Re:[cas-user] Migration to cas-u...@apereo.org

2015-11-23 Thread Jérôme LELEU
Hi, You will no longer be able to post to this mailing list. Please use cas-u...@apereo.org instead. Thanks. Best regards, Jérôme 2015-11-20 8:29 GMT+01:00 Jérôme LELEU <lel...@gmail.com>: > Hi, > > Apereo is decommissioning the jasig.org email domain. As part of this > pro

[cas-user] Migration to cas-u...@apereo.org

2015-11-19 Thread Jérôme LELEU
Hi, Apereo is decommissioning the jasig.org email domain. As part of this process, the cas-user@lists.jasig.org will be migrated to a new CAS User mailing list, cas-u...@apereo.org. All subscribers will be automatically migrated to this new cas-u...@apereo.org mailing list on Monday, November

Re: [cas-user] RE: [cas-user] CAS 4.1.1 and KryoTranscoder ?

2015-10-23 Thread Jérôme LELEU
Hi, Seeing this error: "com.esotericsoftware.kryo.serializers.ObjectField.write( Lcom/esotericsoftware /kryo/io/Output;Ljava/lang/Object;)V", I would say that there is a version issue somewhere. What's the version of the Kryo library in your CAS server? Thanks. Best regards, Jérôme 2015-10-23

Re: [cas-user] [ dependency ] oauth

2015-09-24 Thread Jérôme LELEU
Hi, OAuth support can be used in two ways: you can turn your CAS server into an OAuth server v2.0 which supports the "authorization code" grant type. For that, you need the cas-server-support-oauth dependency and must follow: http://jasig.github.io/cas/4.1.x/protocol/OAuth-Protocol.html In your

Re: [cas-user] CAS client for NodeJS

2015-09-19 Thread Jérôme LELEU
Hi, I found the connect-cas client from AceMetrix pretty useful. See the demo I developed: https://github.com/leleuj/nodejs-cas-client-demo Thanks. Best regards, Jérôme 2015-09-19 8:22 GMT+02:00 Andrew Morgan : > One of my customers has an application written in NodeJS and

Re: [cas-user] messages_en.properties

2015-08-21 Thread Jérôme LELEU
Hi, It's a little bit more complex. Exceptions happening during authentication are handled by the AuthenticationExceptionHandler ( https://github.com/Jasig/cas/blob/master/cas-server-core/src/main/java/org/jasig/cas/web/flow/AuthenticationExceptionHandler.java), defined here:

Re: [cas-user] SingleSignOutFilter exception - UnsupportedOperationException

2015-08-12 Thread Jérôme LELEU
Hi, Which CAS client version do you use? I'm thinking of this: https://github.com/Jasig/java-cas-client/pull/126 Thanks. Best regards, Jérôme 2015-08-12 16:17 GMT+02:00 Christian Brunotte c...@lathspell.de: Hallo I'm using the following filters in a Glassfish 4.1 + JavaEE7 application and

Re: [cas-user] upgrading doc

2015-08-10 Thread Jérôme LELEU
Hi, Unfortunately, I don't think we have this kind of upgrade guide in the new documentation website: http://jasig.github.io/cas/4.0.x/index.html Any contribution will be welcome (the documentation can be updated via pull requests like source code:

Re: [cas-user] [cas-announce] CAS v.4.0.3 is released

2015-08-05 Thread Jérôme LELEU
Hi, There are default values for these placeholders so you shouldn't have any error (${propertyname:defaultvalue}). What's your error? Thanks. Best regards, Jérôme 2015-08-05 6:13 GMT+02:00 Batni, Sourabh s757b...@ku.edu: -- *From:* Batni, Sourabh *Sent:*

Re: [cas-user] Java CAS client and Trust Store

2015-08-05 Thread Jérôme LELEU
Hi, You need to use the sslConfigFile option: https://github.com/Jasig/java-cas-client/blob/master/cas-client-core/src/main/java/org/jasig/cas/client/validation/AbstractTicketValidationFilter.java#L93 Thanks. Best regards, Jérôme 2015-08-05 15:42 GMT+02:00 Waldbieser, Carl

