Re: [cas-user] Idp initiated SLO & Google Apps

2013-02-19 Thread Lynxlogic
there a cURL equivalent in Java? > > Thanks, > Ed > > > On Wed, Feb 13, 2013 at 12:24 PM, Lynxlogic wrote: > Is IdP initiated single sign out (i.e., sign out from CAS server, or from a > different SP for that matter) supposed to work with Google Apps? I'm seeing >

[cas-user] Idp initiated SLO & Google Apps

2013-02-13 Thread Lynxlogic
Is IdP initiated single sign out (i.e., sign out from CAS server, or from a different SP for that matter) supposed to work with Google Apps? I'm seeing the user logged out from both CAS and Google if I sign out from Google Apps, but if I sign out from CAS I'm left logged into Google, even though

Re: [cas-user] "login credentials could not be verified" with Google SSO

2013-02-12 Thread Lynxlogic
In case anyone else is interested or runs into this problem, I was able to get SSO working by running CAS in Tomcat 7 instead of Jetty 8. I also changed to using a DSA key instead of RSA, because Marvin Addison found a possible problem with RSA support. I haven't spent the time to track down wh

Re: [cas-user] "login credentials could not be verified" with Google SSO

2013-02-08 Thread Lynxlogic
I can't see how it could be a mismatched certificate problem. I've independently tested the SAML produced by cas with xmlsec1 using the certificate I uploaded to Google. Xmlsec1 reports the signature is invalid. If I sign the same XML with xmlsec1 using the same private key I configured in CAS,

Re: [cas-user] "login credentials could not be verified" with Google SSO

2013-02-07 Thread Lynxlogic
David On Feb 7, 2013, at 2:22 PM, Lynxlogic wrote: > Hi Ed, > > Thanks for the pointer, but it doesn't look related to my problem. In my > case, a response is being sent to Google, but it's not being accepted at > their end. I'm also running CAS 3.5.1, in w

Re: [cas-user] "login credentials could not be verified" with Google SSO

2013-02-07 Thread Lynxlogic
s wrote: > It may not apply to your CAS version, and it may not be related, but did you > see https://issues.jasig.org/browse/CAS-868? > > Ed > > > On Thu, Feb 7, 2013 at 2:05 PM, Lynxlogic wrote: > Hi, > > I'm getting started with CAS and my first chore i

[cas-user] "login credentials could not be verified" with Google SSO

2013-02-07 Thread Lynxlogic
Hi, I'm getting started with CAS and my first chore is to setup SSO with Google apps. I followed the directions here: https://wiki.jasig.org/pages/viewpage.action?pageId=6063484 When I try to sign in Google redirects to my CAS server, I sign in, then CAS posts back to Google, but Google appare