It can't go before sending the TGT because the TGT is only stored in the
request.  You'd have to do it after the TGT but before redirecting to the
service.

Cheers,
Scott


On Mon, Jul 6, 2009 at 3:01 PM, Benito J. Gonzalez
<[email protected]>wrote:

> All,
>
> We are upgrading from CAS 2 to CAS 3.  I need a little direction with
> adding a view between CAS user login and sending the ticket back.
>
> The feature we want to implement verifies the user has accepted our
> Acceptable User Policy.  After a successful login in CAS2, we check an
> LDAP attribute to see if the user has accepted the policy.  If so, the
> process moves along as normal.  If not, we put up the policy in a form
> with "Accept"/"Decline" buttons.  On Accept, the LDAP attribute is
> updated and the login process continues.
>
> On to CAS 3:  In login-webflow.xml, guess my additions should come
> between the action-state "submit" and action-state
> "sendTicketGrantingTicket".  That seem right?  I was thinking an
> action-state "verifyAupAcceptance" and a view-state "viewAupForm".
> Would I create another action-state to handle the step after the user
> accepts the AUP or use "verifyAupAcceptance"?
>
> Also, just to test my understanding of webflow, I tried to simply insert
> the form in the process.  Seem to be missing some parameters.  What do I
> need?
>
> Any help would be greatly appreciated,
>
> --
> Benito J. Gonzalez
> Enterprise Web Applications Supervisor
> Information Technology Department
> University of California, Merced
> Desk: 209.228.2974
> Cell: 209.201.5052
> Email: [email protected]
>
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to