A SAMLRequest should only go to the /login page. Its a request to login. If you've correctly configured the GoogleAccountsArgumentExtractor it should recognize the SAMLRequest.
-Scott On 10/5/07, Angel Q <[EMAIL PROTECTED]> wrote: > > following up my previous message: > > I have checked with all these different options: > /login > /validate > /serviceValidate > /samlValidate > /proxy > /proxyValidate > /CentralAuthenticationService > > > none of them work, some state that I have parameters missing. > As an example I get this error on the samlValidate option: > > 2007-10-05 13:37:26,385 ERROR > [org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/cas].[cas]] > - Servlet.service() para servlet cas lanzó excepción > java.lang.NullPointerException > at > org.jasig.cas.web.view.Saml10FailureResponseView.renderMergedOutputModel( > Saml10FailureResponseView.java:38) > at org.springframework.web.servlet.view.AbstractView.render( > AbstractView.java:243) > at org.springframework.web.servlet.DispatcherServlet.render( > DispatcherServlet.java:1141) > at org.springframework.web.servlet.DispatcherServlet.doDispatch( > DispatcherServlet.java:878) > at org.springframework.web.servlet.DispatcherServlet.doService( > DispatcherServlet.java:792) > at org.springframework.web.servlet.FrameworkServlet.processRequest > (FrameworkServlet.java:475) > at org.springframework.web.servlet.FrameworkServlet.doGet( > FrameworkServlet.java:430) > at javax.servlet.http.HttpServlet.service(HttpServlet.java:689) > at javax.servlet.http.HttpServlet.service(HttpServlet.java:802) > at org.jasig.cas.web.init.SafeDispatcherServlet.service( > SafeDispatcherServlet.java:115) > at > org.apache.catalina.core.ApplicationFilterChain.internalDoFilter( > ApplicationFilterChain.java:252) > at org.apache.catalina.core.ApplicationFilterChain.doFilter( > ApplicationFilterChain.java:173) > at org.apache.catalina.core.StandardWrapperValve.invoke( > StandardWrapperValve.java:213) > at org.apache.catalina.core.StandardContextValve.invoke( > StandardContextValve.java:178) > at org.apache.catalina.core.StandardHostValve.invoke( > StandardHostValve.java:126) > at org.apache.catalina.valves.ErrorReportValve.invoke( > ErrorReportValve.java:105) > at org.apache.catalina.core.StandardEngineValve.invoke( > StandardEngineValve.java:107) > at org.apache.catalina.connector.CoyoteAdapter.service( > CoyoteAdapter.java:148) > at org.apache.coyote.http11.Http11Processor.process( > Http11Processor.java:869) > at > org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection > (Http11BaseProtocol.java:664) > at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket( > PoolTcpEndpoint.java:527) > at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt( > LeaderFollowerWorkerThread.java:80) > at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run( > ThreadPool.java:684) > at java.lang.Thread.run(Thread.java:595) > > > Tnaks a lot > > Angel Quintana > > ----- Original Message ---- > From: Angel Q <[EMAIL PROTECTED]> > To: Yale CAS mailing list <[email protected]> > Sent: Friday, October 5, 2007 3:15:05 PM > Subject: Re: SAML 2.0 (Google Accounts Integration) > > Hi Scott, > > Thanks for your reply. > > Where should the SAMLRequest be sent to from the google site? > I was sending it to my sites login page, but it maybe wrong.... > > from the flow in here: > http://code.google.com/apis/apps/sso/saml_workflow_vertical.gif > where should the step 4 be ? where do I receive the SALMRequest on my cas > installation? > > Is there an automated way to register users? as is now I am preaty sure I > have them syncronized. > > Thanks a lot > > Angel > > ----- Original Message ---- > From: Scott Battaglia <[EMAIL PROTECTED]> > To: Yale CAS mailing list <[email protected]> > Sent: Friday, October 5, 2007 2:38:30 PM > Subject: Re: SAML 2.0 (Google Accounts Integration) > > I believe its the responsibility of you (or your organization) to > synchronize your user repository with Google Apps internal database. Other > than that once you've integrated CAS and Google Apps together it should > work. > > -Scott > > On 10/4/07, Angel Q <[EMAIL PROTECTED]> wrote: > > > > Hi Scott, > > > > Thanks for our time and patience :) > > > > But then, how do I inform google the username and password for the > > login? I've seen that on the > > > > org.jasig.cas.web.support.GoogleAccountsArgumentExtractor > > > > But I do not see anywhere how to feed that info to the process. If I > > have prevously logged in onto google I get access to it's tools (as in > > https://www.