Dear Luis, I'm having a similar issue with SPNEGO authentication with mixed-mode-authentication not set (defaults to false): 1. when I'm not on the domain i get 2 login windows: one from Windows/browser and the other from CAS after the login in the first window. If I enter my credentials in both login windows, application that is integrated with CAS successfully opens. 2. when I'm on the domain everything works as it should, i.e. I'm automatically logged-in in the system
When I enable an option mixed-model-authentication: true, I don't get Windows/browser login, only CAS login, but then SPNEGO stopped working, i.e. I always have to enter username and password whether I'm on the domain or not. Were you able to solve your issue? Best regards, Tomislav Dana nedjelja, 18. travnja 2021. u 14:21:07 UTC+2 korisnik rit...@tbitsglobal.com napisao je: > Hi Luis > > Please advise me if you were able to successfully configure the SPNEGO > authentication in CAS. I am also stuck at a weird problem - where the > negotiate token is being sent by the browser however the CAS server is not > identifying the same. > I need guidance from people who have done this earlier. > Best Regards > Ritesh > On Saturday, 6 February 2021 at 03:52:25 UTC+5:30 Luis Antonio Garcia > wrote: > >> Hi. I try it, but I get the next: >> - windows forma basic authentication >> If ok, cas web form, same credenciales. >> >> Is there a way for to get only web form? >> >> Thanks in advance >> >> >> >> Enviado desde mi Galaxy >> >> >> -------- Mensaje original -------- >> De: Misagh Moayyed <misagh....@gmail.com> >> Fecha: 5/2/21 21:03 (GMT+01:00) >> Para: CAS Community <cas-...@apereo.org> >> Asunto: [cas-user] Re: CAS flow configuration >> >> >> >> On Friday, February 5, 2021 at 11:30:49 PM UTC+4 Luis Antonio Garcia >> wrote: >> >>> My scenario ideal is the next: >>> >>> - The user try the page with CAS security >>> - CAS uses spnego por autehtication >>> - If there is an error of authentication, try by LDAP with >>> user/password >>> >>> But Now, I get the next: >>> >>> - The user try the page with CAS security >>> - CAS uses spnego por autehtication >>> - If there is an error (By example, an external user without windows >>> user), Fails. >>> >>> >> Have you tried: >> cas.authn.spnego.mixed-mode-authentication=true >> >> > "If true, does not terminate authentication and allows CAS to resume >> and fallback to normal authentication means such as uid/psw via the login >> page. If disallowed, considers spnego authentication to be final in the >> event of failures." >> >> >>> If you help me, I will send you Beer, wine or Milk, as you preferred >>> >> Not necessary, but I do appreciate the offer :) >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to a topic in the >> Google Groups "CAS Community" group. >> To unsubscribe from this topic, visit >> https://groups.google.com/a/apereo.org/d/topic/cas-user/p-0R390nJek/unsubscribe >> . >> To unsubscribe from this group and all its topics, send an email to >> cas-user+u...@apereo.org. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/32c6e9a5-3f81-4eac-bd0e-a766b0dae580n%40apereo.org >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/32c6e9a5-3f81-4eac-bd0e-a766b0dae580n%40apereo.org?utm_medium=email&utm_source=footer> >> . >> > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/99195a2b-9fbb-4bc0-941d-6817f64c10f6n%40apereo.org.
