[cas-user] Plunk + CAS Audit/Logs

2013-02-07 Thread Francisco Estanqueiro
Anyone is using Plunk to check out CAS logs and perf. Stats ? I read here https://wiki.jasig.org/display/CASUM/Securing+Your+New+CAS+Server about Plunk and it looks pretty nice but I can't find anywhere how to configure it. Thanks, Francisco -Original Message- From: Marvin Addison [

RE: [cas-user] clearPass issue behind Load Balancer

2011-08-23 Thread Francisco Estanqueiro
Is it possible to use JbossCache cluster instead of EhCache? Do I need additional configuration? Francisco -Original Message- From: Makarov, Konstantin V. [mailto:kos...@stcloudstate.edu] Sent: sexta-feira, 12 de Agosto de 2011 14:46 To: cas-user@lists.jasig.org Subject: RE: [cas-user]

RE: [cas-user] Could not obtain Lock

2011-04-27 Thread Francisco Estanqueiro
We have a clustered environment, so I think I'll setup a cronjob to run that sql line. Just one more thing.. When this "error" occurs is it normal that CAS returns a error message to the users (not even showing the authentication page)? Thanks, Francisco -Mensagem original- De: Marv

[cas-user] Could not obtain Lock

2011-04-27 Thread Francisco Estanqueiro
Hello everyone, We're having a problem with our CAS servers: 2011-04-26 20:49:36,760 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - Beginning ticket cleanup. 2011-04-26 20:49:36,777 INFO [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - Could

[cas-user] SQUID and CAS

2011-02-14 Thread Francisco Estanqueiro
Hi everybody, We are having some serious problems with our CAS and Squid Proxys (Bad requests mainly). I read this question (http://www.squid-cache.org/mail-archive/squid-users/200602/0210.html) , this still applies now? We're using JpaTicketRegistry. Francisco -- You are currently subscrib

[cas-user] JpaTicketRegistry - Simple Query

2011-02-08 Thread Francisco Estanqueiro
Hi everybody, Anyone knows whats the query to see how many sessions are active? Francisco Estanqueiro -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas

RE: [cas-user] JpaTicketRegistry

2011-02-04 Thread Francisco Estanqueiro
CREATE INDEX "ST_TGT_FK_I" ON SERVICETICKET ("TICKETGRANTINGTICKET_ID") CREATE INDEX "TGT_TGT_FK_I" ON TICKETGRANTINGTICKET ("TICKETGRANTINGTICKET_ID") Is this enough? Or do I need COMPUTE STATISTICS? -Mensagem original- De: Marvin Addison [mailto:marvin.addi...@gmail.com] Enviada:

[cas-user] JpaTicketRegistry

2011-02-03 Thread Francisco Estanqueiro
Hi everyone, Anyone using MySQL as their Jpa Ticket Registry DB? How can I create the indexes to avoid deadlocks in Mysql? CREATE INDEX "ST_TGT_FK_I" ON SERVICETICKET ("TICKETGRANTINGTICKET_ID") COMPUTE STATISTICS; /** Create index on TGT self-referential foreign-key constraint */ CREATE IN

[cas-user] JpaTicketRegistry

2011-02-01 Thread Francisco Estanqueiro
https://wiki.jasig.org/display/CASUM/JpaTicketRegistry Hi everyone, Anyone using MySQL as their Jpa Ticket Registry DB? How can I create the indexes to avoid deadlocks in Mysql? CREATE INDEX "ST_TGT_FK_I" ON SERVICETICKET ("TICKETGRANTINGTICKET_ID") COMPUTE STATISTICS; /** Create index on

Re: [cas-user] ClearPass and PHP

2010-11-23 Thread Francisco Estanqueiro
, 2010, at 9:57 AM, Francisco Estanqueiro wrote: I had the clearPass servername in web.xml wrong. Now I'm not getting any output.. and my CAS server log has this: 2010-11-22 17:54:28,328 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] -https://cas-server/netpa/example_proxy.php]