Re: [cas-user] Memcached Ticket Registry

2015-07-31 Thread Jérôme LELEU
Hi, *Some explanations:* Memcached is a tickets storage which accepts only binary data, so the CAS tickets must be serialized into binary. This can be done with regular Java serialization or using the Kryo library (kryoTranscoder): faster and smaller data sizes. To (de)serialize data, Kryo

Re: [cas-user] Drop the management webapp

2015-07-27 Thread Jérôme LELEU
Hi, It's already possible to reload the services periodically from database for example, but not when it's defined in the Spring context. With the new JSON services registry, the services are automatically created, updated and deleted. Best regards, Jérôme 2015-07-27 15:20 GMT+02:00 Ourada,

Re: [cas-user] Drop the management webapp

2015-07-27 Thread Jérôme LELEU
2015-07-27 16:27 GMT+02:00 Tom Poage tfpo...@ucdavis.edu: On Jul 26, 2015, at 7:08 AM, Jérôme LELEU lel...@gmail.com wrote: ... I'd like to get feedbacks on this idea: do CAS deployers use it? How? We were hoping to start using the registry as a means/layer of controlling who can use

[cas-user] Drop the management webapp

2015-07-26 Thread Jérôme LELEU
Hi, The CAS service model has strongly evolved for the CAS server v4.1 and the powerful new policies are hard to define through a UI. Maintining this webapp requires a lot of work. The default services registry is now based on JSON files which also makes manual editing a lot easier. I'm in favor

Re: [cas-user] Something strange about my logout action.

2015-07-22 Thread Jérôme LELEU
a check (can be false for tests), the second parameter is a list of the allowed servers (it should be your CAS server). Best regards, Jérôme 2015-07-22 11:10 GMT+02:00 Andi Zulfadli andi.zulfa...@gmail.com: Hi,Sir Jérôme LELEU Thank you very much for your help Sir. I want to ask about what

Re: [cas-user] Something strange about my logout action.

2015-07-22 Thread Jérôme LELEU
Hi, The CAS server is responsible for contacting the user applications and notifying them that a logout is required (when a CAS logout is called). So you generally need to configure something on the application side to handle CAS server logout requests. With the phpCAS client, you should have

Re: [cas-user] Invalid property flowExecutionKeyParameter error since v4.0.3

2015-07-21 Thread Jérôme LELEU
Hi, I don't reproduce the error using my own demo: https://github.com/leleuj/cas-overlay-demo on the master for example. And I don't see any change in the source code of the CasDefaultFlowUrlHandler class between v4.0.2 and v4.0.3 for example (

Re: [cas-user] CAS User remains on login page

2015-07-07 Thread Jérôme LELEU
Hi, Did that happen when they stay too long on the login page before entering credentials? Because the webflow can be expired and cause this kind of behaviour. What is the web session of your application? Thanks. Best regards, Jérôme 2015-07-07 15:53 GMT+02:00 Juan Quintanilla

Re: [cas-user] cas3 protocol and python SP library

2015-06-09 Thread Jérôme LELEU
Hi, I would recommand another CAS Python client for which I implemented CAS protocol v3: https://github.com/kstateome/django-cas/commit/ee398aaa8be688d77a58f08faeb0c427fadb6d8e . And the matching demo: https://github.com/leleuj/python-cas-client-demo. Hope it helps. Best regards, Jérôme

Re: [cas-user] pac4j 1.6.0 with CAS 4.0.1 for SAML - any interest?

