Re: [cas-user] CAS allowing incorrect passwords to Authenticate

2015-08-25 Thread Martel, Michael H
We discovered that a change made to our CAS package to use TLS instead of SSLv3 was the cause of the problem. We are still trying to determine if there was an update on the LDAP Servers that caused them to reject the TLS connections incorrectly or if it was a Java TLS issue. Anyway, we’re back

Re: [cas-user] CAS allowing incorrect passwords to Authenticate

2015-08-24 Thread Dmitriy Kopylenko
Check if you are using SimpleTestUsernamePasswordAuthenticationHandler in your deployerConfigContext.xml by any chance. D. Sent from my iPhone > On Aug 24, 2015, at 17:17, Martel, Michael H wrote: > > Greetings! > > Our IDM Expert is leaving on Friday for greener pastures, and today our ID

Re: [cas-user] CAS allowing incorrect passwords to Authenticate

2015-08-24 Thread John Gasper
Michael, You might consider looking through the cas.log and see if any errors or warnings are being logged. I¹d post a sanitized deployerConfigContext.xml for the group to review. Also, if your CAS Server code is in an svn/git repo, then I¹d consider looking for recent changes. You might even red

[cas-user] CAS allowing incorrect passwords to Authenticate

2015-08-24 Thread Martel, Michael H
Greetings! Our IDM Expert is leaving on Friday for greener pastures, and today our IDM system decided to start accepting all passwords as valid. As far as we can tell this is isolated to our CAS servers and not the Shibboleth and LDAP Servers. When you authenticate to CAS, every password that