RE: [cas-user] CAS 3.5.2 - SQL Deadlocks - Not cleanup related

2014-10-21 Thread Whittaker, Geoffrey
The one I found is CAS-1051. (https://issues.jasig.org/browse/CAS-1051). I have downloaded your script and I ran into one problem that I haven't had time to sort out. It reports that it's logged in, but there's nothing in the logs and it isn't getting a service ticket. I'll look at it some m

RE: [cas-user] Casifying Webspher 7.0

2014-10-21 Thread Niva Agmon
I am following the instructions for the websphere client, which had me define com.octo.cas.client.websphere.CasTAI511 as an interceptor under the Global Security --> Web & SIP security --> trust association through the Integrated Solution Console interface. My suspicion is that because the we

Re: [cas-user] Setting up Clearpass

2014-10-21 Thread Adam Causey
John, As far as I know I am sending the newly acquired proxy ticket, however I did notice that my proxy tickets are prefixed with ST which is not what the example shows. I followed the steps found on the Proxy CAS Walkthrough page using t

RE: [cas-user] Setting up Clearpass

2014-10-21 Thread Misagh Moayyed
Yes that’s the correct understanding. When you get the PT and you validate it for the clearpass “service” you need to investigate why the validation fails (due to the ticket missing). Turn up the logs on the CAS server side and issue the PT that CAS tells you is not recognized. You should fin

Re: [cas-user] CAS 3.5.2 and CVE-2014-3566, POODLE

2014-10-21 Thread Aaron Eidt
Thanks! that worked! Thank you to everyone for your help and suggestions! Aaron -- Aaron Eidt Unix Systems Administrator Information Technology Services University of Western Ontario aei...@uwo.ca On 10/20/2014 6:04 PM, Andrew Morgan wrote: We had to set the following in our Tomcat server.xm

Re: [cas-user] Setting up Clearpass

2014-10-21 Thread John Gasper
Adam, Are you sending the calling application's originally requested service ticket or are you sending a newly acquired proxy ticket to clearPass? John --- *John Gasper* IAM Consultant Unicon, Inc. PGP/GPG Key: 0xbafee3ef On 10/21/14 8:53 AM, Adam Causey wrote: > I'm still having issues with cl

Re: [cas-user] Casifying Webspher 7.0

2014-10-21 Thread Alberto Cabello Sánchez
On Mon, 20 Oct 2014 19:04:45 + Niva Agmon wrote: > Yes, I do get redirected to the service URL with the extra query parameter, > but then I'm still not logged on to the application and the application log > doesn't reflect anything besides me "landing" on that website. What kind of applicati

Re:[cas-user] Setting up Clearpass

2014-10-21 Thread Adam Causey
I'm still having issues with clearPass not recognizing the service ticket when I call the /clearPass endpoint. I ran through the 'Proxy CAS Walkthrough' instructions to make sure that proxying is setup correctly and that I understand it better. Is my understanding correct that all I should have t

[cas-user] cas support for Syncope

2014-10-21 Thread Manfredo Hopp
Hello, is there any means of Cas authentication through Syncope? This is one of our concerns in evaluating this project. Thank you -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.

RE: [cas-user] Webflow conversion sessionMap returns null resulting in user having to re-enter username/password.

2014-10-21 Thread Misagh Moayyed
Are you using a single CAS server or is this a multimode deployment? -Original Message- From: Jonathan [mailto:jhs...@gmail.com] Sent: Tuesday, October 21, 2014 6:05 AM To: cas-user@lists.jasig.org Subject: [cas-user] Webflow conversion sessionMap returns null resulting in user having to

re:[cas-user] Webflow conversion sessionMap returns null resulting in user having to re-enter username/password.

2014-10-21 Thread Jonathan
By the way, I'm running CAS 3.5.2. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] CAS 3.5.2 - SQL Deadlocks - Not cleanup related

2014-10-21 Thread Marvin Addison
> I saw the JIRA from a couple years ago that got marked as resolved after you > merged a patch. Can you cite the Jira issue? There have been a couple IIRC. > Is there anything I can provide that would make it worthwhile to reopen it? Possibly. There's a deadlock generator script that I used to

[cas-user] Webflow conversion sessionMap returns null resulting in user having to re-enter username/password.

2014-10-21 Thread Jonathan
I have a situation where after entering a username and password on the login screen the user is brought back again to the login screen. I've traced the issue to the following classes/methods. org.springframework.webflow.execution.repository.support.AbstractFlowExecutionRepository protected Con

RE: [cas-user] CAS 3.5.2 - SQL Deadlocks - Not cleanup related

2014-10-21 Thread Whittaker, Geoffrey
Thanks, I was afraid you were going to say that. It's interesting that we never had any deadlocks on MySQL when we were running on a single server. I just don't have the time resources or expertise to build out a highly-available MySQL cluster and maintain it. Incidentally, I saw the JIRA f

Re: [cas-user] CAS 3.5.2 - SQL Deadlocks - Not cleanup related

2014-10-21 Thread Marvin Addison
> Can anybody shed some light on this, please? Any thoughts on where to look? It's a known issue and there's little remedy. Searching the list archives you'll find that deadlocks are most commonplace on MSSQL. We've tried several fixes to reduce the likelihood of deadlocks, but nothing short of a

RE: [cas-user] CAS 3.5.2 - SQL Deadlocks - Not cleanup related

2014-10-21 Thread Whittaker, Geoffrey
Can anybody shed some light on this, please? Any thoughts on where to look? Geoff -Original Message- From: Geoff Whittaker [mailto:geoff.whitta...@unf.edu] Sent: Monday, October 20, 2014 11:12 AM To: cas-user@lists.jasig.org Subject: [cas-user] CAS 3.5.2 - SQL Deadlocks - Not cleanup rel