Re: [cas-user] ClearPass and PHP

2010-11-22 Thread Francisco Estanqueiro
11-22 17:54:30,628 INFO [org.jasig.cas.client.proxy.ProxyGrantingTicketStorageImpl] - Ticket found for > I should be getting a clearPass response, right? Francisco Em 22-11-2010 17:36, Cary, Kim escreveu: Hmm. On Nov 22, 2010, at 9:28 AM, Francisco Estanqueiro wrote: No authentication information prov

Re: [cas-user] ClearPass and PHP

2010-11-22 Thread Francisco Estanqueiro
// call the service and change the color depending on the result > if ( phpCAS::serviceWeb($service,$err_code,$output) ) { > echo ''; > } else { > echo ''; > } > echo $output; > echo ''; > > >

[cas-user] ClearPass and PHP

2010-11-22 Thread Francisco Estanqueiro
Hi everyone, I have clearPass working (I'm sure) but now I need to obtain the password in a php file. I was trying to understand this steps: https://wiki.jasig.org/display/*CAS*/*Proxy*+*CAS*+Walkthrough/ /and the phpCAS proxy example files but I cant figure how to obtain the actual password

[cas-user] Active Directory: "User must change password on next login"

2010-09-28 Thread Francisco Estanqueiro
Hello everyone, if a user has "User must change password on next login" checked in is active directory user account, the login fails. Anyone has a solution for this? Thanks, Francisco Estanqueiro -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-arch

Re: [cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-24 Thread Francisco Estanqueiro
audit.spi.support.DefaultAuditActionResolver"> class="com.github.inspektr.audit.spi.support.ReturnValueAsStringResourceResolver" /> class="org.jasig.cas.audit.spi.TicketAsFirstParameterResourceResolver" /> On 24-08-2010 15:49, Francisco Estanqueiro wrote: P

Re: [cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-24 Thread Francisco Estanqueiro
Perfect. Francisco On 23-08-2010 14:30, Marvin Addison wrote: The above indicates you want to use the console instead of database. To use database, you need something like following: ... ...

Re: [cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-23 Thread Francisco Estanqueiro
://wiki.jasig.org/pages/viewpageattachments.action?pageId=22940014 On Tue, Aug 17, 2010 at 7:18 PM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: By this I mean that its NOT solved and I cant save the audit records in a MySQL DB. Francisco Estanqueiro wrote: - I

RE: [cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-22 Thread Francisco Estanqueiro
http://www.springframework.org/schema/beans"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; xmlns:p="http://www.springframework.org/schema/p"; xmlns:aop="http://www.springframework.org/schema/aop"; xsi:schemaLocation="http://www.springframework.org/schema/beans

Re: [cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-17 Thread Francisco Estanqueiro
By this I mean that its NOT solved and I cant save the audit records in a MySQL DB. Francisco Estanqueiro wrote: - I have a dataSource (already working for services managment) in deployersConfigContext.xml - I have the MySQL DDL tables (nothing changed since 3.3.5) - I have copied

Re: [cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-17 Thread Francisco Estanqueiro
- I have a dataSource (already working for services managment) in deployersConfigContext.xml - I have the MySQL DDL tables (nothing changed since 3.3.5) - I have copied auditTrailContext.xml (like the tutorial) to /spring-configuration restarted CAS and the audit trail appears in the console:

Re: [cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-17 Thread Francisco Estanqueiro
I have the Database well configured, since I used this feature in 3.3.5. Im currently upgrading to 3.4.2 which uses Inspektr 1.0.0.GA and I followed every step of the tutorial. Francisco Marvin Addison wrote: Theres no way to audit the records to a MySQL database in 3.4.2? The Orac

[cas-user] Inspektr + MYSQL + CAS 3.4.2

2010-08-17 Thread Francisco Estanqueiro
Theres no way to audit the records to a MySQL database in 3.4.2? Where do I define in auditTrailContext.xml the dataSource? https://wiki.jasig.org/display/CASUM/Auditing+and+Statistics+Via+Inspektr Francisco -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.

