You'll essentially need to re-create what the CAS filters do (which is
essentially detect whether you're (a) already logged in or (b) presenting a
ticket and then validate the ticket or redirect).

The CAS client is split into two parts: the filters and the core validation
APIs. You should be able to merely call our core validation APIs.

You might also consider placing the CAS filters in the web.xml and having
their "adapter" merely detect the presence of the CAS user in the session or
as part of the request.getRemoteUser().

Cheers,
Scott


On Fri, Mar 11, 2011 at 2:33 PM, Jon Detert
<[email protected]>wrote:

> I'd like to integrate Actuate's "Information Console" (see
> http://www.actuate.com/home/) with CAS.
>
> The "Information Console" is a java web app.  It has a "security
> extension", which their support person says is really an 'adapter',
> not an extension.  You implement it by writing a class that extends a
> class that comes with the product.  Your class must implement the
> following methods:
> authenticate()
> getExtendedCredentials()
> getPassword()
> getUserName()
> getVolume()
> isEnterprise()
>
> My question is : I have no idea how to write this class such that it
> requires CAS to authenticate.
>
> The Actuate support organization gave me an example class.  In the
> example, all of the above f()s were trivial, except authenticate(),
> which was as follows:
>
> public boolean authenticate(HttpServletRequest httpservletrequest)
>  {
>    boolean authenticated = true;
>
>    System.out.println("-----");
>    System.out.println(String.valueOf(authenticated));
>    System.out.println(this.sUserName);
>    System.out.println(this.sPassword);
>    System.out.println(this.sHomeFolder);
>    System.out.println(this.sServerUrl);
>    System.out.println(this.sVolumeName);
>    System.out.println("-----");
>
>    return authenticated;
>  }
>
> I assume that I need to do 2 basic things:
> 1) redirect http agent to my CAS server if it hasn't been there already;
> 2) validate the CAS ticket if one exists.
>
> Is that assumption correct?  If so, can someone point me to some
> example code I can modify to achieve this?
>
> Is the 'TicketValidator.java' at
>
> https://wiki.jasig.org/display/CASChttps://wiki.jasig.org/display/CASC/JA-SIG+Java+Client+Simple+WebApp+Sample/JA-SIG+Java+Client+Simple+WebApp+Sample
> an example of basic item #2 above?   Or, does it handle #1 _and_ #2?
> Or, neither?
>
> Thanks for any guidance you lend,
>
> Jon
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to