RE: [cas-user] CAS/ADFS/WS-Federation

2013-11-19 Thread Gasper, John
it worked nicely! Thanks again, Brian -Original Message----- From: Gasper, John [mailto:jgas...@ewu.edu] Sent: Thursday, November 14, 2013 8:01 PM To: cas-user@lists.jasig.org Subject: RE: [cas-user] CAS/ADFS/WS-Federation Hi Brian, You are welcome. Hopefully we can get you going here. Y

RE: [cas-user] CAS/ADFS/WS-Federation

2013-11-14 Thread Gasper, John
upn as the only attribute (as expected). On a related note, does the backingMap for the attributeRepository bean in deployerConfigContext.xml have to match the claims/attributes sent from ADFS? Or the modified attribute map? Thanks, Brian -----Original Message- From: Gasper, John [mailto:j

RE: [cas-user] CAS/ADFS/WS-Federation

2013-11-14 Thread Gasper, John
Hi Brian, Sorry I'm late to the ball. Did you get this figured out? I'd start by examining the data posted to CAS from ADFS. In Chrome you can use the Network tab in the Dev tools and look at the post headers. I'd take the posted response and save it to an .xml and open it in IE or Chrome for e

RE:[cas-user] CAS SPNEGO with fallback to LDAP issues

2013-11-06 Thread Gasper, John
s-server-support-spnego somewhere? I am completely stumped here. Please help. Thank you, Mike From: Gasper, John [mailto:jgas...@ewu.edu]<mailto:[mailto:jgas...@ewu.edu]> Sent: Monday, October 28, 2013 6:45 PM To: cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> Subject: RE:[ca

RE: [cas-user] ASP CAS client

2013-11-06 Thread Gasper, John
Rakesh, Have you seen https://wiki.jasig.org/display/CASC/CAS+Proxying+with+Classic+ASP. It addresses proxying with classic ASP, but the CAS_Authenticator class works for non-proxying as well. In my project, I found the code where the authentication logic existed and dropped this into that ar

RE:[cas-user] CAS SPNEGO with fallback to LDAP issues

2013-10-24 Thread Gasper, John
Hi Michael, A patch has been posted to the 3.5.x branch that adds an option to revert to the old method. 3.5.3 hasn't not officially released, so you'd need to compile the SPNEGO module from source: https://github.com/Jasig/cas/tree/3.5.x/cas-server-support-spnego/ You'll need to set the value

RE: [cas-user] CAS SPNEGO headache

2013-09-27 Thread Gasper, John
@lists.jasig.org Subject: Re: [cas-user] CAS SPNEGO headache I think it's a good point. If SPNEGO is the only auth type, it will be possible a custom 401 page or custom redirect? Thanks 2013/9/25 Gasper, John mailto:jgas...@ewu.edu>> After trying to work out the changes recommended by

RE: [cas-user] CAS SPNEGO headache

2013-09-24 Thread Gasper, John
To: cas-user@lists.jasig.org Subject: Re: [cas-user] CAS SPNEGO headache Any news about this issue? Thx! 2013/9/10 Gasper, John mailto:jgas...@ewu.edu>> Hey all, Unicon will trying to implement Antoni’s proposed fix, or likely something based off of it, later this week. We plan to offer

RE: [cas-user] CAS SPNEGO headache

2013-09-10 Thread Gasper, John
Hey all, Unicon will trying to implement Antoni’s proposed fix, or likely something based off of it, later this week. We plan to offer a pull request for the 3.5.X branch when we get it working. John From: Miguel Ángel Júlvez [mailto:ma.jul...@gmail.com] Sent: Tuesday, September 10, 2013 8:14

RE: [cas-user] Config error after .net app upgrade

2013-07-05 Thread Gasper, John
Hi, Nothing is obvious off the top of my head, but here's a few things to consider/report back: - Just to confirm, the server itself didn't change, just the application? - Are the application files hosted locally or on a network share? - Is the CAS dll in the application's bin directory or somewh

RE: [cas-user] CAS Interage with sharepoint 2013

2013-06-07 Thread Gasper, John
Hi Raymond, I don't know of anyone doing a CAS integration with the new SharePoint version. I believe SharePoint can be integrated with ADFS and that might mean you can substitute ADFS for Shibboleth. If that is the case then you might be able to use the CAS/Shibboleth integration. Good luck.