FW: [cas-user] Login fails at first try

2010-08-06 Thread Francisco Estanqueiro
anyone? Francisco De: Francisco Estanqueiro [fwestanque...@fc.ul.pt] Enviado: quinta-feira, 29 de Julho de 2010 15:09 Para: cas-user@lists.jasig.org Assunto: RE: [cas-user] Login fails at first try Can you point me a URL that contains that patch or the

RE: [cas-user] Login fails at first try

2010-07-29 Thread Francisco Estanqueiro
] Login fails at first try The issue is with the spring webflow. Cas had a patch for it in CasDefaultFlowUrlHandler. You can patch it up to resolve the issue. Connected by MOTOBLUR™ so please ignore typos. -Original message- From: Francisco Estanqueiro To: "cas-user@lists.jasig.org&q

RE: [cas-user] Login fails at first try

2010-07-28 Thread Francisco Estanqueiro
ul 23, 2010 at 7:21 AM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: Hi everyone, we're using CAS 3.3.5 and we're having a random problem in our CAS login page. Sometimes, after the user inserts his credentials in the login page, the page reloads and asks for the

[cas-user] Login fails at first try

2010-07-23 Thread Francisco Estanqueiro
Hi everyone, we're using CAS 3.3.5 and we're having a random problem in our CAS login page. Sometimes, after the user inserts his credentials in the login page, the page reloads and asks for the credentials again. It happens even if the browser was closed. Its not a browser cache problem and

Re: [cas-user] Urgent: Active Directory - Bind account is being locked

2010-06-23 Thread Francisco Estanqueiro
Can there be a special policy in AD for this kind of accounts? Sorry, AD is really not my specialty. Francisco Michael Ströder wrote: Francisco Estanqueiro wrote: we're having a problem in our CAS instances. We use Active Directory as our credential database but our bind account is

[cas-user] Urgent: Active Directory - Bind account is being locked

2010-06-23 Thread Francisco Estanqueiro
Hello everyone, we're having a problem in our CAS instances. We use Active Directory as our credential database but our bind account is being randomly locked by Active Directory, causing CAS to fail. Error: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityConte

Re: [cas-user] Cas Generic Success

2010-06-03 Thread Francisco Estanqueiro
TicketRegistry. Cheers, Scott On Wed, Jun 2, 2010 at 1:40 PM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: Hi all, how can I obtain the authenticated username in casGenericSuccess.jsp? Francisco -- You are currently subscribed to cas-user@lists.jasig

[cas-user] Cas Generic Success

2010-06-02 Thread Francisco Estanqueiro
Hi all, how can I obtain the authenticated username in casGenericSuccess.jsp? Francisco -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] Testing CAS

2010-05-31 Thread Francisco Estanqueiro
I had to change the lt extraction expression of the VT test to name="lt" value="(.*?)" and it worked. Is there a little explanation what this test really does? The last two steps, GET Svc-1 and GET ST, are confusing me. Francisco Marvin Addison wrote: http://www.ja-sig.org/wiki/display/CASU

[cas-user] Testing CAS

2010-05-28 Thread Francisco Estanqueiro
Hi, I'm trying to use JMeter to test our CAS env, but I'm having a hard time making these scripts work: http://www.ja-sig.org/wiki/display/CASUM/Apache+JMeter Are these still up to date? Anyone has some JMeter files to test CAS? Francisco -- You are currently subscribed to cas-user@lists.ja

