We too had issues getting DegreeWorks to work with CAS, and eventually
gave up on it when the client wouldn't accept wildcard certs, and support
wasn't helping.

Since the front-end CGI is run under Apache, I'd hope it should be easy to
set up mod_auth_cas to do handle authentication and attribute release. The
front-end CGI would then need to be modified to collect the attributes
from the appropriate environment variables instead of calling the CAS
client methods as it does now. I hope to have some time to play with this
idea in the future.

Best regards,
--
Carlos.

-----Original Message-----
From: Andrew Morgan [mailto:[email protected]] 
Sent: Friday, 01 March, 2013 13:50
To: [email protected]
Subject: Re: [cas-user] DegreeWorks, Attributes, and CAS 3.4.10

On Fri, 1 Mar 2013, Ben Branch wrote:

> Hello all,
>
> We recently decided to migrate one of our older systems to DegreeWorks. 
> From the documentation they've provided us, it shows that CAS is 
> usable, and that they want some custom configurations done.  I have 
> some questions regarding this though:
>
>
> 1.  Is it possible to setup only 1 service that pulls attributes, 
> while allowing the other services I have configured through the CAS 
> not pull those attributes?  I know that their is a check box on the 
> Services Management Console that says "Ignore Attribute Management via 
> this Tool", is this what I need to enable on my other services to keep 
> them from trying to pull attributes back?
>
> 2.  It appears that the attribute configurations that they are 
> providing in their documentation is not for the most current version 
> of CAS and I'm not sure that I'm going about configuring this 
> properly.  I've tried to follow instructions on the wiki to try and 
> configure this with the proper formatting provided by the wiki, but I 
> still don't believe that I am doing this properly, since I can't get 
> my CAS to start now in my test environment.

It sounds like they want you to modify the CAS ticket validation response.

This is a pretty common modification to CAS for older clients that don't
support SAML validation.  You can read about it at:

   https://wiki.jasig.org/display/CASUM/Attributes

in the section titled "Accessing attributes using phpCAS".  BTW, phpCAS
does support SAML validation these days.  You can find other pages on this
by searching Google for "cas 2.0 attributes".

        Andy

--
You are currently subscribed to [email protected] as:
[email protected] To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to