I'm trying to figure out how to fetch a user's credentials from clearPass from 
a CGI script. Currently, this CGI script is behind a CAS-authenticated 
directory (using mod_auth_cas in Apache) but that could change if needed. I'm 
trying to use the Perl AuthCAS module, but I'm not having much luck whether I 
let Apache handle the CAS authentication or not.

So far, I have been able to (outside a CAS directory) validate a service ticket 
($cas->validateST()) and get a proxy ticket ($cas->receivePT()) and validate 
the proxy ticket ($cas->validatePT()), but I'm uncertain of where to go from 
there. The proxy callback URL I set in the CGI is another CGI I wrote that only 
stores the PGT and PGT IOU in a file using $cas->storePGT(). I suspect I will 
need to add the URL for the CGI to the allowedProxyChains bean in 
deployerConfigContext.xml as well?

--
Joel Goguen
Developer
Enterprise Solutions
Integrated Technology Services
University of New Brunswick
E-mail: [email protected]
Phone: (506) 453-4872
Fax: (506) 453-3590

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to