date:20200326

[cas-user] Tomcat Session Persistence, CAS 6.2.0 RC3

2020-03-26 Thread Todd Pratt

Hi All,

I'm using the latest version of CAS 6.2.0 RC3, Tomcat 9 and OpenJDK11.  I 
have a Redis ticket registry and using the Hazelcast Tomcat session manager 
to save sessions to an existing Hazelcast server which is running external 
to tomcat. Tomcat is saving the sessions to Hazelcast I can restart tomcat 
and other applications I have on tomcat the sessions are restored and the 
application continues like it was before the restart so I know that is 
working.   However the CAS web app it doesn't work, it makes me log back 
in.  It creates a new TGT so it's like it isn't finding the cookie however 
I checked the browser and it's there I also see it in the Redis Ticket 
Registry.  It's like CAS is keeping something in memory that is lost when I 
restart.   Any Ideas would be greatly appreciated.


Thank you,
Todd

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/0ac12477-3a2e-4591-8e35-fb70effe86e2%40apereo.org.

Re: [cas-user] Re: [Enable Oauth JWT token on CAS overlay template version 6.0]

2020-03-26 Thread Nguyen Tran Thanh Lam

Hi Sneha,
Your client must use https too.
You can use Let's encrypt free SSL for you client.
Thank you.

Vào Th 5, 26 thg 3, 2020 vào lúc 10:05 Sneha Kashyap <
sneha.kash...@healthelife.in> đã viết:

> Hi napolean,
> Thanks for your prompt reply. Yes I do realise that the CAS oauth server
> works only on https protocol.
>
> What about the client applications that connect to the server? Must they
> be a https URL as well? Ideally that is not required by oauth2.. But
> somehow my application on http does not receive back the accesstoken from
> CAS oauth server.
>
> My question to you is, have you used serviceids values as a http URL and
> successful authenticated your application?
> Foe example: serviceid: "http://example.com/.*;
>
> Does such a URL get successful authentication in CAS oauth2 server?
>
> Thanks & regards
> Sneha
>
> On Thu, 26 Mar, 2020, 6:54 am Nguyen Tran Thanh Lam, <
> naphaluan211...@gmail.com> wrote:
>
>> Hi Sneha,
>> I know this.
>> You must use https for Oauth2
>> Thank you
>>
>> Vào Th 5, 26 thg 3, 2020 vào lúc 01:52 Sneha Kashyap <
>> sneha.kash...@healthelife.in> đã viết:
>>
>>> Hi napolean,
>>> Do you have any idea if there is restriction by CAS oauth2 server to use
>>> http urls instead of https urls in service id to be authenticated?
>>>
>>> Thanks sneha
>>>
>>> On Mon, 23 Mar, 2020, 10:37 pm Sneha, 
>>> wrote:
>>>
 Hello All,

 Replying on this post as it is the most recent post on OAuth
 authentication.I am back working on the project again.

 Having gotten the oauth2 with JWT sample code working on CAS 6.1
 overlay I find that It works on service ids with https URLs but on
 configuring  http URLs I am unable to obtain the JWT or access token with a
 successful authentication and code generated. I am getting the following
 output on debug logs on the server side:



 my json registration:

 {
   "@class" :
 "org.apereo.cas.support.oauth.services.OAuthRegisteredService",
   "clientId": "exampleOauthClient",
   "clientSecret": "test1",
   "serviceId": "^http://localhost:/.*;,
 "name": "oauth2test",
 "id": 6,
   "supportedGrantTypes": [ "java.util.HashSet", [ "authorization_code"
 ] ],
   "supportedResponseTypes": [ "java.util.HashSet", [ "code" ] ]
   "attributeReleasePolicy": {
 "@class":
 "org.apereo.cas.services.ReturnAllAttributeReleasePolicy",
 "principalAttributesRepository": {
 "@class":
 "org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository"
 },
},
 "jwtAccessToken": true,
 "usernameAttributeProvider": {
 "@class":
 "org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider",
 "usernameAttribute": "username"
   }
 }


 On the client side, i receive a 403 forbidden status or a 401 :

 Not sure what I am missing out.. Or does the CAS OAuth server allow
 only clients with https urls to participate in SSO?
 Any inputs regarding this will be of great help..