2015-05-26 Thread Jérôme LELEU
Hi, I also released pac4j v1.7.0 a few weeks ago. This one may have more breaking changes though than the version 1.6.0. I haven't had time to test any upgrade in the CAS server 4.0.x. Great to see people helping on this. Thanks. Best regards, Jérôme 2015-05-26 21:48 GMT+02:00 Misagh Moayyed

Re: [cas-user] CAS Nginx

2015-04-21 Thread Jérôme LELEU
Hi, I did it successfully and you'll find a lot of resources on internet about Nginx configuration. Here is an example: *server {* *listen 80;* *listen 443 ssl;* *ssl_certificate /data/nginx/certs/ssl-bundle.crt;* *ssl_certificate_key

Re: [cas-user] Using logoutUrl in Service Registry

2015-03-31 Thread Jérôme LELEU
Hi, I'm not aware of any logoutUrl parameter, nor any JSON service registry for CAS server 3.5. It will be a new feature in the version 4.1. But this can certainly be achieved by customization. Best regards, Jérôme 2015-03-31 15:52 GMT+02:00 Ted Fisher tffi...@bgsu.edu: We are running

[cas-user] Presentation of CAS

2015-03-10 Thread Jérôme LELEU
Hi, For those who might be interested in a CAS presentation, here is the webinar I did for Apereo last week: https://www.youtube.com/watch?v=It28t9-4xLQ. Best regards, Jérôme -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change

Re: [cas-user] CAS and multiple hostnames

2015-02-05 Thread Jérôme LELEU
you're looking for ( http://jasig.github.io/cas/4.0.x/installation/User-Interface-Customization.html, Themes). Multi-tenancy is a lot more complicated. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator

Re: [cas-user] designing a fallback authentication scheme

2015-02-05 Thread Jérôme LELEU
be achieved pretty easily with a Virtual IP (http://linux-ha.org/wiki/Main_Page). In all cases, you must careful of your SPOF (Single Point Of Failure): is your LDAP resilient? Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas

Re: [cas-user] CAS server release v3.5.3

2015-01-24 Thread Jérôme LELEU
will of the volunteers of the CAS community. We deserve more clemency (we are not all in the same timezones and are not all fluent in English) and courtesy. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j

[cas-user] CAS server release v3.5.3

2015-01-22 Thread Jérôme LELEU
notice that there is a security fix for the LDAP login with wilcards attack (CVE-2015-1169). *You must upgrade if you use LDAP authentication.* There won't be any new 3.5.x version unless a security patch is required. Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud

[cas-user] CAS server release 4.0.1

2015-01-22 Thread Jérôme LELEU
. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings

Re: [cas-user] CAS server release v3.5.3

2015-01-22 Thread Jérôme LELEU
Yes indeed, you should upgrade to close the vulnerability if you use LDAP authentication. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2015-01-22 14:47 GMT+01:00 Chris

Re: RE:[cas-user] CAS Management files

2015-01-21 Thread Jérôme LELEU
Yes, exactly, cas-server-webapp and cas-management-webapp are two different WARs that thus requires 2 overlays... Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2015-01-20 8:55 GMT+01:00

Re: RE:[cas-user] CAS Management files

2015-01-19 Thread Jérôme LELEU
. But with the appropriate configuration, they will simply be ignored. With context:property-placeholder location=file:/etc/cas/cas-management.properties/ in propertyFileConfigurer.xml, you should load your properties which loads your log file. Best regards, Jérôme LELEU Founder of CAS in the cloud

Re: [cas-user] Browser cookies

2015-01-15 Thread Jérôme LELEU
Hi, Cookies are necessary to store the sessions created by the mod_auth_cas module. It's explained in the doc: https://wiki.jasig.org/display/casc/mod_auth_cas if you missed it. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS

Re: [cas-user] CAS 4.0 Spring Client

2015-01-05 Thread Jérôme LELEU
. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2015-01-05 10:48 GMT+01:00 Dheeraj Dubey dheeraj.du...@zensar.in: Hi All, We have used CAS4.0 on tomcat server for SSO

Re: [cas-user] CAS session timeout

2015-01-02 Thread Jérôme LELEU
). Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2015-01-01 20:58 GMT+01:00 Daniel d.mcfe...@gmail.com: I have a requirement for a java web application I am writing

