Hello list,

I'm setting up and integrating a CAS server with an existing web
application, and I need to select an alternate login view for this
application.
More precisely, we have a CAS server, and a number of applications that
should log in via it, but for one of these applications, the view
presented by the CAS server should be different.

I have set up a CASFilter on the client application, which redirects to
the CAS server.
I have also created a login view to match the old login page from the
application, in a subfolder of the CAS webapp folder.

Is there a way to tell the Login/etc servlets to use the different
views, but still share the rest of their logic (i.e. still work as an
SSO...)?

I thought of redirecting to the view from the CASFilter, but this
obviously can't work, since the view needs to get a loginTicket from the
Login Servlet to be able to authenticate.
I tried adding a servlet mapping to the web.xml file:
<servlet-mapping>
 <servlet-name>Login</servlet-name>
 <url-pattern>/mine/login</url-pattern>
</servlet-mapping>

This allows calling the Login servlet from the subfolder, but the views
are still resolved from the CAS webapp folder:
i.e. the servlet redirects to
<context-param>
 <param-name>edu.yale.its.tp.cas.loginForm</param-name>
 <param-value>/login.jsp</param-value>
</context-param>
But this is relative to the CAS folder, not the url I called the servlet
with (i.e. https://site/cas/login.jsp, not
https://site/cas/mine/login.jsp)

I also thought of duplicating the servlet, but can this be done while
keeping the SSO functionality?

I am using esup-cas 2.1.2-1, and therefore cas-server-2.0.12c

Thanks in advance for your suggestions, 

Jonathan Winterflood 
Capgemini Brest 



This message contains information that may be privileged or confidential and is 
the property of the Capgemini Group. It is intended only for the person to whom 
it is addressed. If you are not the intended recipient,  you are not authorized 
to read, print, retain, copy, disseminate,  distribute, or use this message or 
any part thereof. If you receive this  message in error, please notify the 
sender immediately and delete all  copies of this message.
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to