 Thanks
 Sneha
 On Tuesday, March 10, 2020 at 3:01:34 PM UTC+5:30, Napoleon Ponaparte
 wrote:
>
> Hi Mr Gandhi,
> You must use CAS version at least 6.1.x.
> The key will generate in log of CAS, when you build it.
> Please try again.
> Thanks
>
> Vào Th 3, 10 thg 3, 2020 vào lúc 16:15 Gandhi 
> đã viết:
>
>> I'm facing the same issue with 5.2.X version of CAS. i'm having
>> trouble to enable JWT for OIDC related flows.
>>
>> Can you please post any findings here, in case if you have solved
>> this?
>>
>> On Thursday, February 13, 2020 at 8:48:02 AM UTC+5:30, Napoleon
>> Ponaparte wrote:
>>>
>>> Hi all,
>>> I have trouble in enable Oauth JWT token on CAS overlay template
>>> version 6.0.
>>>
>>> I will sponsor 10$, if anyone help me in this case.
>>>
>>> I tried two tutorial on two link:
>>>
>>> 1) Link 1
>>> JWT Of All Things With CAS
>>> https://apereo.github.io/2017/10/17/cas-jwt-authn-with-duo/
>>> But I have a trouble with cas shell.
>>> I have described it here (
>>> https://stackoverflow.com/questions/60186080/generate-jwt-on-cas-apereo-version-6-0-for-oauth-jwt-access-tokens
>>> )
>>> 2) Link 2
>>> Apereo CAS - OAuth JWT Access Tokens But it uses for cas version
>>> 6.2.x.
>>> And this properties can't use
>>>
>>> cas.authn.oauth.access-token.crypto.encryption.key=cas.authn.oauth.access-token.crypto.signing.key=
>>> cas.authn.oauth.access-token.crypto.enabled=falsecas.authn.oauth.access-token.crypto.signing-enabled=falsecas.authn.oauth.access-token.crypto.encryption-enabled=false
>>>
>>> Thank you.
>>>
>>>
>>>
>>>
>>>
>> *This mail contains confidential information intended only for the
>> individual(s)

[cas-user] Re: cas-management 6.1 RC4 turn off version control

2020-03-26 Thread JC

I know this topic is five months old, but I wanted to add what I discovered 
so that it will be here if someone else finds this in a search, like I did.

I have found that the documentation that shows the two properties' syntax 
referenced is wrong, unsurprisingly. The values that worked for me in the 
6.1.5 management web app are:

mgmt.versionControl.enabled=false
mgmt.delegated.enabled=false

However, even with version control disabled, the management app *still* 
wants to put stuff in '/etc/cas/services-repo'. The following property 
changes that:

mgmt.versionControl.servicesRepo=file:/path/to/services

Now the management app saves *new *services in the directory I want, but 
doesn't show existing services. This whole version control thing is a real 
pain.

J

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/c998d9e6-887c-42ac-a774-72d1067f6a9c%40apereo.org.

Re: [cas-user] Re: [Enable Oauth JWT token on CAS overlay template version 6.0]

2020-03-26 Thread Sneha Kashyap

Hi Ron,
Thanks for your reply.

 Our REST application behind a Kong gateway is using http. The public
exposed url however is a https URL.

I do not see any such documentation that the serviceid is required to be a
https URL for successful authentication. Usually no such restrictions are
specified by the oauth servers..

Still i have no clarity and am unable to debug to code to findout what the
issue is as the same client application works well when on https and
doesn't when on Http protocol..

Thanks
Sneha

On Thu, 26 Mar, 2020, 9:16 pm Ray Bon,  wrote:

