[cas-user] mod_auth_cas

2015-09-15 Thread Chris Cheltenham
For those using mod_auth_cas RH apache 2.2.3-85 and CAS 3.5.2 I see I can use directory or location in the mod_auth_cas.conf file. (e.g.) Protect a "Location" or "Directory" block in your Apache configuration: Authtype CAS require valid-user

[cas-user] Validating Service Tickets in POST requests - Securing WS

2015-09-15 Thread Manfredo Hopp
Hi, we are trying to secure some of our Web Services with Cas, generating a Service Ticket for each access with a Jersey client. There is no problem with GET requests since Service Ticket is validated from QueryParameter, but with POST requests this is not possible, since there are no QueryPara

[cas-user] Apereo default theme not suitable for mobile device.

2015-09-15 Thread Jerome Nenert
Hello, The default theme of branch v3.x was suitable for mobile device. Despite being Responsive, the new Apereo default theme doesn't fit mobile device. Why ? Is there a way to fix this ? Regards. Jerome NENERT. IT Services. Université Panthéon-Assas ( Paris 2 ) -- You are currently subs

Re: [cas-user] mod_auth_cas

2015-09-15 Thread Waldbieser, Carl
Chris, It is really an Apache setting [1]. `Directory` indicates the enclosed directives apply to the underlying file system. `Location` indicates the enclosed directives apply to resources located outside of the file system. Thanks, Carl Waldbieser ITS Systems Programmer Lafayette College [

RE: [cas-user] Validating Service Tickets in POST requests - Securing WS

2015-09-15 Thread Misagh Moayyed
Possible bug. Try adding: to the html tag and test on the device. Post back results please. From: Manfredo Hopp [mailto:mhopp.coni...@gmail.com] Sent: Tuesday, September 15, 2015 7:58 AM To: cas-user@lists.jasig.org Subject: [cas-user] Validating Service Tickets in POST requests - Securin

Re: [cas-user] mod_auth_cas

2015-09-15 Thread Milt Epstein
The way I think of it, Directory applies to real paths in the filesystem and Location applies to virtual paths as they appear in URLs (the page Carl links to calls these "webspace"). Milt Epstein Programmer in Computational Genomics Institute for Genomic Biology (IGB) University of Illinois at Urb

RE: [cas-user] Apereo default theme not suitable for mobile device.

2015-09-15 Thread Misagh Moayyed
Possible bug. Try adding: to the html tag and test on the device. Post back results please. > -Original Message- > From: Jerome Nenert [mailto:jerome.nen...@u-paris2.fr] > Sent: Tuesday, September 15, 2015 7:59 AM > To: cas-user@lists.jasig.org > Subject: [cas-user] Apereo default theme

RE: [cas-user] Validating Service Tickets in POST requests - Securing WS

2015-09-15 Thread Misagh Moayyed
Sorry, I meant to respond to Jérôme with the message below. To answer your question, you need to establish an authn session with GET request first before doing anything posts. From: Misagh Moayyed [mailto:mmoay...@unicon.net] Sent: Tuesday, September 15, 2015 8:41 AM To: cas-user@lists.jasig.

[cas-user] Cas SSL error

2015-09-15 Thread Song, Doe-Hyun
Hello Cas users, After logging in with running sample client, it redirects to the with ST ticket. My web page shows SSL error as below with the following URL https://localhost:8443/cas-sample-java-webapp/?ticket=ST-1-4QLDV0DAywo37UaBbKNs-cas-server The following web site shows how to troubleshoo

RE:[cas-user] Cas SSL error

2015-09-15 Thread Song, Doe-Hyun
Hello Cas Users, I changed the key set with CN=localhost as below. keytool -genkey -alias cas-server -keyalg RSA -validity 3650 -keypass changeit -storepass changeit -keystore cas.keystore -dname "CN=localhost, OU=IT, O=Armada, L=Pittsburgh, ST=PA, C=US" Now, I have different error message as

Re:[cas-user] Validating Service Tickets in POST requests - Securing WS

2015-09-15 Thread Manfredo Hopp
I understand that post url shouldnt be registered as cas service. Is this correct? El martes, 15 de septiembre de 2015, Misagh Moayyed escribió: > Sorry, I meant to respond to Jérôme with the message below. > > > > To answer your question, you need to establish an authn session with GET > reques

RE: [cas-user] Validating Service Tickets in POST requests - Securing WS

2015-09-15 Thread Misagh Moayyed
Correct. From: Manfredo Hopp [mailto:mhopp.coni...@gmail.com] Sent: Tuesday, September 15, 2015 5:41 PM To: cas-user@lists.jasig.org Subject: Re:[cas-user] Validating Service Tickets in POST requests - Securing WS I understand that post url shouldnt be registered as cas service. Is this cor