[cas-user] cas+ldap [beginner's?] problem

. Thanks, G -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki

Re: [cas-user] cas+ldap [beginner's?] problem

. The document is attached. Cheers! Quoting Giuseppe Sollazzo gsoll...@sgul.ac.uk: Dear all, I've just started setting up CAS for our Moodle installation and can't get it to work properly with ldap. I was wondering if anyone had any similar experiences and could give me a hand. I can

Re: [cas-user] cas+ldap [beginner's?] problem

phase is failing, it would help to post your entire LdapContextSource bean definition so we can evaluate it against the details of your LDAP environment, which you'd need to provide as well. M -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University

Re: [cas-user] cas+ldap [beginner's?] problem

wondering if I'm getting something wrong elsewhere in the deployerConfigContext.xml? Thanks again for your help, Giuseppe -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently subscribed to cas-user@lists.jasig.org

Re: [cas-user] cas+ldap [beginner's?] problem

Giuseppe Sollazzo wrote: The result when I try to authenticate with username user is always as follows: [15/Oct/2009:10:43:11 +0100] conn=374073 op=0 msgId=1 - BIND dn=username=user,ou=people,o=sghms.ac.uk,o=sghms.ac.uk method=128 version=3 [15/Oct/2009:10:43:11 +0100] conn=374073 op=0

Re: [cas-user] cas+ldap [beginner's?] problem

(or at least progress farther). :) Ryan - Giuseppe Sollazzo gsoll...@sgul.ac.uk wrote: The ldapsearch tool (provided by ldap-utils package on Debian) is invaluable for diagnosing LDAP bind problems. Execute the following command which attempts to bind as the user above

Re: [cas-user] cas+ldap [beginner's?] problem

... ... (and counting :P) I guess something is moving in the right direction but there are still some issues? Thanks for any help, Giuseppe Giuseppe Sollazzo wrote: Hi Ryan, yes the way I get it to work is by giving the fully qualified id ldapsearch -H ldap://my.ldap.server -x -Z -b o=Y -D

Loop of granting service ticket (was Re: [cas-user] cas+ldap [beginner's?] problem)

will immediately construct the user DN and use it with the password provided on the login form to perform an LDAP bind operation. Hopefully this will clear up what you need to do for your environment. M -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's

Re: Re[cas-user] direction (?) loop of Granting service ticket

with phpCAS 1.0.1, but using phpCAS 1.0.0 it works perfectly Which phpCAS version are you using? Giuseppe Sollazzo-2 wrote: Hi all, I'm still trying to deal with this issue: when I try to authenticate over CAS via moodle, I get a sequence of (incrementally numbered) Granting service tickets

Re: Re[cas-user] direction (?) loop of Granting service ticket

it with phpCAS 1.0.0 to check if your problem remains... Giuseppe Sollazzo-2 wrote: Hi Diego, interesting question - I'm actually not sure as I think it came with CAS? How can I check it? My setup was: 1) install moodle 2) install tomcat 3) deploy the CAS webapp Thanks, Giuseppe Diego

Re: Re[cas-user] direction (?) loop of Granting service ticket

the certificate check somewhere? No tutorial mentioned this, so I guess there's something wrong about this function call but can't tell what... Thanks, Giuseppe -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently

Re: Re[cas-user] direction (?) loop of Granting service ticket

find the right place in Moodle to configure the phpCAS client, http://www.ja-sig.org/wiki/display/CASC/phpCAS+examples give examples of both disabling the cert check (not recommended) and enabling an explicity trust check. M -- Giuseppe Sollazzo Systems Developer / Administrator Computing

Re: Re[cas-user] direction (?) loop of Granting service ticket

. (You can provide a path argument if you want the logs going somewhere else.) M -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com

Re: [cas-user] JVM survey

or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change

[cas-user] Authentication failure: PT not validated (no response from the CAS server)

else.) M -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently subscribed to cas-user@lists.jasig.org as: gsoll...@sgul.ac.uk To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki

Re: [cas-user] Authentication failure: PT not validated (no response from the CAS server)

should find why your apps is trying to validate it like that, see your init phpCAS::client() parameters, in my mind you should set no proxy ;) Thanks Julien Giuseppe Sollazzo a écrit : Hi all I was just wondering if anyone had any hint on this problem - logs are helpful but I guess I'm missing

[cas-user] Apparent auth success, but authentication failed in moodle

this possibly be related to the properties in cas.properties? Or maybe does anyone know how to activate logging into phpCAS/moodle? Thanks, -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently subscribed to cas-user

Re: [cas-user] Apparent auth success, but authentication failed in moodle

::traceEnd(); ? Any hint/idea/suggestion would be highly appreciated :-) Thanks, -- Giuseppe Sollazzo Systems Developer / Administrator Computing Services St. George's, University of London -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe

[cas-user] logout exception javax.net.ssl.SSLHandshakeException

) at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(Unknown Source) at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source) at java.security.cert.CertPathValidator.validate(Unknown Source) ... 27 more -- Giuseppe Sollazzo Systems Developer / Administrator Computing

Re: [cas-user] logout exception javax.net.ssl.SSLHandshakeException

Scott Battaglia wrote: What you're seeing is CAS trying to call back to your services to let them know that the CAS session ended. One of the endpoints for your applications has a certificate that disagrees with CAS :-) On Wed, Jan 20, 2010 at 6:07 AM, Giuseppe Sollazzo gsoll...@sgul.ac.uk

Re: [cas-user] logout exception javax.net.ssl.SSLHandshakeException

pointers to CAS documentation? Thanks, Giuseppe Scott Battaglia wrote: On Wed, Jan 20, 2010 at 9:21 AM, Giuseppe Sollazzo gsoll...@sgul.ac.uk mailto:gsoll...@sgul.ac.uk wrote: Maybe I'm missing something here so forgive my possibly stupid issue :-) I'm actually calling the logout

Re: [cas-user] logout exception javax.net.ssl.SSLHandshakeException

Thanks, I'll give it a look. G Scott Battaglia wrote: On Thu, Jan 21, 2010 at 4:43 AM, Giuseppe Sollazzo gsoll...@sgul.ac.uk mailto:gsoll...@sgul.ac.uk wrote: Hi Scott, I'm not sure I actually understand what you mean. In my example, there was no url to call back, as I was trying

Re: [cas-user] CAS3 + Plone?

://www.ja-sig.org/wiki/display/JSG/cas-user -- Giuseppe Sollazzo Systems developer and administrator Computing Services Information Services St. George's, University Of London Cranmer Terrace London SW17 0RE Email: gsoll...@sgul.ac.uk Direct Dial: +44 20 8725 5160

Re: [cas-user] CAS3 + Plone?

. In our settings, we decided to not pursue with it. Giuseppe -- Giuseppe Sollazzo Systems developer and administrator Computing Services Information Services St. George's, University Of London Cranmer Terrace London SW17 0RE Email: gsoll...@sgul.ac.uk Direct

Re: [cas-user] exclusion lists, user groups

this and it works splendidly. 2) is it possible to define user exclusion lists? Again, this is a concern for each CAS-enabled service. M -- Giuseppe Sollazzo Systems developer and administrator Computing Services Information Services St