> Sneha,
>
> I have not used oauth2 and do not know how that protocol is handled in
> cas. I do know that other CAS protocols required back channel
> communication, and that is always https.
>
> The real question is, why, in this day and age, do you want to use http?
>
> For testing it is easy to create your own certificates. For external
> sites, https://letsencrypt.org/
>
> Ray
>
> On Thu, 2020-03-26 at 08:35 +0530, Sneha Kashyap wrote:
>
> Hi napolean,
> Thanks for your prompt reply. Yes I do realise that the CAS oauth server
> works only on https protocol.
>
> What about the client applications that connect to the server? Must they
> be a https URL as well? Ideally that is not required by oauth2.. But
> somehow my application on http does not receive back the accesstoken from
> CAS oauth server.
>
> My question to you is, have you used serviceids values as a http URL and
> successful authenticated your application?
> Foe example: serviceid: "http://example.com/.*;
>
> Does such a URL get successful authentication in CAS oauth2 server?
>
> Thanks & regards
> Sneha
>
> On Thu, 26 Mar, 2020, 6:54 am Nguyen Tran Thanh Lam, <
> naphaluan211...@gmail.com> wrote:
>
> Hi Sneha,
> I know this.
> You must use https for Oauth2
> Thank you
>
> Vào Th 5, 26 thg 3, 2020 vào lúc 01:52 Sneha Kashyap <
> sneha.kash...@healthelife.in> đã viết:
>
> Hi napolean,
> Do you have any idea if there is restriction by CAS oauth2 server to use
> http urls instead of https urls in service id to be authenticated?
>
> Thanks sneha
>
> On Mon, 23 Mar, 2020, 10:37 pm Sneha, 
> wrote:
>
> Hello All,
>
> Replying on this post as it is the most recent post on OAuth
> authentication.I am back working on the project again.
>
> Having gotten the oauth2 with JWT sample code working on CAS 6.1 overlay I
> find that It works on service ids with https URLs but on configuring  http
> URLs I am unable to obtain the JWT or access token with a successful
> authentication and code generated. I am getting the following output on
> debug logs on the server side:
>
>
>
> my json registration:
>
> {
>   "@class" :
> "org.apereo.cas.support.oauth.services.OAuthRegisteredService",
>   "clientId": "exampleOauthClient",
>   "clientSecret": "test1",
>   "serviceId": "^http://localhost:/.*;,
> "name": "oauth2test",
> "id": 6,
>   "supportedGrantTypes": [ "java.util.HashSet", [ "authorization_code" ] ],
>   "supportedResponseTypes": [ "java.util.HashSet", [ "code" ] ]
>   "attributeReleasePolicy": {
> "@class":
> "org.apereo.cas.services.ReturnAllAttributeReleasePolicy",
> "principalAttributesRepository": {
> "@class":
> "org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository"
> },
>},
> "jwtAccessToken": true,
> "usernameAttributeProvider": {
> "@class":
> "org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider",
> "usernameAttribute": "username"
>   }
> }
>
>
> On the client side, i receive a 403 forbidden status or a 401 :
>
> Not sure what I am missing out.. Or does the CAS OAuth server allow only
> clients with https urls to participate in SSO?
> Any inputs regarding this will be of great help..
>
> Thanks
> Sneha
> On Tuesday, March 10, 2020 at 3:01:34 PM UTC+5:30, Napoleon Ponaparte
> wrote:
>
> Hi Mr Gandhi,
> You must use CAS version at least 6.1.x.
> The key will generate in log of CAS, when you build it.
> Please try again.
> Thanks
>
> Vào Th 3, 10 thg 3, 2020 vào lúc 16:15 Gandhi 
> đã viết:
>
> I'm facing the same issue with 5.2.X version of CAS. i'm having trouble to
> enable JWT for OIDC related flows.
>
> Can you please post any findings here, in case if you have solved this?
>
> On Thursday, February 13, 2020 at 8:48:02 AM UTC+5:30, Napoleon Ponaparte
> wrote:
>
> Hi all,
> I have trouble in enable Oauth JWT token on CAS overlay template version
> 6.0.
>
> I will sponsor 10$, if anyone help me in this case.
>
> I tried two tutorial on two link:
>
> 1) Link 1
> JWT Of All Things With CAS
> https://apereo.github.io/2017/10/17/cas-jwt-authn-with-duo/
> But I have a trouble with cas shell.
> I have described it here (
> https://stackoverflow.com/questions/60186080/generate-jwt-on-cas-apereo-version-6-0-for-oauth-jwt-access-tokens
> )
> 2) Link 2
> Apereo CAS - OAuth JWT Access Tokens But it uses for cas version 6.2.x.
> And this properties can't use
>
>

Re: [cas-user] Cas dont redirect to the application after succesful logged in

2020-03-26 Thread Ray Bon

You will not see the call to cas/validate in the browser network panel, just 
the redirect back to the service (which I do not see in the images). The 
validation step is done in the background. You will have to look at server 
(tomcat, apache, etc.) access logs to see if the requests arrive.

I apologize for not be more clear earlier.

Since cas is hanging, is it possible that the service definition is incorrect. 
Does the service in the image ever work?

Compare the service definitions for both services.

