Thanks Jean! I made the installation but it tried to rebuild and restart tomcat it gives me these error on tomcat logs: ------------ 2010-10-19 15:48:44,271 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - <Loaded 0 services.> 2010-10-19 15:48:46,623 WARN [org.jasig.cas.support.spnego.authentication.handler.support.JCIFSConfig ] - <found login config in system property, may overide : /opt/work/local-cas/src/main/webapp/WEB-INF/login.conf> 2010-10-19 15:48:48,266 ERROR [org.springframework.web.context.ContextLoader] - <Context initialization failed> org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'centralAuthenticationService' defined in ServletContext resource [/WEB-INF/spring-configuration/applicationContext.xml]: Cannot resolve reference to bean 'authenticationManager' while setting bean property 'authenticationManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'authenticationManager' defined in ServletContext resource [/WEB-INF/deployerConfigContext.xml]: Initialization of bean failed; nested exception is org.springframework.beans.ConversionNotSupportedException: Failed to convert property value of type 'java.util.ArrayList' to required type 'java.util.List' for property 'authenticationHandlers'; nested exception is java.lang.IllegalStateException: Cannot convert value of type [org.jasig.cas.support.spnego.authentication.handler.support.JCIFSConfig ] to required type [org.jasig.cas.authentication.handler.AuthenticationHandler] for property 'authenticationHandlers[1]': no matching editors or conversion strategy found ------------------------------------------------------------------------ -
Can you please help me to identify whats causing the error? Kind Regards, BARBOSA, Bernard Senior Administrator, System/Network MUSIC Group Macao Commercial Offshore Limited (Philippines) ROHQ IP Phone: 60651 ext 1245 Tel: +63 2 7505401 ext 1245 Email: [email protected] Web: www.music-group.com | www.behringer.com | www.bugera-amps.com youtube.com/behringer twitter.com/behringer facebook.com/behringer myspace.com/behringer flickr.com/behringerrocks J Build Teamwork J Take Ownership J Don't Waste Resources J Clean Workplace = Clean Mind J Respect Guidelines and Policies J Improve Yourself and Help Others J Don't Forget to Smile and Say Thank You This email is intended exclusively for the addressee(s) named above and may contain privileged and confidential information. If you are not (among) the intended recipient(s), you may not copy, utilize or distribute any of the information contained herein. If you have received this email in error, please notify us immediately via return email and delete the original from your mailbox. Thank you. -----Original Message----- From: jean linlin [mailto:[email protected]] Sent: Tuesday, October 19, 2010 3:14 PM To: [email protected] Subject: re:[cas-user] SPNEGO Configuration hi bernard, yes you need to install the following packages on the server where CAS is deployed : - apt-get install krb5-clients - apt-get install krb5-user - apt-get install libsasl2-modules-gssapi-mit after that, you'll find in /etc the krb5.conf file, you must change it and put your parameters. On your Active directory, use JDK 1.6.18 or higher to create your keytab : - ktab -k PORTAILAPHM.keytab -a HTTP/[email protected] after that, execute the followind commande on your AD : - Setspn -A HTTP/FQDN_Machine_Unix USER_AD In your login.conf, you must add the following lignes : ---------------------- com.sun.security.jgss.krb5.accept { com.sun.security.auth.module.Krb5LoginModule required principal="HTTP/your_...@your_domain.net" useKeyTab=true debug=true keyTab="/etc/your_Keytab.keytab" storeKey=true useTicketCache=false;nano }; -------------------- add the following jvm-option on your application server : --------------------------- -Djavax.security.auth.useSubjectCredsOnly=false -Djava.security.krb5.conf=/etc/krb5.conf -Dsun.security.krb5.debug=true -Djava.security.krb5.kdc=NOM_DC_AD -Djava.security.krb5.realm=DOMAIN.NET -Ddk.itp.debug=true -Dsun.security.jgss.debug=true ------------------------------ hope that will hepl you. -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