*google*.com/a/psosamldemo.net/*acs*) and the whole flow > > works fine (login, logout and password change page). > > > > So, what I think I am only missing is telling google who the user is. > > in > > http://code.google.com/apis/apps/sso/saml_reference_implementation_web.html > > it would be: * [EMAIL PROTECTED] > > > > Thank you so much. > > > > Angel > > > > ----- Original Message ---- > > From: Scott Battaglia < [EMAIL PROTECTED]> > > To: Yale CAS mailing list < [email protected]> > > Sent: Thursday, October 4, 2007 9:41:12 PM > > Subject: Re: SAML 2.0 (Google Accounts Integration) > > > > My comments are in-line. > > > > On 10/4/07, Angel Q <[EMAIL PROTECTED] > wrote: > > > > > > Hi Scott, > > > > > > I realize my previous email did not have enough info on my status, I > > > will try again: > > > > > > I gave been through the SAML 2.0 (Google Accounts Integration) and > > > works aparently fine, but what I need now is to store the google account > > > data and generate the session in google apps. > > > > > > > I'm not sure what google account data you mean, nor what session you > > need. Integrating Google Apps and CAS together can be accomplished on the > > page provided. There is some configuration that needs to be done in Google > > Apps (the links on the page provided previously detail that). Google Apps > > manages its own session once it receives the authentication information from > > CAS. > > > > cas-servlet.xml and the google account are configured but I feel I am > > > missing the info on where to generate the google ticket (session). > > > > > > > If someone goes to Google Apps and tries to log in it should redirect > > them to CAS and then the normal flow occurs. > > > > Also, what about "/cas/services/manage.html"? is this necessary? what > > > is it for exactly? I had some trouble until I found out it was > > > "/cas/services/j_acegi_cas_security_check" what I had to have as the 1st > > > entry LOL > > > > > > > This is an optional tool for controlling access to CAS for various > > services. > > > > -Scott > > > > Thanks a lot!! > > > > > > Angel > > > > > > > > > ----- Original Message ---- > > > From: Scott Battaglia < [EMAIL PROTECTED]> > > > To: Yale CAS mailing list <[email protected]> > > > Sent: Thursday, October 4, 2007 3:28:35 PM > > > Subject: Re: SAML 2.0 (Google Accounts Integration) > > > > > > We have documentation here: > > > > > > > > > http://www.ja-sig.org/wiki/display/CASUM/SAML+2.0+%28Google+Accounts+Integration%29 > > > > > > Hope that helps. > > > -Scott > > > > > > On 10/4/07, Angel Q < [EMAIL PROTECTED]> wrote: > > > > > > > > Hello there, > > > > > > > > I have done everything I have found on the docs to connect my CAS > > > > server to Google Apps, but I dont know how to proceed from this point. > > > > > > > > Status: > > > > CAS server setup and fed from LDAP > > > > CAS Services Management Open and wntries created. (where can I get > > > > more info on this area) > > > > Login to my site works, but, how can I define the values for Google, > > > > or where can I add what so the google apps session is started? > > > > > > > > http://www.ja-sig.org/wiki/display/CASUM/Home > > > > > > > > > > > > Thanks a lot, > > > > > > > > Angel > > > > PS: Please make it for dummies :) > > > > > > > > ------------------------------ > > > > Yahoo! oneSearch: Finally, mobile search that gives > > > > answers<http://us.rd.yahoo.com/evt=48252/*http://mobile.yahoo.com/mobileweb/onesearch?refer=1ONXIC>, > > > > not web links. > > > > > > > > _______________________________________________ > > > > Yale CAS mailing list > > > > [email protected] > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > -- > > > -Scott Battaglia > > > > > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > > > > > > > ------------------------------ > > > Looking for a deal? Find great prices on flights and > > > hotels<http://us.rd.yahoo.com/evt=47094/*http://farechase.yahoo.com/;_ylc=X3oDMTFicDJoNDllBF9TAzk3NDA3NTg5BHBvcwMxMwRzZWMDZ3JvdXBzBHNsawNlbWFpbC1uY20->with > > > Yahoo! FareChase. > > > > > > _______________________________________________ > > > Yale CAS mailing list > > > [email protected] > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > -- > > -Scott Battaglia > > > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > > > > ------------------------------ > > Fussy? Opinionated? Impossible to please? Perfect. Join Yahoo!'s user > > panel<http://us.rd.yahoo.com/evt=48516/*http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7+>and > > lay it on us. > > > > _______________________________________________ > > Yale CAS mailing list > > [email protected] > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > -- > -Scott Battaglia > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > ------------------------------ > Moody friends. Drama queens. Your life? Nope! - their life, your story. > Play Sims Stories at Yahoo! Games. > <http://us.rd.yahoo.com/evt=48224/*http://sims.yahoo.com/> > > > ------------------------------ > Need a vacation? Get great deals to amazing places > <http://us.rd.yahoo.com/evt=48256/*http://travel.yahoo.com/;_ylc=X3oDMTFhN2hucjlpBF9TAzk3NDA3NTg5BHBvcwM1BHNlYwNncm91cHMEc2xrA2VtYWlsLW5jbQ-->on > Yahoo! Travel. > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > > -- -Scott Battaglia LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