Re: [cas-user] CAS 4.1.0-SNAPSHOT, principal resolution and person directory

2015-01-02 Thread Jérôme LELEU
Hi, Since CAS 4.0, resolvers are not longer mandatory. Your deployerConfigContext.xml file looks good. This kind of error (principal null in @Audit annotation) is generaly linked to another error: don't you have something relevant in your error logs? Thanks. Best regards, Jérôme LELEU Founder

Re: [cas-user] attempting to access CAS login via https

2014-12-15 Thread Jérôme LELEU
Hi, What do you exactly mean by can't access via port 8443? Anything relevant in your logs? This guide should provide you some help: https://wiki.jasig.org/display/casum/ssl+troubleshooting+and+reference+guide . Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com

Re: [cas-user] gateway mode

2014-12-10 Thread Jérôme LELEU
Hi, I remember we had this discussion with Michaël at work. He proposed to have a GatewayResolver which lasts some time but the contribution has not been done so far. Any input Michaël on this? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter

[cas-user] Release of cas-server-security-filter v2.0.0

2014-11-27 Thread Jérôme LELEU
regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access

Re: [cas-user] CAS 4: Attributes not working

2014-11-06 Thread Jérôme LELEU
Hi, It seems so: did you configure the ignoreAttributes flag for your services (it means all attributes must be returned)? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j

Re: [cas-user] CAS 4: Attributes not working

2014-11-05 Thread Jérôme LELEU
Hi, What's the url of the defined endpoint for the service ticket validator? Did you use the /p3 url? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-11-05 11:42

Re: [cas-user] CAS 4: Attributes not working

2014-11-05 Thread Jérôme LELEU
Hi, You can use the SAML endpoint, but the new /p3 endpoint is meant to avoid the use of SAML and return the user atributes. Sure it works by testing manually: http://host/yourcas/p3/serviceValidate?ticket=ST-xxxservice=yyy? Best regards, Jérôme LELEU Founder of CAS in the cloud

Re: [cas-user] CAS 4: Attributes not working

2014-11-05 Thread Jérôme LELEU
Hi, For security reasons, service tickets cannot be reused and expire shortly (10s by default). So that must be a *quick* manual testing or you must change your service ticket lifetime configuration. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter

Re: [cas-user] CAS 4, does not work properly with cas client core 3.1.12

2014-11-04 Thread Jérôme LELEU
, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-11-04 9:19 GMT+01:00 jeffrey tan double.chee...@gmail.com: hi, is u again :) i not yet try 3.2.5.RELEASE, but i did try 1. to check

Re: [cas-user] CAS 4, does not work properly with cas client core 3.1.12

2014-11-04 Thread Jérôme LELEU
Hi, SAML 1.1 support was primarly created to retrieve user attributes, which can now be done using the /p3 endpoint. So SAML is not necessary by default in CAS 4.0 and was therefore made optional. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj

Re: [cas-user] CAS 4, does not work properly with cas client core 3.1.12

2014-11-04 Thread Jérôme LELEU
Hi, Yesterday, I had the same question on stack overflow and updated: http://jasig.github.io/cas/development/protocol/CAS-Protocol.html. We might have a better documentation somewhere, but I haven't been able to find it back. Best regards Jérôme LELEU Founder of CAS in the cloud

Re: [cas-user] CAS 4 in Production

2014-11-03 Thread Jérôme LELEU
Hi, I think I already said it, but CAS in the cloud, a commercial offer for CAS, is based on CAS 4. So its clients are using real CAS servers v4 in production. I just had a few glitches for the social support that I fixed back also in CAS server 4.1-SNAPSHOT. Best regards, Jérôme LELEU Founder

Re: [cas-user] CAS 4, does not work properly with cas client core 3.1.12

2014-11-03 Thread Jérôme LELEU
Hi, Did you try with a more recent CAS client by Spring Security (3.2.5.RELEASE)? Did you enable DEBUG logs (org.jasig) on client side to see the SAML response returned by the CAS server? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj

Re: [cas-user] SLO: impact of unresolvable hosts?

