[cas-user] CAS 3.5.2 + MFA end state post method

2015-04-06 Thread Lazar, Michael E
Hello all, I have a working CAS-MFA overlay going and in my testing I have come across an issue with the way I expect the service to be hit. We use the method=POST attribute to send a post to the service we are using with CAS. With MFA installed, the webflow "login" gets changed and the end-s

RE: [cas-user] CAS 3.5.0 services

2015-04-06 Thread Liedy, Jonathan
A PKIX error is a cert path issue. Are you using Tomcat with or without Apache? Jonathan Liedy Middleware Administrator The Florida State University 2035 East Paul Dirac Drive Sliger, Suite 113 Tallahassee, FL 32310 jli...@fsu.edu Voice: (850) 270-7368 From: moaxcp [mailto:moa...@gmail.com] Sent

[cas-user] webservice authentication via cas

2015-04-06 Thread Nancy Snoke
So we have CAS running wonderfully for user applications. We are running CAS 4.01, using LDAP authentication and have attributes being returned for authorization when needed. We want to require authentication on a couple web services, and would like to do it through our existing CAS server. T

Re: [cas-user] CAS 3.5.0 services

2015-04-06 Thread moaxcp
I found the problem. The CN for the key needed to be localhost. I removed the tomcat alias from the keystore and recreated it with the full name = localhost. Now I am getting this exception. 2015-04-06 12:09:08,974 ERROR [org.jasig.cas.client.util.CommonUtils] - javax.net.ssl.SSLHandshakeExceptio

Re: [cas-user] CAS 3.5.0 services

2015-04-06 Thread moaxcp
I was thinking that maybe a public key needs to be added to my truststore but I think it needs to be added to the cacerts for the jvm since the methods is using HttpUrlConnection. I have a private key for tomcat but not a public key. Can this be generated using keytool? On Mon, Apr 6, 2015 at 10:0

RE: [cas-user] CAS 3.5.0 services

2015-04-06 Thread Mace, Mark
It looks like you don’t have a certificate set up for localhost. The CAS server can’t verify who “localhost” is, as there is not a certificate present. I’d look into documentation for setting up a self signed certificate based on your operating system. --mark From: moaxcp [mailto:moa...@gmail

[cas-user] CAS 3.5.0 services

2015-04-06 Thread moaxcp
Hello, I setup cas as a maven overlay and I'm trying to access the /services url. What is the cause of this error and how can I fix it? 2015-04-06 09:23:52,705 DEBUG [org.jasig.cas.client.validation.Cas20ServiceTicketValidator] - 2015-04-06 09:23:52,705 DEBUG [org.jasig.cas.client.validation.Cas2