Re: [cas-user] JBoss Cache (CAS Cluster) + Firewall

2010-05-21 Thread Francisco Estanqueiro
The missing rule was: -A RH-Firewall-1-INPUT *-d *239.255.0.2 -j ACCEPT Thanks anyway, Francisco Francisco Estanqueiro wrote: I've tried allowing all traffic from my other cluster node and the address from JBossConfig.xml with this rules but no success: -A RH-Firewall-1-INPUT -s 239.25

Re: [cas-user] JBoss Cache (CAS Cluster) + Firewall

2010-05-21 Thread Francisco Estanqueiro
gs in linux, can you try TCP instead of UDP? On Fri, May 21, 2010 at 6:45 AM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: Anyone? Francisco Estanqueiro wrote: Hi everybody, I'm having a little problem with my iptables letting JBoss

Re: [cas-user] JBoss Cache (CAS Cluster) + Firewall

2010-05-21 Thread Francisco Estanqueiro
Anyone? Francisco Estanqueiro wrote: Hi everybody, I'm having a little problem with my iptables letting JBoss Cache work properly. What protocols/ports Jboss cache needs open to work properly in iptables? I have this rule based on my jboss config file: -A RH-Firewall-1-INPUT -s 239.25

[cas-user] JBoss Cache (CAS Cluster) + Firewall

2010-05-19 Thread Francisco Estanqueiro
Hi everybody, I'm having a little problem with my iptables letting JBoss Cache work properly. What protocols/ports Jboss cache needs open to work properly in iptables? I have this rule based on my jboss config file: -A RH-Firewall-1-INPUT -s 239.255.0.2 -m udp -p udp --dport 48866 -j ACCEPT

RE: coa/auth not redirecting Re: [cas-user] CAS ClearPass Outlook .NETCASClient integration on IIS 7

2010-05-15 Thread Francisco Estanqueiro
According to the author of CasOwa in IIS 7 you have to setup this handlers: > Requirements > * CAS Server with ClearPass extension configured to accepted > ProxyTickets from CasOwa. > > Installation > Deploy CasOwa in its Virtual Directory on the same IIS server that is >>>

Re: [cas-user] CasOwa - help please!!!

2010-05-12 Thread Francisco Estanqueiro
IIS server successfully. Also followed the step in the wiki page by 'Francisco Estanqueiro' http://www.ja-sig.org/wiki/pages/viewpage.action?pageId=29133913 Also, I am using IIS 7. So I have installed ClearPass on Tomcat (443), CASOWA Client on IIS7 and Outlook owa on the same lo

Re: [cas-user] CasOwa - help please

2010-05-04 Thread Francisco Estanqueiro
If I remember correctly, I had multiple versions of the same jar packages (spring, etc..) after I compiled with maven. Francisco n99 wrote: Hello I was wondering how you cured the org.springframework.web.servlet.tags.ThemeTag NullPointerException java.util.regex.Matcher.getTextLength error as

Re: [cas-user] CasOwa - help please

2010-04-30 Thread Francisco Estanqueiro
Hi everyone, just finished the casowa Wiki Page.. http://www.ja-sig.org/wiki/pages/viewpage.action?pageId=29133913 I did it in a sort of a rush, so feel free to edit it or move it. Francisco Ganjoo, Vishal wrote: HI Francisco Can you please share your experience casifying OWA? DO you h

Re: [cas-user] CasOwa - help please

2010-04-22 Thread Francisco Estanqueiro
nding that the .NET CASOWA solution requires that the CAS service is running on an IIS server? -Andrew On Mar 29, 2010, at 10:32 PM, Francisco Estanqueiro wrote: Hi, I'm trying to figure out a way to casify Outlook Web Access and I found out about this CasOwa. I read this threa

Re: [cas-user] CasOwa - help please

2010-04-05 Thread Francisco Estanqueiro
, Francisco Estanqueiro wrote: You're right!! My windows maven was a little crazy creating the war packages. Did a fresh build on my linux pc, and it worked perfectly. Windows 2003 + Exchange 2007 + IIS 6 + casOwa + CAS 3.3.5 + ClearPass 1.0.0.GA = success :) Thanks for all your time, Fran

