RE: [cas-user] Mixed auth: LDAP with user/pass + X509

2014-03-07 Thread Reig Gonzalez, Alvaro
Hi Ricardo, I have both authentications enabled in my setup (along with kerberos). I don't have any docs, but if you get intro dead ends I can look in my setup and try to help you out. First, I have a X509CertificateLDAPEntryMapperResolverConfig bean inside my credentialsToPrincipalResolvers:

Re: [cas-user] Mixed auth: LDAP with user/pass + X509

2014-03-07 Thread Ricardo Borillo
Hi Ávaro, Thank you very much for your help. I will review your recomendations and let you know :) --- Salut, Ricardo Borillo Domenech ~ @borillo http://xml-utils.com On Fri, Mar 7, 2014 at 9:23 AM, Reig Gonzalez, Alvaro alvaro.r...@inap.es wrote: Hi

Re: [cas-user] Mixed auth: LDAP with user/pass + X509

2014-03-07 Thread Marvin Addison
Now, we need to add X509 based authentication. The idea is that the user will be able to choose between regular LDAP auth with login/pass or X509 certificate. It's supported and we have used it production for several years. I would _strongly_ recommend that you configure your container for

Re: [cas-user] More detailed question regarding AD + SunDS LDAP for Banner

2014-03-07 Thread Marvin Addison
I am not sure why Ellucian did not make use of a key-ref, but there it is. I think an explanation of why attribute filters are defined in both places would be of great help to me .. this has always been murky in my understanding. I've read your original post a couple times and I'm not

Re: [cas-user] cas 4.x single logout

2014-03-07 Thread Ryan Connolly
Oh, I see, Jerome. Any plans to update the shiro-cas integration or would you be able to offer any hints as to what would be required to provide single logout in a clustered environment by providing my own implementation for now? On Mar 7, 2014 2:50 AM, Jérôme LELEU lel...@gmail.com wrote:

Re: [cas-user] cas 4.x single logout

2014-03-07 Thread Jérôme LELEU
The shiro-cas module is based on the Java CAS client so the main job is to update the Java CAS client to support SLO front channel logout request and then to upgrade the Shiro module... I will work on that very soon... Best, Jérôme 2014-03-07 15:10 GMT+01:00 Ryan Connolly ryn...@gmail.com:

[cas-user] Audit: Unknown - What does this mean?

2014-03-07 Thread Ben Branch
All, I've been digging around the CAS UM, and the wiki and I have not found my answer yet. I'm just curious as to why when a user authenticates that in some portions it shows the users id that he/she logged in with, but further in the logs you see that the ID is no longer present and it says

[cas-user] ApplicationContextException

2014-03-07 Thread Marvin E Budd
I think I got around the log4j issue by using cas.properties. Now I find in the tree for the cas.log file. It looks like another context is not initializing. I'm used to this type of error being a programmer error. Java error stacks are so friendly! My platform is Red Hat 6 running Weblogic.

RE: [cas-user] New CAS implementation log4j

2014-03-07 Thread Misagh Moayyed
Looking more closely at this, it seems like the problem is caused because your log4j.xml file is in the wrong directory. What happens if you move /oracle/app/cas/cas-server-3.5.2/cas-server-webapp/src/main/webapp/WEB-IN F/spring-configuration/log4j.xml over to

[cas-user] New implementer: CAS and PeopleSoft

2014-03-07 Thread Tim Raymond
We are implementing CAS at our campus, and intend to use it to perform SSO with PeopleSoft. A few other campuses in our system are using CAS and have encountered issues with deep links after they upgraded to PeopleTools 8.53. There appears to be two methodologies between the 4 schools in our

RE: [cas-user] New implementer: CAS and PeopleSoft

2014-03-07 Thread Misagh Moayyed
Tim, I have worked on a CAS/PS integration and although I think the peopletools version I was working with was 8.52, I can't see any issues with applying the same method to 8.53. The approach that we used is actually a bit different, in that it utilizes the Java CAS client directly as opposed to

RE: [cas-user] New implementer: CAS and PeopleSoft

2014-03-07 Thread Tim Raymond
Thanks for the reply Misagh. Do you happen to have any documentation on CAS/PS integration the way you performed it? Thanks Tim Raymond Director, Central Applications Instructional and Information Technology California State Polytechnic University, Pomona Phone: 909.869.6851 Cell: 909.260.3200

Re: [cas-user] More detailed question regarding AD + SunDS LDAP for Banner

2014-03-07 Thread Linda Toth
Thank you .. This confirms what I was arriving at. Our use case is that we have an AD LDAP which expires accounts based on individual campus policy. But the application we are configuring CAS for provides information concerning W2 forms, transcripts, class history, etc. They do not want to

Re: [cas-user] More detailed question regarding AD + SunDS LDAP for Banner

2014-03-07 Thread Linda Toth
Marvin, et al Sorry, I picked the wrong Principal Resolver bean to ask about. The configuration Ellucian uses is PrincipalBearningCredentialsToPrincipalResolver CredentialsToLDAPAttributePrincipalResolver, and then within that UsernamePasswordCrednetialsToPrincipalResolver. I think the