Hi,
of course it possible, I did for testing purposes. However forget to do that
in production.
to configure CAS without SSL should be enough the following:
in the file ticketGrantingTicketCookieGenerator.xml set the property
cookieSecure = false.
Of course you will have to access the http connector port instead of the
https one.


riccardo


On 3 August 2010 18:26, Rafael Ponte <[email protected]> wrote:

> Scott,
>
> Thanks for the help!
>
> So, I have some questions yet.
>
> 1) Is it really impossible to run CAS without SSL?
>
> 2) If there's not any way to run SSO without SSL so could you indicate me a
> good article/tutorial about how to configure SSO with CAS (and SSL, of
> course)?
>
> Cheers.
>
> On 2 August 2010 22:27, Scott Battaglia <[email protected]> wrote:
>
>> You should never run CAS without SSL:
>> https://wiki.jasig.org/display/CASUM/Securing+Your+New+CAS+Server
>>
>> Cheers,
>> Scott
>>
>>
>> On Mon, Aug 2, 2010 at 5:36 PM, Rafael Ponte <[email protected]>wrote:
>>
>>> Hi,
>>>
>>> I have 3 Web applications running on the same Web Container (Tomcat 6.x)
>>> and I'd like to know how i can configure Tomcat (through Valve feature?) to
>>> use CAS's Single Sign On without SSL.
>>>
>>> All of tutorials I've found on the Google are speaking about how to
>>> configure CAS SSO just through SSL connection. So I'm just want a simple way
>>> to use CAS with SSO.
>>>
>>> Best regards.
>>>
>>> --
>>> Rafael Ponte
>>> http://www.rponte.com.br
>>>
>>> --
>>> You are currently subscribed to [email protected] as: 
>>> [email protected]
>>>
>>>
>>>
>>>
>>> To unsubscribe, change settings or access archives, see 
>>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>>>
>>>
>>  --
>> You are currently subscribed to [email protected] as: 
>> [email protected]
>>
>>
>> To unsubscribe, change settings or access archives, see 
>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>>
>>
>
>
> --
> Rafael Ponte
> http://www.triadworks.com.br
>
> --
> You are currently subscribed to [email protected] as: 
> [email protected]
>
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to