Curtis, We use EZProxy with CAS and had a similar problem understanding how EZProxy was getting group information. What we ended up doing was using CAS to handle authentication and used an external script to handle group membership checking.
We are on EZProxy 5.1. My config in user.txt is: ::CAS,File=scriptFile.txt LoginURL https://[Our CAS login URL] ServiceValidateURL https://[Our CAS service validate URL] /CAS Then in scriptFile.txt which you put in the same directory as user.txt, you set it up similar to the info on http://www.oclc.org/us/en/support/documentation/ezproxy/usr/external.htm Ours looks like: ::External=https://[Link to your script file],post=user=^u,valid=+OK This posts the user name only, not the password to the script and since our group membership is handled by Active Directory, I check AD for this user's group membership and then either write out "+OK" if I have determined that this person may access the system or anything else will deny them access. HTH, Kris Kristopher Borchers Web Application Developer - Content Analyst Saint Xavier University Ph. 773-298-3924 [email protected] www.sxu.edu Saint Xavier University - Success with Purpose. Saint Xavier University, a Catholic institution inspired by the heritage of the Sisters of Mercy, educates men and women to search for truth, to think critically, to communicate effectively, and to serve wisely and compassionately in support of human dignity and the common good. -----Original Message----- From: Curtis Garman [mailto:[email protected]] Sent: Wednesday, January 06, 2010 1:54 PM To: [email protected] Subject: [cas-user] Casifying Exproxy Just wondering how many people are using ezproxy with cas? I'm looking at configuring it to authenticate with cas. I read the following document at http://www.oclc.org/us/en/support/documentation/ezproxy/usr/cas.htm and am a bit confused where their group information is coming from. -- Curtis Garman Web Programmer Heartland Community College -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
