On 12/03/2012 03:08 AM, rere16 wrote:
Hello,I would like to secure a Spring application. For now, the authentication works perfectly with the CAS. However, I would add the ability to authenticate with a separate form. In the applicationContext file, I use a casAuthenticationProvider: <bean id="casAuthenticationProvider" class="org.springframework.security.cas.authentication.CasAuthenticationProvider"> <property name="userDetailsService"><ref bean="constantRoleUserService" /></property> <property name="ticketValidator"><ref bean="casProxyTicketValidator" /></property> <property name="serviceProperties"><ref bean="serviceProperties" /></property> </bean> I would like to know what is the proper method for using a authentication form and a database to access secure pages by CAS. thank you
The pages aren't secured by CAS, they are secured by Spring Security, which is using a CAS provider. This is a Spring Security question, not a Tapestry one.
From what I know, you'll need to provide multiple AuthenticationProviders, and configure them to do the type of chaining you want to do. From there, you'll have to create your custom login form, with the option to click on a link to be sent through the CAS path.
From what I remember, with Spring Security, if the user doesn't have a session, they are redirected to the login page. With a CAS configuration, that is the CAS filter, which then sends them to CAS, and handles the returned token. You'll want to avoid that path by default most likely.
Spring does have documentation on having multiple AuthenticationProviders: http://static.springsource.org/spring-security/site/docs/3.1.x/reference/core-services.html#core-services-authentication-manager --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