2014-11-03 Thread Jérôme LELEU
by your CAS server, requests will fail. In that case, you may want to adjust the settings (connectTimeout and readTimeout). Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-11-04 1

Re: [cas-user] loginToken expiration

2014-10-31 Thread Jérôme LELEU
Hi, It is somehow a well-known problem. The loginToken as well as the webflow more generally, relies on the web session. And when it expires, indeed 'bad things' happen. About solutions, there have been already several discussions about this topic. A really easy solution is to reload your login

Re: [cas-user] Error in redirection after successful login

2014-10-31 Thread Jérôme LELEU
Hi, Here you are a the right place to ask questions. I'm surprised by this error line: java.net.MalformedURLException: no protocol: {cas.securityContext.casProcessingFilterEntryPoint.loginUrl} Is this the right plain text or did you change something? Thanks. Best regards, Jérôme LELEU

Re: [cas-user] Allowing non-https services

2014-10-22 Thread Jérôme LELEU
session. That's why by default, services are not allowed to proxy in CAS 4.0. The proxy option should be enabled only when it's *really* necessary. Best regards, Jérôme Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator

Re: [cas-user] CAS Server 4.0 | Get Principal in workflow

2014-10-21 Thread Jérôme LELEU
the addon from Unicon: https://github.com/Unicon/cas-addons/wiki/Authenticated-Principal-in-Generic-Success-Login-View . Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-10-20 20

Re: [cas-user] Services Management Database Sync

2014-10-08 Thread Jérôme LELEU
Hi, Services are saved or restored directly to the DB, so when it's down, the Services Management webapp cannot update/add/delete services anymore. There is no specific process to work offline. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj

Re: [cas-user] CAS OAuth Support 3.5.2 - Working with service parameter.

2014-09-30 Thread Jérôme LELEU
Hi, I just fixed the problem on 4.1-SNAPSHOT version: https://github.com/Jasig/cas/commit/de6c198824c154ac9177c786eb4725eeca087780 . Would you mind testing it? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS

Re: [cas-user] Connection CAS Server 3.5.2 with LDAP Server

2014-09-26 Thread Jérôme LELEU
Hi, Isn't it what you are looking for: https://github.com/Jasig/cas/blob/3.5.x/cas-server-webapp/src/main/webapp/WEB-INF/deployerConfigContext.xml#L143 ? Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator

Re: [cas-user] Connection CAS Server 3.5.2 with LDAP Server

2014-09-26 Thread Jérôme LELEU
Hi, Add your missing bean: userDetailsService by looking at the link I provided. Support LDAP by following the documentation reference provided previously: https://wiki.jasig.org/display/CASUM/LDAP. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter

Re:[cas-user] [cas-dev] Travis build time improvements and status

2014-09-22 Thread Jérôme LELEU
Hi, Builds from Travis are now pushed to Sonatype so that CAS early adopters can test the CAS server under development (version 4.1.0-SNAPSHOT). = https://oss.sonatype.org/content/repositories/snapshots/org/jasig/cas Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud

Re: [cas-user] This is embarassing

2014-09-20 Thread Jérôme LELEU
+1 to remove as well Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-09-19 23:39 GMT+02:00 Misagh Moayyed mmoay...@unicon.net: +1 to remove. -Original Message- From: Marvin

Re: [cas-user] CAS Client Security Vulnerability CVE-2014-4172

2014-09-15 Thread Jérôme LELEU
Hi, Yes, for CAS server version 4.0, the filter will wrongfully block multi-attributes service setup. The documentation was updated: https://github.com/Jasig/cas-server-security-filter to explain that explicit mappings are required in that case. Best regards, Jérôme LELEU Founder of CAS

Re: [cas-user] Is Cas20ServiceTicketValidator thread safe?

2014-09-12 Thread Jérôme LELEU
Hi, The Cas20ServiceTicketValidator is meant to be a singleton and you can call it multiple times safely. It's the way it's used in other frameworks like Spring Security and Shiro. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS

Re: [cas-user] social sign on with pac4j via cas question

2014-09-08 Thread Jérôme LELEU
, both will be possible depending on the configuration: https://github.com/Jasig/cas/commit/94b70734c76f9ab24178e22a7c7bd30cbd44dc83 . Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org

Re: [cas-user] Is there any CAS client available for ASP or CWS?

