Awesome – thanks Dave!

Paul Chauvet, CISSP
Information Security Officer
State University of New York at New Paltz
845-257-3828
[email protected]<mailto:[email protected]>
[emlogo]

From: [email protected] <[email protected]> On Behalf Of David Curry
Sent: Tuesday, October 1, 2019 1:15 PM
To: CAS Community <[email protected]>
Subject: Re: [cas-user] Debugging - saving (temporarily) full CAS XML response

CAUTION: Message from a non-New Paltz email server. Treat message, links, and 
attachments with extra caution.

I got this solution from Misagh way back when:

  1.  Install the SAML Chrome Panel extension in your Chrome browser.
  2.  Go to your application (or the CAS login screen if it redirects you 
there).
  3.  Right-click and select "Inspect" to open the Chrome developer console and 
click on the "SAML" tab (SAML Chrome Panel)
  4.  Log in as normal
All the SAML back-and-forth will be there. Note that SAML Chrome Panel doesn't 
resize itself with the developer console, so look for the scroll bar to see all 
of the SAML response (I forget this every time).

--Dave


--

DAVID A. CURRY, CISSP
DIRECTOR • INFORMATION SECURITY & PRIVACY
THE NEW SCHOOL • INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 646 909-4728 • [email protected]<mailto:[email protected]>


On Tue, Oct 1, 2019 at 12:28 PM Paul Chauvet 
<[email protected]<mailto:[email protected]>> wrote:
Hi all,

I’m trying to troubleshoot an issue with an external vendor using our CAS 
server to authenticate our users.  I’m doing attribute release the same way as 
I’ve done for a ton of other services, but this vendor is claiming they are not 
receiving the attribute we’re sending over (the Banner SPRIDEN ID).  The vendor 
is saying the attribute is not in the response.  They appear to be doing a CAS 
version 3 serviceValidate (based on the get request to 
/cas/p3/serviceValidate?service=https%3A%2F%2Fiss.newpaltz.edu<http://2Fiss.newpaltz.edu>&ticket=REDACTED).

What I’m wondering is if there’s a way to (temporarily) capture/log the XML 
response that is being sent back to the CAS client (the vendor)?  I have debug 
mode enabled, which is giving me information like the following, but not the 
actual response.

We’re using CAS 5.2.9 (we have our test environment upgraded to 5.3.12.1 – with 
plans on doing the same in production in the coming weeks in case there’s a 5.3 
way of doing this).

Thanks in advance for any guidance or advice on this!



Paul Chauvet, CISSP
Information Security Officer
State University of New York at New Paltz
845-257-3828
[email protected]<mailto:[email protected]>
[emlogo]

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected]<mailto:[email protected]>.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/MWHPR20MB1471D738F83EE589F1AD5EF3A79D0%40MWHPR20MB1471.namprd20.prod.outlook.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/MWHPR20MB1471D738F83EE589F1AD5EF3A79D0%40MWHPR20MB1471.namprd20.prod.outlook.com?utm_medium=email&utm_source=footer>.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected]<mailto:[email protected]>.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPVFACgXo9-eU1bGqU6B71ry6o_sN_zienhzybXm_kmvA%40mail.gmail.com<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAPVFACgXo9-eU1bGqU6B71ry6o_sN_zienhzybXm_kmvA%40mail.gmail.com?utm_medium=email&utm_source=footer>.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/MWHPR20MB1471E2691296A25605E34E03A79D0%40MWHPR20MB1471.namprd20.prod.outlook.com.

Reply via email to