Hi,
Ok, so what I have done is to add the LDAP integration to the pom.xml,
then I've copied deployerConfigContext.xml to the maven overlay and
edited it as stated in the documentation link that you send me.
The first sniped I have added is:
<context:component-scan base-package="org.jasig.cas" />
<context:annotation-config/>
The second piece of code is the LDAP Handler (commenting out the default
one)
<bean id="ldapAuthenticationHandler"
class="org.jasig.cas.authentication.LdapAuthenticationHandler"
init-method="initialize"
p:principalIdAttribute-ref="usernameAttribute"
c:authenticator-ref="authenticator">
<property name="principalAttributeList">
<list>
<value>displayName</value>
<value>mail</value>
<value>memberOf</value>
</list>
</property>
</bean>
Then I've edited the ca.properties as follows:
##############
# LDAP CAS####
#========================================
# General properties
#========================================
ldap.url=ldap://ldap.mydomain.es
# LDAP connection timeout in milliseconds
ldap.connectTimeout=3000
# Whether to use StartTLS (probably needed if not SSL connection)
ldap.useStartTLS=false
#========================================
# LDAP connection pool configuration
#========================================
ldap.pool.minSize=3
ldap.pool.maxSize=10
ldap.pool.validateOnCheckout=false
ldap.pool.validatePeriodically=true
# Amount of time in milliseconds to block on pool exhausted condition
# before giving up.
ldap.pool.blockWaitTime=3000
# Frequency of connection validation in seconds
# Only applies if validatePeriodically=true
ldap.pool.validatePeriod=300
# Attempt to prune connections every N seconds
ldap.pool.prunePeriod=300
# Maximum amount of time an idle connection is allowed to be in
# pool before it is liable to be removed/destroyed
ldap.pool.idleTime=600
#========================================
# Authentication
#========================================
# Base DN of users to be authenticated
ldap.authn.baseDn=ou=people,ou=domain,dc=es
# Manager DN for authenticated searches
ldap.authn.managerDN=uid=people,ou=domain,dc=es
# Manager password for authenticated searches
ldap.authn.managerPassword=myPassword
# Search filter used for configurations that require searching for DNs
#ldap.authn.searchFilter=(&(uid={user})(accountState=active))
#ldap.authn.searchFilter=(uid={user})
# Search filter used for configurations that require searching for DNs
#ldap.authn.format=uid=%s,ou=Users,dc=example,dc=org
#ldap.authn.format=%[email protected]
# A path to trusted X.509 certificate for StartTLS
#ldap.trustedCert=/path/to/cert.cer
Any idea why it does compile, but when I deploy it to the tomcat server
it doesn't even start?
Here is a link to the whole deployer
http://pastebin.com/4vEg3tc7
Thanks a lot!
On 26/01/16 17:13, Dmitriy Kopylenko wrote:
OK, once you have your basic maven war overlay structure set up, then
find the documentation page for the module you want to integrate with
For example, LDAP:
http://jasig.github.io/cas/4.1.x/installation/LDAP-Authentication.html
The very first sentence states: LDAP integration is enabled by including
the following dependency in the Maven WAR overlay:
<dependency>
<groupId>org.jasig.cas</groupId>
<artifactId>cas-server-support-ldap</artifactId>
<version>${cas.version}</version>
</dependency>
So that really means that you need to add the dependency declaration for
the module(s) of interest to your overlay’s main pom.xml files.
Then follow instructions on the rest of the page. Those bean
configurations shown for the LDAP authentication handler machinery - you
add/modify in your overlay’s WEB-INF/deployerConfigContext.xml (if you
don’t have that yet, just build the cas.war once and copy the default
file from the war into your overlay as a starting point).
Best,
D.
On Jan 26, 2016, at 11:02 AM, Josep Manel Andrés <[email protected]
<mailto:[email protected]>> wrote:
Hi all,
Thanks for the info.
I think I am starting to understand whats going on, but still not
finding too much info about how to get started with Maven overlay
template and introducing the other "moduls" like LDAP for backend
auth, or implementing mysql for tickets storage.
