mark could u please post relevant snippets of your clearpass and deployer config context xml files perhaps as github gists? On Nov 14, 2013 3:35 PM, St Laurent, Mark mark.stlaur...@yc.edu wrote: Yeah, just got done trying it in the test environment, no effect. Thanks,

RE: [cas-user] CAS/ADFS/WS-Federation

2013-11-14 Thread Gasper, John
Hi Brian, You are welcome. Hopefully we can get you going here. Your saml11/wsfed response looks appropriate to me. Here's a copy of my backing map: bean class=org.jasig.services.persondir.support.StubPersonAttributeDao id=attributeRepository !-- The attributes that are being made available

RE: [cas-user] Demo CAS Protocol Support in Shib IdPv3

2013-11-14 Thread Paul B. Henson
From: Marvin Addison [mailto:marvin.addi...@gmail.com] Sent: Friday, November 08, 2013 7:07 AM I have a working demo that showcases basic CAS protocol v2 support in the Shib IdPv3. Hmm, interesting; is this just an exercise in seeing whether or not it could be done, or are there plans to

Re: [cas-user] How to config ServicesRegistry and Database Connection with POSTGRESQL

2013-11-14 Thread Đào Văn Phong
Dear Sir, Thank for your helping. Can you guide to me for step by step. I'm newbie so dont have much experience. 2013/11/15 Marvin Addison marvin.addi...@gmail.com I tried config ServicesRegistry and Database Connection with POSTGRESR follow this guide