[cas-user] Redirect loop from services mangagement console

2014-07-14 Thread Patrick
I am new to CAS and am trying to set up the sample overlay https://github.com/UniconLabs/simple-cas-overlay-template with a dummy app before using CAS in production. The server starts up, but trying to access the services management console results in an infinite redirect loop. Specifically,

Re: [cas-user] CAS 4 LPPE Configuration

2014-07-14 Thread wa
There is a typo in the documentation. should be There is a missing 'l' in handler. On Wednesday, July 9, 2014 10:52:39 PM UTC+5, Daniel Fisher wrote: > > Marvin offered to update the documentation once you confirmed the fix. > Thank you for closing the loop on this. > > --Daniel Fisher >

[cas-user] CAS with several AD instances

2014-07-14 Thread wa
Hi, I am trying to configure CAS with multiple LDAP instances based on the following. https://wiki.jasig.org/display/CASUM/Using+CAS+with+two+different+AD+forests Is there a way to decide on which connection to use without evaluating the user against all connections? Probably based on the emai

Re: [cas-user] CAS display previous authentication time.

2014-07-14 Thread Marvin Addison
> what is the correct way to display the last authentication time to the > user before it is updated in LDAP? Custom Spring Webflow action that executes after authentication success. For example, replace sendTicketGrantingTicket action in the following state with your custom action:

[cas-user] CAS display previous authentication time.

2014-07-14 Thread Daniel
I am currently running CAS 4.0 and Oracle Directory Server 7 for authentication. I have a requirement to display to a user their previous logged in time. In Directory Server, I have it configured so the last authentication time is updated after a successful bind. The question I have is, what

Re: [cas-user] CAS SSO solutions, and Microsoft SharePoint

2014-07-14 Thread Marvin Addison
> Are those doing this generally taking CAS SSO, fronting it with a Shib IdP, > then integrating with ADFS as a relying-party, that SharePoint uses for > authentication ? We considered this path but aborted. In short, we needed close collaboration with the Microsoft folks at our institution and

RE: [cas-user] CAS SSO solutions, and Microsoft SharePoint

2014-07-14 Thread Scott Massari
What about using the WS_Federation for CAS module with ADFS? https://github.com/jtgasper3/cas/tree/3.5.x/cas-server-support-wsfederation http://sites.ewu.edu/jgasper/ws-federation-cas-user-manual/ > From: cor...@uvic.ca > To: cas-user@lists.jasig.org > Subject: [cas-user] CAS SSO solutions, and

[cas-user] CAS and the myfiles application

2014-07-14 Thread Brian Lewis
Has anyone used CAS to get SSO with the myfiles application? Thanks, Brian Brian Lewis Director, Administrative Computing and Web Services Ellucian Moraine Park Technical College 235 N. National Ave. Fond du Lac, WI 54936 Voice: 920.924.3517 Mobile: 920.273.9728 Fax: 920-907-6997 brian.le...@e

RE: [cas-user] Using SHA512

2014-07-14 Thread richard . wiseman
The password and salt are indeed stored in the same database in different columns. The only encoding I ever seem to see is base64, so the hex actually surprised me! (I've next to no experience with hashing passwords, but my googling has tended to yield results that base64-encode hashes and sal

Re: [cas-user] Using SHA512

2014-07-14 Thread Marvin Addison
>An example hash is: 4d8d39a8283a53aeb51061457edc32c6a8e5404864b7571bf7b33d2c3bd5c580869ac1635be0d8ee57581f28b8aa9799729244852eb7aa010e7ac7b1cd69638f > > And an example salt is: > 91f3c641110b2ded640c418046b3cb5af257da06ca98f192085cb10c7443e5e9 I think hex encoding is common and safe to assume gen

RE: [cas-user] Using SHA512

2014-07-14 Thread richard . wiseman
Hi Marvin, My database is actually someone else's database, but I do know (now) that the hashes stored in the database are generated using Apache Shiro and that the salt is stored as hex. An example hash is: 4d8d39a8283a53aeb51061457edc32c6a8e5404864b7571bf7b33d2c3bd5c580869ac1635be0d8ee57581f

Re: [cas-user] Using SHA512

2014-07-14 Thread Marvin Addison
> I'll look at the documentation again to try and work out the best/simplest > approach. Can you briefly describe how you store the salt in your database? There's a quasi-standard for LDAP directories, SSHA, but nothing equivalent that I'm aware of in the database world. The challenge for the CAS

RE: [cas-user] Using SHA512

2014-07-14 Thread richard . wiseman
One further (hopefully quick) question, if I may… Until now, I’ve been using the SearchModeSearchDatabaseAuthenticationHandler class, but this doesn’t do everything I need (and neither do the alternatives) so I thought I would copy it and customise it. I’ve given it a new name (of course) but