Ray

On Thu, 2020-03-26 at 00:54 -0700, MIPM GmbH wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.


 I checked the network panel. You can see attached the results. It seems like 
the redirect to validate is missing.
Am Mittwoch, 25. März 2020 16:55:37 UTC+1 schrieb rbon:
My guess would be the service did not or could not complete the log in process.
ST-9 was validated but ST-8 was not. After a ST is created, cas redirects to 
the service. You can check this in your browser's network panel in developer 
tools. The service needs to contact cas to validate the ticket, this is done 
directly, not through the browser.

Ray

On Wed, 2020-03-25 at 07:46 -0700, MIPM GmbH wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.

Hello,

My CAS is on Version 6.2.0-RC3. Most of the time CAS works just fine but 
sometimes the casified application stucks and firefox shows the message "wait 
for cas".  To fix that i restart cas everytime.
This problem seem to appear whenever I use two diffrent browser at the same 
client on that cassifed application. I figured out that the parameter ticket is 
missing in the url.
I hope someone can help me.
You find attached cas.properties and the log. I have tried to reproduce the 
problem. The log isnt very helpful either. It just shows that cas stopped 
working at "Service ticket created".
Please let me know if you need further informations




--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | rb...@uvic.ca

I respectfully acknowledge that my place of work is located within the 
ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
WSÁNEĆ Nations.


--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I respectfully acknowledge that my place of work is located within the 
ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
WSÁNEĆ Nations.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/e5ec3a4897a3fd8b73ae3bd868a0fc06f0cb1ed9.camel%40uvic.ca.

RE: [cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

2020-03-26 Thread spfma.tech

Yes, it is not very helpful.

I started to study it two days ago as my company wants to deploy some CASified 
stuff, so I have to invest some time on it.

I had to guess I had to switch to another version to get a non-empty views 
list, it was mostly trial/error.

 

I hope I will be able to guess other things I need and have something working !

 

 

 

De : cas-user@apereo.org  De la part de JC
Envoyé : jeudi 26 mars 2020 16:11
À : CAS Community 
Objet : Re: [cas-user] 'No resources can be found matching ' 
using gradlew getResource-PresourceName=

 

That works, thanks. I verified that it works for the messages files as well.

 

Apereo's documentation--and blog instructions--leave a lot to be desired...

 

 

J

 


On Thursday, March 26, 2020 at 10:37:39 AM UTC-4, spfm...@e.mail.fr 
  wrote:

Hi,

 

Don’t put the « .html » extension : 

$ ./gradlew getResource -PresourceName=header

 

Regards

 

De : cas-...@apereo.org> De 
la part de JC
Envoyé : jeudi 26 mars 2020 15:14
À : CAS Community  >
Objet : [cas-user] 'No resources can be found matching ' using 
gradlew getResource-PresourceName=

 

I am trying to customize CAS 6.1.5, but when I attempt to extract a view, 
gradle returns "No resources could be found matching '. I have 
tried with multiple resources, but it returns the same response every time. I 
am using this as a guide: 
https://apereo.github.io/2019/01/07/cas61-gettingstarted-overlay/. I tried 
cleaning and rebuilding, but that did not help.

 

