hello, first excuse my english, I'm french
I want to configure a cas server 5.1.1 with ldap and spnego authentication. I start with the cas overlay from unicon and add depedency ldap and spnego. I can login manually with my ad username and password once I'm on the cas login page. but I can't login automatically with spnego, I have always the cas login page. I had the cas url in the config of mozilla firefox but still not work. I can have a kerberos ticket manually with kinit so I think my kerberos configuration is good (keytab, krb5.conf) here's my cas.properties: cas.authn.accept.users= cas.server.name: https://cas-test.mydomain.com:8443 cas.server.prefix: https://cas-test.mydomain.com:8443/cas cas.adminPagesSecurity.ip=10\.21\.0\.109 cas.monitor.endpoints.enabled=true cas.monitor.endpoints.sensitive=false logging.config: file:/etc/cas/config/log4j2.xml cas.authn.ldap[0].type=AUTHENTICATED cas.authn.ldap[0].ldapUrl=ldap://dc.mydomain.com cas.authn.ldap[0].useSsl=false cas.authn.ldap[0].useStartTls=false cas.authn.ldap[0].connectTimeout=5000 cas.authn.ldap[0].baseDn=OU=RMP-Users,DC=mydomain,DC=com cas.authn.ldap[0].subtreeSearch=true cas.authn.ldap[0].bindDn=CN=USERCAS,CN=Users,DC=mydomain,DC=com cas.authn.ldap[0].bindCredential=xxxxxxx cas.authn.ldap[0].userFilter=sAMAccountName={user} cas.authn.ldap[0].usePasswordPolicy=false cas.tgc.encryptionKey=xxxxxxxxxxxxxxxxxxxxxxx cas.tgc.signingKey=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx cas.webflow.encryption.key=xxxxxxxxxxxxxxxxxxxxxxxxxxxx cas.webflow.signing.key=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx cas.authn.spnego.kerberosConf=/etc/krb5.conf cas.authn.spnego.loginConf=/etc/login.conf cas.authn.spnego.jcifsServicePrincipal=HTTP/[email protected] cas.authn.spnego.kerberosDebug=true cas.authn.spnego.kerberosKdc=10.83.0.26 cas.authn.spnego.kerberosRealm=MYDOMAN.LOC my question is how cas server know I want a automatic connection with spnego and not display the cas login page In previous versions we have to change xml file but it's seem different started with version 5.1 I want to trace kerberos with debug=true but I don't know how to find the log file I note I have the same bug I see here https://groups.google.com/a/apereo.org/forum/#!searchin/cas-user/login.conf/cas-user/3qlsAgJDaiI/43QmooNvBAAJ but I don't understand how to implement the solution in cas.properties file I try started tomcat with -Djava.security.auth.login.config=/etc/cas/config/kerberos-login.conf with no success. thanks in advance for you help. -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/063c7ce9-30c4-4ebf-ba0e-4b08f9d6a597%40apereo.org.
