What about including this directly in our default configuration (as much as we provide CAS "almost" out of the box)? Or at least, document it in the wiki...
2011/10/11 Josh Holtzman <[email protected]> > Ruben, > > The LogoutFilter is in spring-security-web jar, which contains packages > that are not imported by the kernel, and hence not available. Simply adding > "org.springframework.security.web.authentication.logout" to your list of > imports in the kernel pom.xml, then rebuilding the kernel, should give you > what you need. > > Josh > > > On Oct 11, 2011, at 2:10 AM, Rubén Pérez wrote: > > Hi again, > > I'm sorry to keep asking, but we've been trying to enable Single Sign Out > using the information you provided, but we have been unable to do so. > > - We have followed the Matterhorn wiki, so that we can authenticate > using CAS. > - We added the lines indicated in the first grey panel, to add filters > and beans to handle the sign out. We got the following error: > > ERROR (SpringSecurityConfigurationArtifactInstaller:121) - Unable to >> refresh spring security configuration file >> /opt/matterhorn/felix/conf/security/mh_default_org.xml: >> org.springframework.beans.factory.CannotLoadBeanClassException: Cannot find >> class [org.springframework.security.web.authentication.logout.LogoutFilter] >> for bean with name 'requestSingleLogoutFilter' defined in OSGi >> resource[file:/opt/matterhorn/felix/conf/security/mh_default_org.xml| >> bnd.id=994|bnd.sym=matterhorn-kernel]; nested exception is >> java.lang.ClassNotFoundException: >> org.springframework.security.web.authentication.logout.LogoutFilter not >> found from bundle [matterhorn-kernel] > > > - We have inspected the pom.xml in the matterhorn-kernel bundle, and > the .jar is correctly added to the dependencies. We have checked that the > package is effectively added to the kernel, but still we seem unable to > find > it. > > > We are a little lost on how to add these lines so that felix interprets > them correctly. Could you give us a hint? > > (Also, it's quite obvious we don't have a web.xml file to add the contents > of the second grey panel, but we are not sure where we should add that > configuration options.) > > Sorry if we are asking something too obvious. > > Thanks in advance for your help > Rubén > > 2011/10/7 Josh Holtzman <[email protected]> > >> There is a setting in the security configuration file to enable "single >> sign out" from CAS. See [1], which is from the Spring Security 3.1 docs. I >> believe we're still on 3.0.x, though it may work for Matterhorn, too. If >> not, we should upgrade. >> >> [1] >> http://static.springsource.org/spring-security/site/docs/3.1.x/reference/springsecurity-single.html#cas-singlelogout >> >> Josh >> >> On Oct 6, 2011, at 11:47 AM, Rubén Pérez wrote: >> >> Hello "matterhorners", >> >> We are putting the finishing touches to our production pilot here at >> UVigo, but we are having a problem with the Single Sign On --actually Out. >> >> We have configured out Matterhorn installation to authenticate users using >> a CAS, as part of a bigger online services platform (where Matterhorn is one >> of such services). >> >> Logging in works perfectly, but we have noticed that Matterhorn does not >> log out the user when they finish their session *from outside Matterhorn*. >> We may be logged in, and log out from our session from the CAS server >> directly. When the CAS server notifies this to Matterhorn, it gets an error >> "401 Bad Credentials". >> >> We have been trying to find the cause of this incorrect behaviour, but >> there has been no luck so far. >> >> Does somebody have an idea of what can be the problem here? >> >> >> Thanks in advance and best regards >> Rubén >> _______________________________________________ >> Matterhorn mailing list >> [email protected] >> http://lists.opencastproject.org/mailman/listinfo/matterhorn >> >> >> To unsubscribe please email >> [email protected] >> _______________________________________________ >> >> >> >> _______________________________________________ >> Matterhorn mailing list >> [email protected] >> http://lists.opencastproject.org/mailman/listinfo/matterhorn >> >> >> To unsubscribe please email >> [email protected] >> _______________________________________________ >> > > _______________________________________________ > Matterhorn mailing list > [email protected] > http://lists.opencastproject.org/mailman/listinfo/matterhorn > > > To unsubscribe please email > [email protected] > _______________________________________________ > > > > _______________________________________________ > Matterhorn mailing list > [email protected] > http://lists.opencastproject.org/mailman/listinfo/matterhorn > > > To unsubscribe please email > [email protected] > _______________________________________________ >
_______________________________________________ Matterhorn mailing list [email protected] http://lists.opencastproject.org/mailman/listinfo/matterhorn To unsubscribe please email [email protected] _______________________________________________