$ ./gradlew listTemplateViews

> Task :listTemplateViews
401.html
403.html
404.html
405.html
423.html
accepttoQRCode.html
casAcceptableUsagePolicyView.html
casAccepttoRegistrationView.html
casAccountDisabledView.html
casAccountLockedView.html
casAdminLoginView.html
casAuthenticationBlockedView.html
casAuthyLoginView.html
casBadHoursView.html
casBadWorkstationView.html
casCompositeMfaProviderSelectionView.html
casConfirmLogoutView.html
casConfirmView.html
casConsentView.html
casDelegatedAuthnErrorView.html
casDuoLoginView.html
casExpiredPassView.html
casForgotUsernameSendInfoView.html
casForgotUsernameSentInfoView.html
casGenericSuccessView.html
casGoogleAuthenticatorLoginView.html
casGoogleAuthenticatorRegistrationView.html
casGuaDisplayUserGraphicsView.html
casGuaGetUserIdView.html
casInterruptView.html
casLoginMessageView.html
casLoginView.html
casLogoutView.html
casMfaDeniedView.html
casMfaRegisterDeviceView.html
casMfaUnavailableView.html
casMustChangePassView.html
casOpenIdAssociationSuccessView.html
casOpenIdServiceFailureView.html
casOpenIdServiceSuccessView.html
casPac4jStopWebflow.html
casPasswordUpdateSuccessView.html
casPasswordlessDisplayView.html
casPasswordlessGetUserIdView.html
casPostResponseView.html
casPropagateLogoutView.html
casProxyFailureView.html
casProxySuccessView.html
casRadiusLoginView.html
casResetPasswordErrorView.html
casResetPasswordSendInstructionsView.html
casResetPasswordSentInstructionsView.html
casResetPasswordVerifyQuestionsView.html
casRiskAuthenticationBlockedView.html
casSamlIdPDiscoveryView.html
casServiceErrorView.html
casServiceValidationFailure.html
casServiceValidationFailure.html
casServiceValidationSuccess.html
casServiceValidationSuccess.html
casSimpleMfaLoginView.html
casSurrogateAuthnListView.html
casSwivelLoginView.html
casU2fLoginView.html
casU2fRegistrationView.html
casWsFedStopWebflow.html
casYubiKeyLoginView.html
casYubiKeyRegistrationView.html
confirm.html
confirm.html
deviceCodeApproval.html
deviceCodeApproved.html
error.html
footer.html
header.html
layout.html
loginProviders.html
loginform.html
loginsidebar.html
pmlinks.html
pwdupdateform.html
scripts.html
serviceui.html
sessionStaleMismatchError.html
user.html

Deprecated Gradle features were used in this build, making it incompatible with 
Gradle 6.0.
Use '--warning-mode all' to show the individual deprecation warnings.
See 
https://docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 12s
5 actionable tasks: 1 executed, 4 up-to-date

$ ./gradlew getResource -PresourceName=header.html

> Task :getResource
No resources could be found matching header.html

Deprecated Gradle features were used in this build, making it incompatible with 
Gradle 6.0.
Use '--warning-mode all' to show the individual deprecation warnings.
See 
https://docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 10s
5 actionable tasks: 1 executed, 4 up-to-date

 

Any ideas? 

 

Thanks

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-...@apereo.org  .
To view this discussion on the web visit

Re: [cas-user] Re: [Enable Oauth JWT token on CAS overlay template version 6.0]

2020-03-26 Thread Ray Bon

Sneha,

I have not used oauth2 and do not know how that protocol is handled in cas. I
do know that other CAS protocols required back channel communication, and that
is always https.

The real question is, why, in this day and age, do you want to use http?

For testing it is easy to create your own certificates. For external sites,
https://letsencrypt.org/

Ray

On Thu, 2020-03-26 at 08:35 +0530, Sneha Kashyap wrote:
Hi napolean,
Thanks for your prompt reply. Yes I do realise that the CAS oauth server works
only on https protocol.

What about the client applications that connect to the server? Must they be a
https URL as well? Ideally that is not required by oauth2.. But somehow my
application on http does not receive back the accesstoken from CAS oauth server.

My question to you is, have you used serviceids values as a http URL and
successful authenticated your application?
Foe example: serviceid: "http://example.com/.*;

Does such a URL get successful authentication in CAS oauth2 server?

Thanks & regards
Sneha

On Thu, 26 Mar, 2020, 6:54 am Nguyen Tran Thanh Lam,
mailto:naphaluan211...@gmail.com>> wrote:
Hi Sneha,
I know this.
You must use https for Oauth2
Thank you

Vào Th 5, 26 thg 3, 2020 vào lúc 01:52 Sneha Kashyap
mailto:sneha.kash...@healthelife.in>> đã viết:
Hi napolean,
Do you have any idea if there is restriction by CAS oauth2 server to use http
urls instead of https urls in service id to be authenticated?

Thanks sneha

On Mon, 23 Mar, 2020, 10:37 pm Sneha,
mailto:sneha.kash...@healthelife.in>> wrote:
Hello All,

Replying on this post as it is the most recent post on OAuth authentication.I
am back working on the project again.

