The overlay template you're using shouldn't make any difference. It's all
about configuration.
You need to set the cas.adminPagesSecurity.ip to a regex that matches where
you want to access it from. For example:
cas.adminPagesSecurity.ip:
^192\\.168\\.(50\\.[0-9]{1,3}|1\\.[12]0)$
This says allow anything on the 192.168.50.0/24 network, plus 192.168.1.10
and 192.168.1.20.
All the other items you had looked okay to me. I'm not aware that anything
in this area changed between 5.2.x (what we're running) and 5.3.x, so that
should do it. If not, up the logging level on CAS and see what it says...
--Dave
--
DAVID A. CURRY, CISSP
*DIRECTOR • INFORMATION SECURITY & PRIVACY*
THE NEW SCHOOL • INFORMATION TECHNOLOGY
71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 646 909-4728 • david.cu...@newschool.edu
On Thu, Jun 27, 2019 at 11:21 AM 123 456 <abcdzx...@gmail.com> wrote:
> Sorry, my mistake.. I'm running CAS 5.3 with the following release:
> https://github.com/apereo/cas-gradle-overlay-template.
>
> quinta-feira, 27 de Junho de 2019 às 16:02:27 UTC+1, David Curry escreveu:
>>
>> I'm not running CAS 6, so I can't tell you specifically for that release;
>> maybe someone else can.
>>
>> --
>>
>> DAVID A. CURRY, CISSP
>> *DIRECTOR • INFORMATION SECURITY & PRIVACY*
>> THE NEW SCHOOL • INFORMATION TECHNOLOGY
>>
>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>> +1 646 909-4728 • david...@newschool.edu
>>
>>
>> On Thu, Jun 27, 2019 at 10:51 AM 123 456 <abcd...@gmail.com> wrote:
>>
>>> Still not working ..
>>>
>>> The used template is the right one? I used the following:
>>> https://github.com/apereo/cas-overlay-template
>>>
>>>
>>> quinta-feira, 27 de Junho de 2019 às 12:46:12 UTC+1, David Curry
>>> escreveu:
>>>>
>>>> My apologies... I told you to comment it out, but that's the default
>>>> value, so it's still picking it up from the default properties. You need to
>>>> set it to a pattern that matches the host(s) you want to be able to access
>>>> it from. See this page:
>>>>
>>>>
>>>> https://dacurry-tns.github.io/deploying-apereo-cas/building_server_dashboard_configure-admin-pages-properties.html
>>>>
>>>>
>>>> for some more detail.
>>>>
>>>> --Dave
>>>>
>>>>
>>>> --
>>>>
>>>> DAVID A. CURRY, CISSP
>>>> *DIRECTOR • INFORMATION SECURITY & PRIVACY*
>>>> THE NEW SCHOOL • INFORMATION TECHNOLOGY
>>>>
>>>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>>>> +1 646 909-4728 • david...@newschool.edu
>>>>
>>>>
>>>> On Thu, Jun 27, 2019 at 4:46 AM 123 456 <abcd...@gmail.com> wrote:
>>>>
>>>>> I have commented out this line, but still doesn't work. I get the
>>>>> following error message when trying to access cas/status :
>>>>>
>>>>> [image: Capture.PNG]
>>>>>
>>>>>
>>>>> quarta-feira, 26 de Junho de 2019 às 18:07:19 UTC+1, David Curry
>>>>> escreveu:
>>>>>>
>>>>>> Unless you really want it to only be accessible from the local host
>>>>>> that the server is running on, you need to comment out this line:
>>>>>>
>>>>>> cas.adminPagesSecurity.ip=127\.0\.0\.1
>>>>>>
>>>>>> Or more appropriately, set it to a value that matches the IPs you
>>>>>> want to be able to reach the status page. It's a Java regex, so you can
>>>>>> do
>>>>>> just about anything.