Re: [cas-user] CasOwa - help please

2010-03-31 Thread Francisco Estanqueiro
[org.jasig.cas.services.DefaultServicesManagerImpl] - Reloading registered services. 2010-04-01 02:05:00,760 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - Loaded 0 services. Whats wrong?!! Please help me, I'm stuck again. Francisco Francisco Estanqueiro wrote: Success!! I imported those handle

Re: [cas-user] Where can i get the manual of CAS Client For OWA

2010-03-31 Thread Francisco Estanqueiro
Having the same error here.. Did you ever found a solution? Francisco Shawn Young wrote: Hi, I've solved the null user exception. It's caused by self signed SSL certificate. But another errors happened. I step into the code found it can't get the proxy ticket : // Retrieve a Proxy Ticket for C

Re:[cas-user] CasOwa - help please

2010-03-31 Thread Francisco Estanqueiro
mpson, Jr. wrote: On Tue, Mar 30, 2010 at 2:22 PM, Francisco Estanqueiro wrote: I've installed the web app http://www.ja-sig.org/wiki/display/CASC/JA-SIG+Java+Client+Simple+WebApp+Sample, and verified that the PT's are being issued correctly. I've the ClearPass extension work

RE:[cas-user] CasOwa - help please

2010-03-30 Thread Francisco Estanqueiro
/proxyCallback gives me a 404 IIS error. Francisco De: William G. Thompson, Jr. [wgt...@gmail.com] Enviado: terça-feira, 30 de Março de 2010 19:06 Para: Francisco Estanqueiro Cc: cas-user@lists.jasig.org Assunto: Re: CasOwa - help please On Tue, Mar 3

RE:[cas-user] CasOwa - help please

2010-03-30 Thread Francisco Estanqueiro
ectory and changed the web.config url's. Cumprimentos, ---- Francisco Estanqueiro (https://www.ci.fc.ul.pt/rh/fwestanqueiro) Suporte | Centro Informática | FCUL E-mail: supo...@fc.ul.pt | Ext: 21248 | Tel: 21 750 00 67 Por favor

Re:[cas-user] CasOwa - help please

2010-03-30 Thread Francisco Estanqueiro
-the-iis7-integrated-pipeline/ This means I cant use casowa with windows server 2003? (since there's no IIS7 for ws2003) Francisco William G. Thompson, Jr. wrote: On Mon, Mar 29, 2010 at 10:32 PM, Francisco Estanqueiro wrote: Hi, Hi, Francisco. I'll respond in

[cas-user] CasOwa - help please

2010-03-29 Thread Francisco Estanqueiro
Hi, I'm trying to figure out a way to casify Outlook Web Access and I found out about this CasOwa. I read this thread (the few information there is about casowa), http://www.mail-archive.com/cas-user@lists.jasig.org/msg03914.html, but since I'm really a noob in the IIS bussiness so I have so

Re: [cas-user] Filter attributes in X509 auth

2010-03-15 Thread Francisco Estanqueiro
="se.gu.cas.X509RegexpCertificateCredentialsToIdentifierPrincipalResolver"> class="se.gu.cas.X509RegexpCertificateCredentialsToIdentifierPrincipalResolver"> In my own class I parse the content of the identifier Hope this helps you. Pablo 2010/3/11 Francisco Estanqueiro <mailto:fwestanque...@fc.ul.pt

Re: [cas-user] Filter attributes in X509 auth

2010-03-11 Thread Francisco Estanqueiro
xtends the AbstractX509CertificateCredentialsToPrincipalResolver and simply chopping of the chars you want to ignore before returning the string in the resolvePrincipalInternal() function? Regards, Joachim Francisco Estanqueiro schrieb: Anyone? Francisco Estanqueiro wrote: Hello everyone, I wou