Having gotten the oauth2 with JWT sample code working on CAS 6.1 overlay I find
that It works on service ids with https URLs but on configuring http URLs I am
unable to obtain the JWT or access token with a successful authentication and
code generated. I am getting the following output on debug logs on the server
side:

[cid:0804684d777fd1aeabef9447ddf706c1c0bc629c.camel@uvic.ca]

my json registration:

{
"@class" : "org.apereo.cas.support.oauth.services.OAuthRegisteredService",
"clientId": "exampleOauthClient",
"clientSecret": "test1",
"serviceId": "^http://localhost:/.*;,
"name": "oauth2test",
"id": 6,
"supportedGrantTypes": [ "java.util.HashSet", [ "authorization_code" ] ],
"supportedResponseTypes": [ "java.util.HashSet", [ "code" ] ]
"attributeReleasePolicy": {
"@class": "org.apereo.cas.services.ReturnAllAttributeReleasePolicy",
"principalAttributesRepository": {
"@class":
"org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository"
},
},
"jwtAccessToken": true,
"usernameAttributeProvider": {
"@class":
"org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider",
"usernameAttribute": "username"
}
}

On the client side, i receive a 403 forbidden status or a 401 :

[cid:83d864b591938b491b4ba9ffa0f749f28a8648e0.camel@uvic.ca]
Not sure what I am missing out.. Or does the CAS OAuth server allow only
clients with https urls to participate in SSO?
Any inputs regarding this will be of great help..

Thanks
Sneha
On Tuesday, March 10, 2020 at 3:01:34 PM UTC+5:30, Napoleon Ponaparte wrote:
Hi Mr Gandhi,
You must use CAS version at least 6.1.x.
The key will generate in log of CAS, when you build it.
Please try again.
Thanks

Vào Th 3, 10 thg 3, 2020 vào lúc 16:15 Gandhi đã viết:
I'm facing the same issue with 5.2.X version of CAS. i'm having trouble to
enable JWT for OIDC related flows.

Can you please post any findings here, in case if you have solved this?

On Thursday, February 13, 2020 at 8:48:02 AM UTC+5:30, Napoleon Ponaparte wrote:
Hi all,
I have trouble in enable Oauth JWT token on CAS overlay template version 6.0.

I will sponsor 10$, if anyone help me in this case.

I tried two tutorial on two link:

1) Link 1
JWT Of All Things With CAS
https://apereo.github.io/2017/10/17/cas-jwt-authn-with-duo/
But I have a trouble with cas shell.
I have described it here
(https://stackoverflow.com/questions/60186080/generate-jwt-on-cas-apereo-version-6-0-for-oauth-jwt-access-tokens)
2) Link 2
Apereo CAS - OAuth JWT Access Tokens
But it uses for cas version 6.2.x.
And this properties can't use

cas.authn.oauth.access-token.crypto.encryption.key

cas.authn.oauth.access-token.crypto.signing.key

cas.authn.oauth.access-token.crypto.enabled=false

cas.authn.oauth.access-token.crypto.signing-enabled

false

cas.authn.oauth.access-token.crypto.encryption-enabled

false

Thank you.

This mail contains confidential information intended only for the individual(s)
named. If you’re not the named addressee, don’t disseminate, distribute or copy
this e-mail. Please notify the sender immediately and delete it from your
system.If you wish not to receive such e-mails you may reply with text
“Unsubscribe”.

--
- Website:

Re: [cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

2020-03-26 Thread JC

That works, thanks. I verified that it works for the messages files as well.

Apereo's documentation--and blog instructions--leave a lot to be desired...