>>>>>>
>>>>>>
>>>>>> --
>>>>>>
>>>>>> DAVID A. CURRY, CISSP
>>>>>> *DIRECTOR • INFORMATION SECURITY & PRIVACY*
>>>>>> THE NEW SCHOOL • INFORMATION TECHNOLOGY
>>>>>>
>>>>>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>>>>>> +1 646 909-4728 • david...@newschool.edu
>>>>>>
>>>>>>
>>>>>> On Wed, Jun 26, 2019 at 12:09 PM 123 456 <abcd...@gmail.com> wrote:
>>>>>>
>>>>>>> Template: https://github.com/apereo/cas-gradle-overlay-template
>>>>>>>
>>>>>>> #=================
>>>>>>> # cas.properties
>>>>>>> #=================
>>>>>>>
>>>>>>>
>>>>>>> server.port = ****
>>>>>>> cas.server.name: https://{server}:****
>>>>>>> cas.server.prefix: https://{server}:****/cas
>>>>>>>
>>>>>>> cas.adminPagesSecurity.ip=127\.0\.0\.1
>>>>>>>
>>>>>>> logging.config: file:/etc/cas/config/log4j2.xml
>>>>>>> #cas.serviceRegistry.json.location: classpath:/etc/cas/services-repo
>>>>>>>
>>>>>>> # SSL
>>>>>>> server.ssl.enabled=true
>>>>>>> server.ssl.keyStore=file:/etc/cas/thekeystore
>>>>>>> server.ssl.keyStorePassword=changeit
>>>>>>> server.ssl.keyPassword=changeit
>>>>>>>
>>>>>>> cas.authn.accept.users=
>>>>>>>
>>>>>>> #========================================
>>>>>>> # Service Registry
>>>>>>> #========================================
>>>>>>> cas.serviceRegistry.watcherEnabled=true
>>>>>>> cas.serviceRegistry.initFromJson=true
>>>>>>> cas.serviceRegistry.json.location=classpath:/etc/cas/services
>>>>>>>
>>>>>>> #==================================
>>>>>>> # Status
>>>>>>> #==================================
>>>>>>>
>>>>>>> cas.adminPagesSecurity.actuatorEndpointsEnabled=true
>>>>>>> cas.monitor.endpoints.enabled=true
>>>>>>> endpoints.enabled=true
>>>>>>>
>>>>>>> cas.monitor.endpoints.sensitive=false
>>>>>>> endpoints.sensitive=false
>>>>>>> cas.monitor.endpoints.status.enabled=false
>>>>>>> cas.monitor.endpoints.status.sensitive=true
>>>>>>>
>>>>>>> cas.adminPagesSecurity.loginUrl=https://{server}/cas/login
>>>>>>> cas.adminPagesSecurity.service=https://{server}/cas/status
>>>>>>>
>>>>>>> cas.adminPagesSecurity.users=file:/etc/cas/config/admusers.properties
>>>>>>> cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN
>>>>>>>
>>>>>>>
>>>>>>> ***************************************
>>>>>>>
>>>>>>>
>>>>>>> #========================
>>>>>>> # admnusers.properties
>>>>>>> #========================
>>>>>>>
>>>>>>> # This file lists the users who are allowed access to the CAS
>>>>>>> /status/*
>>>>>>> # endpoints ("adminpages").
>>>>>>> #
>>>>>>> # The syntax for each line is:
>>>>>>> #
>>>>>>> #
>>>>>>> username=password,grantedAuthority[,grantedAuthority][,enabled|disabled]
>>>>>>> #
>>>>>>> casuser=notused,ROLE_ADMIN
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> ****************************************************************************
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> - Website: https://apereo.github.io/cas
>>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>>>>> - Contributions: https://goo.gl/mh7qDG
>>>>>>> ---
>>>>>>> You received this message because you are subscribed to the Google
>>>>>>> Groups "CAS Community" group.
>>>>>>> To unsubscribe from this group and stop receiving emails from it,
>>>>>>> send an email to cas-...@apereo.org.
>>>>>>> To view this discussion on the web visit
>>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/7330ab0c-ba94-4f6d-9926-18a3d8458311%40apereo.org
>>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/7330ab0c-ba94-4f6d-9926-18a3d8458311%40apereo.org?utm_medium=email&utm_source=footer>
>>>>>>> .
>>>>>>>
>>>>>> --
>>>>> - Website: https://apereo.github.io/cas
>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>>> - Contributions: https://goo.gl/mh7qDG
>>>>> ---
>>>>> You received this message because you are subscribed to the Google
>>>>> Groups "CAS Community" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>>> an email to cas-...@apereo.org.
>>>>> To view this discussion on the web visit
>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/293d4552-e7cb-4f8a-bfec-983919810979%40apereo.org
>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/293d4552-e7cb-4f8a-bfec-983919810979%40apereo.org?utm_medium=email&utm_source=footer>
>>>>> .
>>>>>
>>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to cas-...@apereo.org.
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/61fc8cc0-a87c-41c9-872e-17b30b0a6403%40apereo.org
>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/61fc8cc0-a87c-41c9-872e-17b30b0a6403%40apereo.org?utm_medium=email&utm_source=footer>
>>> .
>>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/f74ec90c-06c9-40ca-b084-2ca6d9b90492%40apereo.org
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/f74ec90c-06c9-40ca-b084-2ca6d9b90492%40apereo.org?utm_medium=email&utm_source=footer>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAP4U0Xe__spHpjDX%2B7hjc1wM5m-GSnhwX779hKDTApzmg%40mail.gmail.com.