Re: [cas-user] Filter attributes in X509 auth

2010-03-11 Thread Francisco Estanqueiro
Forgot to mention that.. class="org.jasig.cas.authentication.principal.CredentialsToLDAPAttributePrincipalResolver" > class="org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToIdentifierPrincipalResolver"> Marvin Addison

Re: [cas-user] Filter attributes in X509 auth

2010-03-11 Thread Francisco Estanqueiro
Anyone? Francisco Estanqueiro wrote: Hello everyone, I would like to know if there's a way for me to remove characters from an attribute from an X509 Certificate and match it with an LDAP attribute. My config is: Attribute from X509: Attribute to Match: This works beautifully if

[cas-user] Filter attributes in X509 auth

2010-03-09 Thread Francisco Estanqueiro
Hello everyone, I would like to know if there's a way for me to remove characters from an attribute from an X509 Certificate and match it with an LDAP attribute. My config is: Attribute from X509: Attribute to Match: This works beautifully if they are the same.. but my problem is I want

Re: [cas-user] X509 - Firefox and IE

2010-03-01 Thread Francisco Estanqueiro
This is awkward .. but with these two properties it works.. Francisco Estanqueiro wrote: Oh okay.. they are both sending the same the certificate but firefox doenst have the root. Well, I'll put two x509 authenticators to fix this then.. But, the problem in IE persists since the pa

Re: [cas-user] X509 - Firefox and IE

2010-03-01 Thread Francisco Estanqueiro
Oh okay.. they are both sending the same the certificate but firefox doenst have the root. Well, I'll put two x509 authenticators to fix this then.. But, the problem in IE persists since the pattern match is true and the authentication fails.. class="org.jasig.cas.adaptors.x509.authenticatio

Re: [cas-user] X509 - Firefox and IE

2010-03-01 Thread Francisco Estanqueiro
Ok, here are the debug logs for exactly the same certificate in both browsers (I attached the cert path). trustedIssuerDnPattern="CN=ECRaizEstado, O=SCEE, C=PT" *With Firefox:* 2010-03-01 19:58:01,811 DEBUG [org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticati

Re: [cas-user] X509 - Firefox and IE

2010-02-26 Thread Francisco Estanqueiro
I only have one cert installed in this computer.. I'm sure its the same. I can setup DEBUG level by doing this, right? log4j.logger.org.jasig.cas.authentication=DEBUG If so, I get exactly the same the log in IE and a bigger log in the Firefox. Francisco Marvin Addison wrote: 2010-02-26 18:5

[cas-user] X509 - Firefox and IE

2010-02-26 Thread Francisco Estanqueiro
Hello, I'm having very different results in Firefox and I.E. with X509 Authentication. My config is: class="org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler"> In Firefox the authentication runs well: 2010-02-

Re: [cas-user] Conflict

2010-02-26 Thread Francisco Estanqueiro
Found a 2.0.0GA version of JBoss in the src folder. I think its solved now.. Thanks for your time. Francisco Scott Battaglia wrote: Are you using the version of JBoss Cache that comes with that CAS module? On Thu, Feb 25, 2010 at 10:07 PM, Francisco Estanqueiro mailto:fwestanque

Re: [cas-user] Conflict

2010-02-25 Thread Francisco Estanqueiro
ueIfNecessary(BeanDefinitionValueResolver.java:104) Scott Battaglia wrote: Your CAS versions MUST be the same. Otherwise stuff like that will happen :-) On Thu, Feb 25, 2010 at 9:58 PM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: I have the following pom.xml /

[cas-user] Conflict

2010-02-25 Thread Francisco Estanqueiro
I have the following pom.xml / org.jasig.cas cas-server-webapp ${cas.version} war runtime org.jasig.cas cas-server-support-x509 ${cas.version} org.jasig.c