J


On Thursday, March 26, 2020 at 10:37:39 AM UTC-4, spfm...@e.mail.fr wrote:
>
> Hi,
>
>  
>
> Don’t put the « .html » extension : 
>
> $ ./gradlew getResource -PresourceName=header
>
>  
>
> Regards
>
>  
>
> *De :* cas-...@apereo.org  > 
> *De la part de* JC
> *Envoyé :* jeudi 26 mars 2020 15:14
> *À :* CAS Community >
> *Objet :* [cas-user] 'No resources can be found matching ' 
> using gradlew getResource-PresourceName=
>
>  
>
> I am trying to customize CAS 6.1.5, but when I attempt to extract a view, 
> gradle returns "No resources could be found matching '. I 
> have tried with multiple resources, but it returns the same response every 
> time. I am using this as a guide: 
> https://apereo.github.io/2019/01/07/cas61-gettingstarted-overlay/. I 
> tried cleaning and rebuilding, but that did not help.
>
>  
>
> $ ./gradlew listTemplateViews
>
> > Task :listTemplateViews
> 401.html
> 403.html
> 404.html
> 405.html
> 423.html
> accepttoQRCode.html
> casAcceptableUsagePolicyView.html
> casAccepttoRegistrationView.html
> casAccountDisabledView.html
> casAccountLockedView.html
> casAdminLoginView.html
> casAuthenticationBlockedView.html
> casAuthyLoginView.html
> casBadHoursView.html
> casBadWorkstationView.html
> casCompositeMfaProviderSelectionView.html
> casConfirmLogoutView.html
> casConfirmView.html
> casConsentView.html
> casDelegatedAuthnErrorView.html
> casDuoLoginView.html
> casExpiredPassView.html
> casForgotUsernameSendInfoView.html
> casForgotUsernameSentInfoView.html
> casGenericSuccessView.html
> casGoogleAuthenticatorLoginView.html
> casGoogleAuthenticatorRegistrationView.html
> casGuaDisplayUserGraphicsView.html
> casGuaGetUserIdView.html
> casInterruptView.html
> casLoginMessageView.html
> casLoginView.html
> casLogoutView.html
> casMfaDeniedView.html
> casMfaRegisterDeviceView.html
> casMfaUnavailableView.html
> casMustChangePassView.html
> casOpenIdAssociationSuccessView.html
> casOpenIdServiceFailureView.html
> casOpenIdServiceSuccessView.html
> casPac4jStopWebflow.html
> casPasswordUpdateSuccessView.html
> casPasswordlessDisplayView.html
> casPasswordlessGetUserIdView.html
> casPostResponseView.html
> casPropagateLogoutView.html
> casProxyFailureView.html
> casProxySuccessView.html
> casRadiusLoginView.html
> casResetPasswordErrorView.html
> casResetPasswordSendInstructionsView.html
> casResetPasswordSentInstructionsView.html
> casResetPasswordVerifyQuestionsView.html
> casRiskAuthenticationBlockedView.html
> casSamlIdPDiscoveryView.html
> casServiceErrorView.html
> casServiceValidationFailure.html
> casServiceValidationFailure.html
> casServiceValidationSuccess.html
> casServiceValidationSuccess.html
> casSimpleMfaLoginView.html
> casSurrogateAuthnListView.html
> casSwivelLoginView.html
> casU2fLoginView.html
> casU2fRegistrationView.html
> casWsFedStopWebflow.html
> casYubiKeyLoginView.html
> casYubiKeyRegistrationView.html
> confirm.html
> confirm.html
> deviceCodeApproval.html
> deviceCodeApproved.html
> error.html
> footer.html
> header.html
> layout.html
> loginProviders.html
> loginform.html
> loginsidebar.html
> pmlinks.html
> pwdupdateform.html
> scripts.html
> serviceui.html
> sessionStaleMismatchError.html
> user.html
>
> Deprecated Gradle features were used in this build, making it 
> incompatible with Gradle 6.0.
> Use '--warning-mode all' to show the individual deprecation warnings.
> See 
> https://docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings
>
> BUILD SUCCESSFUL in 12s
> 5 actionable tasks: 1 executed, 4 up-to-date
>
> $ ./gradlew getResource -PresourceName=header.html
>
> > Task :getResource
> No resources could be found matching header.html
>
> Deprecated Gradle features were used in this build, making it 
> incompatible with Gradle 6.0.
> Use '--warning-mode all' to show the individual deprecation warnings.
> See 
> https://docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings
>
> BUILD SUCCESSFUL in 10s
> 5 actionable tasks: 1 executed, 4 up-to-date
>
>  
>
> Any ideas? 
>
>  
>
> Thanks
>
> -- 
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> --- 
> You received this message because you are subscribed to the Google Groups 
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to cas-...@apereo.org .
> To view this discussion on the web visit 
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/cc659b82-2e6c-408f-9597-e2ee30187e3b%40apereo.org
>  
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter

RE: [cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

2020-03-26 Thread spfma.tech

Hi,

 

Don’t put the « .html » extension : 

$ ./gradlew getResource -PresourceName=header

 

Regards

 

De : cas-user@apereo.org  De la part de JC
Envoyé : jeudi 26 mars 2020 15:14
À : CAS Community 
Objet : [cas-user] 'No resources can be found matching ' using 
gradlew getResource-PresourceName=

 

I am trying to customize CAS 6.1.5, but when I attempt to extract a view, 
gradle returns "No resources could be found matching '. I have 
tried with multiple resources, but it returns the same response every time. I 
am using this as a guide: 
https://apereo.github.io/2019/01/07/cas61-gettingstarted-overlay/. I tried 
cleaning and rebuilding, but that did not help.