2014-09-05 Thread Jérôme LELEU
Hi, I'm used to say that if you don't have the right CAS client for your webapp, you can still fallback to the CAS module for Apache (installed as a reverse proxy to your webapp). Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS

Re: [cas-user] Java CAS Client 3.2.2 ?

2014-08-29 Thread Jérôme LELEU
Hi, Nice proposal. However, as we already have our security filter to protect older CAS clients, shouldn't we focus on releasing it quickly? What are the users' feedbacks on it? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman

Re: [cas-user] Prevent phishing via service redirect by default

2014-08-29 Thread Jérôme LELEU
Hi, Indeed, I'm refering to this default service pattern: ^(https?|imaps?)://.*, wherever you store your services registry. We should definitely remove it to force CAS deployers to define their own services or remove the unsecure protocol supports. Best regards, Jérôme LELEU Founder of CAS

Re: [cas-user] Gateway feature

2014-08-28 Thread Jérôme LELEU
Hi, It should work as you returned to your application with a service ticket. Don't you have something relevant in your logs? Would you mind enabling logs on org.jasig.cas? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS

Re: [cas-user] Gateway feature

2014-08-28 Thread Jérôme LELEU
I meant: your logs on the CAS client / application side, to see if the service ticket has been properly validated. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-08-28 10

Re: [cas-user] Race condition between Moodle and CAS Server 3.5.1+

2014-08-26 Thread Jérôme LELEU
surprised it woks with 0 second, I think it generates issue when setting too low. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-08-22 19:38 GMT+02:00 John Gasper jgas

[cas-user] Best CAS clients in Python, Ruby and Node.js

2014-08-22 Thread Jérôme LELEU
/rubycas/rubycas-client. But it's not very clear for Node.js what CAS client should be used: https://nodejsmodules.org/tags/cas, nor for Python. I'd like to get feedbacks from the CAS community to know which CAS clients are used for these technologies. Thanks. Best regards, Jérôme LELEU Founder

Re: [cas-user] How to disable security for cas/status

2014-08-19 Thread Jérôme LELEU
Hi, This security configuration is done in the following Spring context: https://github.com/Jasig/cas/blob/master/cas-server-webapp/src/main/webapp/WEB-INF/spring-configuration/securityContext.xml . Update it according to your needs. Best regards, Jérôme LELEU Founder of CAS in the cloud

Re: [cas-user] CAS 4.1 - Any release date planned?

2014-08-05 Thread Jérôme LELEU
Hi, I like people needing the new pac4j version ;-) So far, we haven't said anything about the release date. 4.0 was released in May so I personaly would not expect anything before the end of the year... Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter

Re: [cas-user] Get Existing TGT At the time Authentication

2014-08-04 Thread Jérôme LELEU
regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-08-04 17:19 GMT+02:00 Santosh kumar kr.santosh3...@gmail.com: I want to get Existing token at the time login using Rest Api.But

Re: [cas-user] Does cas 4 support http way?

2014-07-22 Thread Jérôme LELEU
-configuration/ticketGrantingTicketCookieGenerator.xml#L31 file. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-07-22 9:45 GMT+02:00 sunchaojin sunchao...@163.com: Does

Re: [cas-user] CAS OAuth Support 3.5.2 - Working with service parameter.

2014-07-22 Thread Jérôme LELEU
Hi, The JIRA is no longer used. You need to fill in a Github issue for CAS: https://github.com/Jasig/cas/issues/new. Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org

Re: [cas-user] CAS OAuth Support 3.5.2 - Working with service parameter.

2014-07-17 Thread Jérôme LELEU
parameter and do a new test? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-07-16 15:01 GMT+02:00 Jonathan H Shek jhs...@mit.edu: Hi Jérôme, Which theme

Re: [cas-user] CAS OAuth Support 3.5.2 - Working with service parameter.