Re: [cas-user] X509 Certificates

2010-02-25 Thread Francisco Estanqueiro
Oh, that was the problem! Thanks again Scott Battaglia wrote: You're using the wrong public property name. Look at the setter I sent via email. On Thu, Feb 25, 2010 at 2:13 PM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote:

Re: [cas-user] X509 Certificates

2010-02-25 Thread Francisco Estanqueiro
ave unlimited intermediate certs (default=false). */ public void setMaxPathLengthAllowUnspecified(boolean maxPathLength_allowUnspecified) { this.maxPathLength_allowUnspecified = maxPathLength_allowUnspecified; } On Thu, Feb 25, 2010 at 2:04 PM, Francisco Estanqueiro mailto:fwestan

Re: [cas-user] X509 Certificates

2010-02-25 Thread Francisco Estanqueiro
Sorry, the value is incorrect in the other mail.. Forgot the CN. But the problem still persists.. Francisco Francisco Estanqueiro wrote: Hi, I'm having an error auth handler for X509 Certificates..: My Config Is: class="org.jasig.cas.ada

[cas-user] X509 Certificates

2010-02-25 Thread Francisco Estanqueiro
Hi, I'm having an error auth handler for X509 Certificates..: My Config Is: Witch gives me this error: 2010-02-25 19:02:58,209 WARN [org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHa

Re: [cas-user] Inspektr error

2010-02-01 Thread Francisco Estanqueiro
Finally found out what was happening. The problem was I had 2 versions of spring ldap jar in the maven src. Tks for your time. Francisco Scott Battaglia wrote: That shouldn't cause a problem. That JAR just gets ignored. Cheers, Scott On Mon, Feb 1, 2010 at 11:36 AM, Francisco Estanq

Re: [cas-user] Inspektr error

2010-02-01 Thread Francisco Estanqueiro
;t be null (that value should always be the name value of the statistic). Did you change the annotation at all, i.e. provide a custom resolver? Cheers, Scott On Sun, Jan 31, 2010 at 9:03 PM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: Hi again, I'm

[cas-user] Inspektr error

2010-01-31 Thread Francisco Estanqueiro
Hi again, I'm having a error in CAS everytime a user uses wrong credentials.. Everything is ok if use the right credentials, and the /statistics/ page in the /services/ service is working fine so I'm not figuring out whats the problem. The only thing I have different from the tutorial "Auditi

Re: [cas-user] HA + Inspektr / ClearPass + OWA

2010-01-22 Thread Francisco Estanqueiro
xyReceptorUrl="/coa/proxyCallback" /> On Fri, Jan 22, 2010 at 12:31 PM, William G. Thompson, Jr. wrote: CAS Client for OWA (CasOwa) is up on GitHub: http://github.com/wgthom/CasOwa Requires ClearPass and I've only tested it against OWA 2007. Look in web.conf for some

[cas-user] HA + Inspektr / ClearPass + OWA

2010-01-21 Thread Francisco Estanqueiro
knows how to do it? Thanks again, Francisco Estanqueiro Faculdade de Ciências - Universidade de Lisboa -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[cas-user] Clustering CAS

2010-01-18 Thread Francisco Estanqueiro
Francisco Estanqueiro wrote: > Hi again, > > I'm a little bit confused. With the page > http://www.ja-sig.org/wiki/display/CASUM/Clustering+CAS, I "easily" > clustered two tomcat instances and verified that the cluster is working. > The next step is "Tic

[cas-user] Clustering CAS

2010-01-14 Thread Francisco Estanqueiro
Hi again, I'm a little bit confused. With the page http://www.ja-sig.org/wiki/display/CASUM/Clustering+CAS, I "easily" clustered two tomcat instances and verified that the cluster is working. The next step is "Ticket Cache Replication" but I dont know how to (or where to) put the folder cas-s

Re: [cas-user] Services Page Cluster

2010-01-07 Thread Francisco Estanqueiro
Understood. Thanks again, again and again. Francisco Marvin Addison wrote: I have two clustered tomcat servers (server01, server02), each with a CAS instance. What do I have to do to replicate the Database to be consistent in both servers? Nothing, assuming you have either a single data

