Re: [cas-user] Help with Attributes

2015-06-08 Thread Jason Everling
It is working now! I can use dc=test,dc=com in all the relevant sections now after updating our schema to publish the needed attributes to the gc Thanks! JASON On Saturday, June 6, 2015 at 7:36:00 PM UTC-5, Jason Everling wrote: > > Carl, Thanks for the reply, > > So for the baseDN

Re: [cas-user] Help with Attributes

2015-06-06 Thread Jason Everling
. Thanks again, Jason On Friday, June 5, 2015 at 9:33:46 AM UTC-5, Jason Everling wrote: > > We have been using CAS 3.5.3 for sometime now and have never needed the > attributes. I now need to deploy an application that is restricted by an > attribute value. > > I

Re:[cas-user] Help with Attributes

2015-06-05 Thread Jason Everling
fix this? Jason On Fri, Jun 5, 2015 at 10:25 AM, Jason Everling wrote: > I actually got it working now but I have a small issue > > If I put our root DN for the baseDN instead of an OU where some accounts > are it errors out, > > Unprocessed Continuation Reference(s); n

Re:[cas-user] Help with Attributes

2015-06-05 Thread Jason Everling
'dc=test,dc=com' How can I add the our base dc domain? Users are scattered all out and not 1 specific OU JASON On Fri, Jun 5, 2015 at 9:33 AM, Jason Everling wrote: > We have been using CAS 3.5.3 for sometime now and have never needed the > attributes. I now need to deploy an

[cas-user] Help with Attributes

2015-06-05 Thread Jason Everling
We have been using CAS 3.5.3 for sometime now and have never needed the attributes. I now need to deploy an application that is restricted by an attribute value. I added the required items to deployerConifg but the attributes never get queried, I don't see any mention in the logs for an attempt.

Re: [cas-user] CAS - Cookies

2015-02-17 Thread Jason Everling
I have seen these after login, JSESSIONID - Session CASPRIVACY - Warn Cookie CASTGC - Ticket Granting JASON On Tue, Feb 17, 2015 at 3:51 PM, Neil Sabol wrote: > Hello Jay, > > In line with Carl's response, there is a MOD_AUTH_CAS session cookie if > you are using Apache+mod_auth_cas. > > Thank

[cas-user] LPPE, Change Password Flow

2015-02-05 Thread Jason Everling
I have LPPE working fine but when the password is expired or is set to must change password I need some help with the actions. This is something new I have been experimenting with, the current password management system sits behind CAS using clearPass so in order for a user to change their passwor

Re: [cas-user] Basic practical configuration manual for CAS

2013-01-09 Thread Jason Everling
That link is for JDBC Authentication, for a New User to CAS it might be confusing, here is the link to use MySQL with your CAS install. https://wiki.jasig.org/display/CASUM/JpaTicketRegistry We actually use CAS in a clustered setup, basic setup using our MySQL Enterprise Cluster that is used for

Re: [cas-user] ehcache sync

2012-12-20 Thread Jason Everling
I had a similar issue and it turned out the time on the second load balanced server was off by a few minutes. I setup ntp on both and the issue has gone away. Jason On Thu, Dec 20, 2012 at 8:54 AM, Carlos Fernandez wrote: > Abhijit, > > Do you have firewalls running on the servers? I ran into a

Re: [cas-user] Help with CAS and LDAP configuration

2012-11-15 Thread Jason Everling
What does your deployerConfigContext.xml look like for the ldap section? You can remove all the private info from it like yolur server name, usernames, passwords for the ldap part, Jason On Thu, Nov 15, 2012 at 8:11 AM, Min wrote: > Look at the Error information below, I am wondering if there i

[cas-user] MySQL JPA TicketRegistry, Addition to Wiki

2012-11-12 Thread Jason Everling
Who to contact for Wiki update on this page, https://wiki.jasig.org/display/CASUM/JpaTicketRegistry I got around to clustering a new set of MySQL Servers and I could not get the database to load, after some digging around on our ancient MySQL Server I found that the setting, lower-case-table-names

Re: [cas-user] CAS behind a load balancer with SSL termination

2012-11-05 Thread Jason Everling
Hah it works, I added what you mentioned to the AJP Connector section in the XML file, Sweetness, time to do some DNS changes On Mon, Nov 5, 2012 at 12:34 PM, Jason Everling wrote: > Ok so here is the setup, > > Load Balancer in front of 2 CAS Servers both running Apache2 usi

Re: [cas-user] CAS behind a load balancer with SSL termination

2012-11-05 Thread Jason Everling
Ok so here is the setup, Load Balancer in front of 2 CAS Servers both running Apache2 using mod_jk accessing CAS on port 80 through Apache, Load Balancer accepts SSL Connection and proxy's the client to the backend web server on port 80 We have been using HAPROXY and STUNNEL for almost all of ou

Re: [cas-user] CAS behind a load balancer with SSL termination

2012-11-05 Thread Jason Everling
What if we are using the same type of setup but using Tomcat with the Apache AJP Proxy and not using the standard 8080 and 8443 Toimcat ports? I have tried to do this and when I connect to SSL it connects fine but since we are connecting to port 80 on the backend server through the load balancer CA