2014-07-17 Thread Jérôme LELEU
Hi, Thanks for testing. Indeed, the HttpServletRequestWrapper is a good solution. Would you mind opening a Github issue to track this bug ? I will fix it for 4.1. Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS

Re: [cas-user] Redirect loop from services mangagement console

2014-07-15 Thread Jérôme LELEU
Hi, Infinite loop generally comes from service ticket validation failure. Don't you have more relevant logs, like errors and stacktraces? It would help... Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas

Re: [cas-user] Redirect loop from services mangagement console

2014-07-15 Thread Jérôme LELEU
OK. Or there might be some missing slash at the beginning of one of the url defined, especially the one defining your management console service... What's the value defined in the properties file? Thanks. Best, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj

Re: [cas-user] Service Management Webapp Deployment Issues (round two)

2014-07-11 Thread Jérôme LELEU
Hi, You are trying to use a data source called jdbc/cas-source and I see a DataSource named jdbc/ehcache as a ResourceLink. Hence the error I think. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator

[cas-user] Gradle overlay

2014-06-19 Thread Jérôme LELEU
, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

Re: [cas-user] CAS OAuth Support 3.5.2 - Working with service parameter.

2014-06-19 Thread Jérôme LELEU
is properly restored and generates an error (I have not that theme)... Hope it helps. Best regards, Jérôme Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-06-17 0:25 GMT+02:00 Jonathan jhs

Re: [cas-user] How to implement Remember me feature with CAS

2014-06-19 Thread Jérôme LELEU
Hi, The documentation for remember-me: https://wiki.jasig.org/display/CASUM/Remember+Me. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org 2014-06-18 19:13 GMT+02:00

Re: [cas-user] CAS OAuth Support 3.5.2 - Working with service parameter.

2014-06-13 Thread Jérôme LELEU
of an error as well and if it doesn't, it's somehow a bug. Can you copy/paste a stacktrace to see what kind of error breaks the flow? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j

Re: [cas-user] http error 407 issue

2014-06-11 Thread Jérôme LELEU
Hi, The HTTP 407 code means that you need some authorization for a proxy: http://www.checkupdown.com/status/E407.html. Does it help? Thanks. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j

Re: [cas-user] Is the CAS REST API working for 4.0?

2014-06-09 Thread Jérôme LELEU
Hi, Yes it works for 4.0, I've checked it. Here is the new doc: http://jasig.github.io/cas/4.0.0/protocol/REST-Protocol.html. Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org

Re: [cas-user] How to build and deploy services management web app?

2014-06-09 Thread Jérôme LELEU
Hi, Once again, most of the updated documentation can be found on Github: http://jasig.github.io/cas/4.0.0/installation/Service-Management.html#installing-the-services-management-webapp . Best regards, Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman

Re: [cas-user] Cas server and radius authentication

2014-06-05 Thread Jérôme LELEU
Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 -- You are currently subscribed to cas-user@lists.jasig.org as: lel...@gmail.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- Jérôme LELEU Founder of CAS in the cloud

Re: [cas-user] How can i resolve warnings on War file?

2014-06-03 Thread Jérôme LELEU
, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail

Re: [cas-user] How can i resolve warnings on War file?

2014-06-03 Thread Jérôme LELEU
for the feedback. I'm following Jasig's sample installation guide which doesn't have a version tag for the war file. Do I have to use a specific version number, or can I use my own version scheme? Best regards On Tuesday, June 3, 2014 11:59:54 AM UTC+1, Jérôme LELEU wrote: Hi, I don't

Re: [cas-user] SingleSignOutFilter vs casLogOutView.jsp

2014-06-02 Thread Jérôme LELEU
the CAS client? Thanks again! *From:* Jérôme LELEU [mailto:lel...@gmail.com] *Sent:* Sunday, June 01, 2014 9:54 AM *To:* cas-user@lists.jasig.org *Subject:* Re: [cas-user] SingleSignOutFilter vs casLogOutView.jsp Hi, When you call the CAS logout (/cas/logout), generally (it's