Re: [cas-user] Services Page Cluster

2010-01-07 Thread Francisco Estanqueiro
"Since CAS holds service registrations in memory, it needs this periodic flush/reload to pick up the changes to the database for all nodes other than the one where changes were made." I have two clustered tomcat servers (server01, server02), each with a CAS instance. What do I have to do to rep

[cas-user] Services Page Cluster

2010-01-06 Thread Francisco Estanqueiro
Hey there, _http://www.ja-sig.org/wiki/display/CASUM/Clustering+CAS_ -- the last bit about Services Management. --- Im a little bit confused by this. I have one tomcat server with one entry (service) in the DB. By adding those lines in *ticketRegistry.xml, *it should

Re: [cas-user] CAS logs

2010-01-06 Thread Francisco Estanqueiro
yntax slightly wrong). On Tue, Jan 5, 2010 at 2:35 PM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: Marvin Addison wrote: How can I change the cas log file path to be persistent? The best way to do this is to use Maven War Overlay co

Re: [cas-user] CAS logs

2010-01-05 Thread Francisco Estanqueiro
Marvin Addison wrote: How can I change the cas log file path to be persistent? The best way to do this is to use Maven War Overlay configuration management method to apply a customized log4j.properties file specific to your environment. See http://www.ja-sig.org/wiki/display/CASUM/Best+Pr

[cas-user] CAS logs

2010-01-05 Thread Francisco Estanqueiro
Hi everyone, I just realized i had CAS log files (cas.log) all over the server folders. I think this is happening because I always start the tomcat server in different paths . How can I change the cas log file path to be persistent? Francisco Estanqueiro -- You are currently subscribed to

Re: [cas-user] CAS services page

2009-12-10 Thread Francisco Estanqueiro
Thats It! For future reference, I also needed: commons-dbcp-1.2.2.jar commons-pool-1.5.4.jar Hibernate files-- hibernate-entitymanager.jar ejb3-persistence.jar hibernate-core.jar hibernate-annotations.jar hibernate-commons-annotations.jar dom4j.jar jta.jar javassist.jar slf4j-api.jar ---

Re: [cas-user] CAS services page

2009-12-10 Thread Francisco Estanqueiro
only required for Inspektr. Kim ~=|=~ Kim Cary Chief Information Security Officer Pepperdine University On Wed, Dec 9, 2009 at 11:27 AM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: Hi again, I'm having some trouble setting up the mySql Connection to

Re: [cas-user] CAS services page

2009-12-09 Thread Francisco Estanqueiro
think its apparently an unsafe assumption to assume people see that message in our wiki. Cheers, Scott On Fri, Nov 27, 2009 at 1:41 PM, Francisco Estanqueiro mailto:fwestanque...@fc.ul.pt>> wrote: My bad, I didnt found that page. How do I remove the service I added to gain a

[cas-user] CAS failover

2009-12-02 Thread Francisco Estanqueiro
x27;m using the latest release of Tomcat and CAS. Thanks a lot, Francisco Estanqueiro Faculty of Science, University of Lisbon -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/w

Re: [cas-user] CAS services page

2009-11-27 Thread Francisco Estanqueiro
Done. Thanks for your help. Francisco Estanqueiro Scott Battaglia wrote: The easiest way is to remove it from the database if you've configured it to point to one of your databases. And actually, if you wouldn't mind, can you open up a JIRA issue for an improvement that basicall

Re: [cas-user] CAS services page

2009-11-27 Thread Francisco Estanqueiro
u attempted to authenticate to is not authorized to use CAS. What am I doing wrong? Francisco Estanqueiro Faculty of Science - University of Lisbon -- You are currently subscribed to cas-user@lists.jasig.org <mailto:cas-user@lists.jasig.org> as: scott