So what I have now is a setup in which I execute mvn clean package
over the maven overlay and I get a war that I can deploy to the tomcat
server and I am able to see the login page. So, what is next? I want
to be able to authenticate against an ldap server, should I copy this:
opscas02:/opt # l cas-4.1.4/cas-server-support-ldap/
total 32
drwxrwxr-x 3 root root 4096 Jan 18 17:42 ./
drwxrwxr-x 33 root root 4096 Jan 25 14:51 ../
-rw-rw-r-- 1 root root 34 Jan 18 17:42 .gitignore
-rw-rw-r-- 1 root root 6307 Jan 18 17:42 NOTICE
-rw-rw-r-- 1 root root 1965 Jan 18 17:42 ldap.properties.sample
-rw-rw-r-- 1 root root 3369 Jan 18 17:42 pom.xml
drwxrwxr-x 5 root root 4096 Jan 18 17:42 src/
to my current cas-overlay-template ?
would it be the right way of doing it? what about if I want to allow
CAS server to store tickets in a mySQL database?
Thanks in advance, guys.
On 20/01/16 15:16, Dmitriy Kopylenko wrote:
Hi there. Try to go over this:
http://jasig.github.io/cas/4.1.x/installation/Maven-Overlay-Installation.html
Cheers,
Dmitriy.
On Jan 20, 2016, at 9:14 AM, Josep Manel Andrés <[email protected]
<mailto:[email protected]>
<mailto:[email protected]>> wrote:
Hi all,
I am trying to set up a CAS server and I am wondering if there is any
guide to follow for a basic CAS installation, the docs that I've found
are about getting ready the different components.
http://jasig.github.io/cas/4.1.x/index.html
There is a section on the right side of the page that talks about
installing different components, but it doesn't even describe how to
install them.
Thanks.
WARNING / LEGAL TEXT: This message is intended only for the use of the
individual or entity to which it is addressed and may contain
information which is privileged, confidential, proprietary, or exempt
from disclosure under applicable law. If you are not the intended
recipient or the person responsible for delivering the message to the
intended recipient, you are strictly prohibited from disclosing,
distributing, copying, or in any way using this message. If you have
received this communication in error, please notify the sender and
destroy and delete any copies you may have received.
http://www.bsc.es/disclaimer
--
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected].
Visit this group at
https://groups.google.com/a/apereo.org/group/cas-user/.
--
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send
an email [email protected]
<mailto:[email protected]>
<mailto:[email protected]>.
Visit this group
athttps://groups.google.com/a/apereo.org/group/cas-user/.
--
Josep Manel Andrés ([email protected] <mailto:[email protected]>)
Operations - Barcelona Supercomputing Center
C/ Jordi Girona, 31 http://www.bsc.es <http://www.bsc.es/>
08034 Barcelona, Spain Tel: +34-93-405 42 14
e-mail:[email protected] <mailto:[email protected]>Fax: +34-93-413 77 21
-----------------------------------------------
WARNING / LEGAL TEXT: This message is intended only for the use of the
individual or entity to which it is addressed and may contain
information which is privileged, confidential, proprietary, or exempt
from disclosure under applicable law. If you are not the intended
recipient or the person responsible for delivering the message to the
intended recipient, you are strictly prohibited from disclosing,
distributing, copying, or in any way using this message. If you have
received this communication in error, please notify the sender and
destroy and delete any copies you may have received.
http://www.bsc.es/disclaimer
--
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send
an email [email protected]
<mailto:[email protected]>.
Visit this group athttps://groups.google.com/a/apereo.org/group/cas-user/.
--
Josep Manel Andrés ([email protected])
Operations - Barcelona Supercomputing Center
C/ Jordi Girona, 31 http://www.bsc.es
08034 Barcelona, Spain Tel: +34-93-405 42 14
e-mail: [email protected] Fax: +34-93-413 77 21
-----------------------------------------------
WARNING / LEGAL TEXT: This message is intended only for the use of the
individual or entity to which it is addressed and may contain
information which is privileged, confidential, proprietary, or exempt
from disclosure under applicable law. If you are not the intended
recipient or the person responsible for delivering the message to the
intended recipient, you are strictly prohibited from disclosing,
distributing, copying, or in any way using this message. If you have
received this communication in error, please notify the sender and
destroy and delete any copies you may have received.
http://www.bsc.es/disclaimer
--
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
