[cas-user] Administration tool

2014-05-15 Thread Baldur Dae
Hi community, Sorry if this question is duplicated but I can't find it. I'm really happy with cas because it fulfills my current needs. However I'd like to have an webapp providing the following functions: - Force logout for a certain user - Show authenticated users: username, logon

re:[cas-user] Determine Service name via Audit trail

2014-05-15 Thread ray
Wonder if anyone had a chance to have any idea at this one? Thanks, ray. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[cas-user] show custom error messages on CAS Authentication failure (DB based Authentication)

2014-05-15 Thread Puneet Goyal
Hi , I am using Database for authenticating credentials of user and for the business logic we've overridden QueryDatabaseAuthenticationHandler. Now , I want to return different authentication messages for different cases, e.g. If a user is locked, on every authentication attempt, returned

Re: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Jérôme LELEU
Hi, I think you just have the service url in the audit class. So you would need to query the services manager with this service url to get the matching service to finally get its name. Best regards, Jérôme 2014-05-15 10:10 GMT+02:00 ray idan.frid...@cellebrite.com: Wonder if anyone had a

RE: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Idan Fridman
Hi Jerome, 1. Which Audit class? 2. How do you query the services manager? Programmatically? From: Jérôme LELEU [mailto:lel...@gmail.com] Sent: Thursday, May 15, 2014 2:16 PM To: cas-user@lists.jasig.org Subject: Re: [cas-user] Determine Service name via Audit trail Hi, I think

Re: [cas-user] show custom error messages on CAS Authentication failure (DB based Authentication)

2014-05-15 Thread Jérôme LELEU
Hi, I guess you are talking about CAS 3.5 as with CAS 4.0, it doesn't return a boolean any more. I think you would need to throw some specific exception inheriting from AuthenticationException and handle it properly in a dedicated MyAuthenticationManagerImpl. Best regards, Jérôme 2014-05-15

Re: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Jérôme LELEU
Hi, 1) In the deployerConfigContext.xml, you reference an audit trail class: https://github.com/Jasig/cas/blob/master/cas-server-webapp/src/main/webapp/WEB-INF/deployerConfigContext.xml#L180. You would need to create your own. 2) Programmatically yes by using the ServicesManager class injected in

RE: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Idan Fridman
Hi Jerome, I get your direction. But still some holes I find hard to understand. 1. I had to modify auditTrailContext.xml (and not the reference bean at the deployConfigContext): !-- ListAuditTrailManager auditTrailManagers -- constructor-arg index=2 list

Re: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Jérôme LELEU
Hi, You should certainly override or recreate the way things are saved to database to add the name of the service: https://github.com/dima767/inspektr/blob/master/inspektr-support-spring/src/main/java/com/github/inspektr/audit/support/JdbcAuditTrailManager.java#L153in your new audit trail

RE: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Idan Fridman
I understood. Could you explain point 1? Why I had to add MyAuditTrailManager to auditTrailContext.xml while it the auditTrailer bean is completely ignore at deployerContext.xml? Thanks. From: Jérôme LELEU [mailto:lel...@gmail.com] Sent: Thursday, May 15, 2014 3:37 PM To:

Re: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Jérôme LELEU
Hi, It's the first I see more than one audit trail manager, though it seems feasible in the AuditTrailManagementAspect. I see a loop through all the managers in this aspect. Did you try some debugging (I don't see any logs)? Best regards, Jérôme 2014-05-15 15:05 GMT+02:00 Idan Fridman

RE: [cas-user] Minimal code for custom casLoginView.jsp form?

2014-05-15 Thread Zac Harvey
The value of the response's Location header is https://my-cas-server.ourcompany.org:5443/login; (obviously my-cas-server.ourcompany.org is not the real value!). There was no Set-Cookie header (for response or request), however there was a Pragma response header with a value of no-cache. There

Re: [cas-user] Determine Service name via Audit trail

2014-05-15 Thread Idan Fridman
Yes i tried to debug this one. The code never get there. - Reply message - From: Jérôme LELEU lel...@gmail.com To: cas-user@lists.jasig.org cas-user@lists.jasig.org Subject: [cas-user] Determine Service name via Audit trail Date: Thu, May 15, 2014 5:03 PM Hi, It's the first I see more

RE: [cas-user] Minimal code for custom casLoginView.jsp form?

2014-05-15 Thread Carlos Fernandez
Now it's getting somewhere. Did you install the CAS app as ROOT? Otherwise the Location header URL points to something else. What value do you have set for server.prefix in cas.properties? Since you're not getting the CASTGC, CAS will respond with the login page, exactly as you're seeing.

RE:[cas-user] CAS returns user attributes with other credentialsToPrincipalResolvers, but not with kerberos

2014-05-15 Thread Rhian Resnick
Reig, We are having a similar problem running 3.5.2.1, (using REMOTE_USER) , we had it working in the last 3.4.x but it is no longer working in 3.5.2.1. Section from our deployerConfig: property name=credentialsToPrincipalResolvers list !-- | UsernamePasswordCredentialsToPrincipalResolver

[cas-user] cas 4.0.0, LdapAuthenticationHandler and objectGuid

2014-05-15 Thread Lapanja, Bob@POST
I recently updated my CAS 3.5.2 installation to CAS 4.0.0. I got it working after working through some initial issues with the LdapAuthenticationHandler not finding the users. I had to set subtreeSearch to true on org.ldaptive.auth.PooledSearchDnResolver for my authenticator, in case somebody

Re: [cas-user] cas 4.0.0, LdapAuthenticationHandler and objectGuid

2014-05-15 Thread Marvin Addison
1) I have 2 authentication handlers that are used concurrently, one which uses a DB query and the other a LDAP query... Is this an appropriate use of the postAuthenticate method, or am I twisting this extensibility point in a way it isn’t intended? Sounds like a creative use though I

RE: [cas-user] cas 4.0.0, LdapAuthenticationHandler and objectGuid

2014-05-15 Thread Lapanja, Bob@POST
1) I have 2 authentication handlers that are used concurrently, one which uses a DB query and the other a LDAP query... Is this an appropriate use of the postAuthenticate method, or am I twisting this extensibility point in a way it isn’t intended? Sounds like a creative use though I

[cas-user] rmi or terracotta?

2014-05-15 Thread maxwell
We are setting up HA cas environment. Within ehcache, what determines if you run with RMI or with Terracotta for memory replication? -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

Re: [cas-user] Java 8?

2014-05-15 Thread Scott Battaglia
I built from the command line using the latest code (not the 4.0.x branch). I'll try again later. On Tue, May 13, 2014 at 11:14 AM, Tom Poage tfpo...@ucdavis.edu wrote: On May 12, 2014, at 7:59 PM, Scott Battaglia scott.battag...@gmail.com wrote: I just tried building and running it

Re: [cas-user] cas 4.0.0, LdapAuthenticationHandler and objectGuid

2014-05-15 Thread Marvin Addison
I tried to use a PrincipalResolver originally, but it seemed inefficient. Not the first time someone has made that argument. ldap.authn.searchFilter=(|(sAMAccountName={user})(proxyAddresses=smtp:{user})) so I can't make too many assumptions based on their credentials. This means I would