Re: [cas-user] How to compile source locally

2014-06-02 Thread Jérôme LELEU
in Maven? Thanks in advance! -- You are currently subscribed to cas-user@lists.jasig.org as: lel...@gmail.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter

Re: [cas-user] Login page (JSP) returns malformed HTML in IE only

2014-06-01 Thread Jérôme LELEU
this? Any other solution? -- You are currently subscribed to cas-user@lists.jasig.org as: lel...@gmail.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter

Re: [cas-user] Trying to log in

2014-06-01 Thread Jérôme LELEU
@lists.jasig.org as: lel...@gmail.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org

Re: [cas-user] SingleSignOutFilter vs casLogOutView.jsp

2014-06-01 Thread Jérôme LELEU
/JSG/cas-user -- Jérôme LELEU Founder of CAS in the cloud: www.casinthecloud.com | Twitter: @leleuj Chairman of CAS: www.jasig.org/cas | Creator of pac4j: www.pac4j.org -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings

Re: [cas-user] Single signout for Shiro-CAS client apps

2014-05-29 Thread Jérôme LELEU
Hi, I created the Shiro CAS support, but I don't know how it is integrated into Grails. The SingleSingOutFilter was required to make the application able to receive logout requests from the CAS server. Best regards, Jérôme 2014-05-29 21:41 GMT+02:00 Zac Harvey zhar...@commercehub.com: I

Re: [cas-user] CAS 4.0 : LDAP oAuth Support

2014-05-26 Thread Jérôme LELEU
Hi, The AuthenticationManagerImpl was the authentication manager of the CAS server = v3.5.x. It has been replaced by the the PolicyBasedAuthenticationManager in CAS server v4.0.0. Thanks. Best regards, Jérôme 2014-05-26 10:22 GMT+02:00 Sunil Kalahasti sunilkalaha...@gmail.com: Thanks Jerome.

Re: [cas-user] Example login UI that with social sign on or username password

2014-05-23 Thread Jérôme LELEU
Hi, If you are looking for something that looks good, I cannot help you. At least, I have fully working demo for social login here: https://github.com/leleuj/cas-pac4j-oauth-demo. Best regards, Jérôme 2014-05-23 17:35 GMT+02:00 Nancy Snoke nsn...@thegeneral.com: Hi Everyone, Does anyone

Re: [cas-user] CAS 4.0 : LDAP oAuth Support

2014-05-22 Thread Jérôme LELEU
Hi, The social support exists since CAS server 3.5.0. So you need to upgrade to this version at least. The Facebook logout is not supported yet, you need to customize your logout process / page to explicitely call the Facebook logout. Best regards, Jérôme 2014-05-22 12:02 GMT+02:00 Sunil

Re: [cas-user] Java 8?

2014-05-21 Thread Jérôme LELEU
, 2014, at 3:10 AM, Jérôme LELEU lel...@gmail.comlel...@gmail.comwrote: I've made a new Java 8 build test on the master (4.1.0-SNAPSHOT) and I have a new error: some basic classes cannot be resolved (for ex: The import java.util.Arrays cannot be resolved) due mostly to indirectly referenced

Re: [cas-user] Force re-authentication programmatically

2014-05-19 Thread Jérôme LELEU
Hi, I'm not exactly sure of what flow you have in mind, but you can force a re-authentication (even if the user is already authenticated) by using the renew parameter on the login url: /cas/login?service= http://myservice?renew=true. Best regards, Jérôme 2014-05-19 10:58 GMT+02:00 chris nikitas

Re: [cas-user] Java 8?

2014-05-19 Thread Jérôme LELEU
Hi, I've made a new Java 8 build test on the master (4.1.0-SNAPSHOT) and I have a new error: some basic classes cannot be resolved (for ex: The import java.util.Arrays cannot be resolved) due mostly to indirectly referenced from required .class files. Do you have the same problem? Thanks. Best

  1   2   3   >