RE: [cas-user] RE: Re:[cas-user] .NET CAS Client Attributes & ClearPass

2013-06-04 Thread Gasper, John
enough details for me to sort through how to make it work. Thanks Brian On June 4, 2013 at 2:23:24 PM, Gasper, John (jgas...@ewu.edu<mailto:jgas...@ewu.edu>) wrote: Hi Brian, I don’t think I’ve seen anyone respond to you or not. I don’t think you can get a Proxy ticket and get at

RE: Re:[cas-user] .NET CAS Client Attributes & ClearPass

2013-06-04 Thread Gasper, John
Hi Brian, I don't think I've seen anyone respond to you or not. I don't think you can get a Proxy ticket and get attribute release from Saml11. The new CAS 3.0 protocol, which I think is slated for CAS Server v4.0, should allow you to do both. John From: Brian Raymond [mailto:padrino...@email.

RE:[cas-user] CAS and ADFS

2013-05-28 Thread Gasper, John
Hi Joel, Assume that you have set your applicationContext.xml with the following chunk (numbers added for reference): 1. https://login-test-env.ewu.edu/adfs/ls/"; name="identityProviderUrl"/> 2. http://login-test-env.ewu.edu/adfs/services/trust"; name="identityProviderIdentifier"

RE:[cas-user] How to Integrating CAS SSO with Office 365

2013-04-26 Thread Gasper, John
Hey guys, I don't know your specific user case, but this is a solution that I developed: http://sites.ewu.edu/jgasper/ws-federation-cas-user-manual/. It basically delegates CAS's authentication to ADFS, so both ADFS and CAS get authenticated at the same time. John

RE: [cas-user] Cas and o365 Email

2012-12-06 Thread Gasper, John
-user] Cas and o365 Email On Wed, 5 Dec 2012, Gasper, John wrote: -> EWU is just about to go live with O365, so we had a similar need, but because we didn't want to have 2 un-connected single sign-on solutions we took a different approach. John, you are thinking about this wrong. As Ja

RE: [cas-user] Cas and o365 Email

2012-12-05 Thread Gasper, John
Hi Laura, EWU is just about to go live with O365, so we had a similar need, but because we didn't want to have 2 un-connected single sign-on solutions we took a different approach. I recently implemented an authentication provider for CAS that delegates authentication to ADFS (this uses ADFS'

RE: [cas-user] Error saving service to sql server 2005

2012-01-31 Thread Gasper, John
I should add that we are using Hibernate Entity Manager version 3.6.0.Final -Original Message- From: Gasper, John [mailto:jgas...@ewu.edu] Sent: Tuesday, January 31, 2012 10:30 AM To: cas-user@lists.jasig.org Subject: RE: [cas-user] Error saving service to sql server 2005 Aaron, I use

RE: [cas-user] Error saving service to sql server 2005

2012-01-31 Thread Gasper, John
Aaron, I use SQL Server 2008 for my backend storage of tickets and services, and I use the standard dialect: database.hibernate.dialect=org.hibernate.dialect.SQLServerDialect The only noticeable difference between your config and mine is that I don't have the "selectMethod=cursor;" directive i

RE: [cas-user] CAS server with API

2011-11-17 Thread Gasper, John
, November 16, 2011 9:50 PM To: cas-user@lists.jasig.org Subject: Re: [cas-user] CAS server with API Hi Greg, We have an API from the vendor, but it looks like the below solution is more geared towards Stored procedures. Or am i missing something? On Wed, Nov 16, 2011 at 5:19 PM, Gasper, John m

RE: [cas-user] CAS server with API

2011-11-16 Thread Gasper, John
Hi Faisal, I've developed an extension to the JDBC Authentication Handlers that make it pretty easy to authenticate against database stored procedures/user-defined functions, should your vendor's system expose such procedures/apis. I haven't had a chance to submit the enhancement for inclusion

RE: [cas-user] 3.4.11 Null Pointer in Login

2011-11-09 Thread Gasper, John
Thanks for the update Marvin. I try do try to stay current with the desired/best practice when releases come out. If not, I end up down the road asking why isn't XXX not working now, only to learn that "we haven't done it that way in years". :) I did start messing around, and I switching to:

RE: [cas-user] 3.4.11 Null Pointer in Login

2011-11-09 Thread Gasper, John
Directorate University of Ulster Tel: 02890 366273 Email: p.vi...@ulster.ac.uk Web: http://www.ulster.ac.uk/staff/p.vitty.html On 9 Nov 2011, at 17:51, "Gasper, John" wrote: > Hi guys, > > I'm also trying to get my CAS install upgraded 3.4.11. Before going through > the

RE: [cas-user] 3.4.11 Null Pointer in Login

2011-11-09 Thread Gasper, John
Hi guys, I'm also trying to get my CAS install upgraded 3.4.11. Before going through the trouble of blowing my stuff up would it make sense to change the cleanerLock to just the JpaLockingStrategy? Or, should JdbcLockingStrategy be left per the documentation/example on https://wiki.jasig.org/di