 

$ ./gradlew listTemplateViews

> Task :listTemplateViews
401.html
403.html
404.html
405.html
423.html
accepttoQRCode.html
casAcceptableUsagePolicyView.html
casAccepttoRegistrationView.html
casAccountDisabledView.html
casAccountLockedView.html
casAdminLoginView.html
casAuthenticationBlockedView.html
casAuthyLoginView.html
casBadHoursView.html
casBadWorkstationView.html
casCompositeMfaProviderSelectionView.html
casConfirmLogoutView.html
casConfirmView.html
casConsentView.html
casDelegatedAuthnErrorView.html
casDuoLoginView.html
casExpiredPassView.html
casForgotUsernameSendInfoView.html
casForgotUsernameSentInfoView.html
casGenericSuccessView.html
casGoogleAuthenticatorLoginView.html
casGoogleAuthenticatorRegistrationView.html
casGuaDisplayUserGraphicsView.html
casGuaGetUserIdView.html
casInterruptView.html
casLoginMessageView.html
casLoginView.html
casLogoutView.html
casMfaDeniedView.html
casMfaRegisterDeviceView.html
casMfaUnavailableView.html
casMustChangePassView.html
casOpenIdAssociationSuccessView.html
casOpenIdServiceFailureView.html
casOpenIdServiceSuccessView.html
casPac4jStopWebflow.html
casPasswordUpdateSuccessView.html
casPasswordlessDisplayView.html
casPasswordlessGetUserIdView.html
casPostResponseView.html
casPropagateLogoutView.html
casProxyFailureView.html
casProxySuccessView.html
casRadiusLoginView.html
casResetPasswordErrorView.html
casResetPasswordSendInstructionsView.html
casResetPasswordSentInstructionsView.html
casResetPasswordVerifyQuestionsView.html
casRiskAuthenticationBlockedView.html
casSamlIdPDiscoveryView.html
casServiceErrorView.html
casServiceValidationFailure.html
casServiceValidationFailure.html
casServiceValidationSuccess.html
casServiceValidationSuccess.html
casSimpleMfaLoginView.html
casSurrogateAuthnListView.html
casSwivelLoginView.html
casU2fLoginView.html
casU2fRegistrationView.html
casWsFedStopWebflow.html
casYubiKeyLoginView.html
casYubiKeyRegistrationView.html
confirm.html
confirm.html
deviceCodeApproval.html
deviceCodeApproved.html
error.html
footer.html
header.html
layout.html
loginProviders.html
loginform.html
loginsidebar.html
pmlinks.html
pwdupdateform.html
scripts.html
serviceui.html
sessionStaleMismatchError.html
user.html

Deprecated Gradle features were used in this build, making it incompatible with 
Gradle 6.0.
Use '--warning-mode all' to show the individual deprecation warnings.
See 
https://docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 12s
5 actionable tasks: 1 executed, 4 up-to-date

$ ./gradlew getResource -PresourceName=header.html

> Task :getResource
No resources could be found matching header.html

Deprecated Gradle features were used in this build, making it incompatible with 
Gradle 6.0.
Use '--warning-mode all' to show the individual deprecation warnings.
See 
https://docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 10s
5 actionable tasks: 1 executed, 4 up-to-date

 

Any ideas? 

 

Thanks

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org  .
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/cc659b82-2e6c-408f-9597-e2ee30187e3b%40apereo.org
 

 .

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/cdb601d6037c%24158b0a30%2440a11e90%24%40e.mail.fr.

[cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

2020-03-26 Thread JC

I am trying to customize CAS 6.1.5, but when I attempt to extract a view, 
gradle returns "No resources could be found matching '. I 
have tried with multiple resources, but it returns the same response every 
time. I am using this as a guide: 
https://apereo.github.io/2019/01/07/cas61-gettingstarted-overlay/. I tried 
cleaning and rebuilding, but that did not help.

$ ./gradlew listTemplateViews

> Task :listTemplateViews
401.html
403.html
404.html
405.html
423.html
accepttoQRCode.html
casAcceptableUsagePolicyView.html
casAccepttoRegistrationView.html
casAccountDisabledView.html
casAccountLockedView.html
casAdminLoginView.html
casAuthenticationBlockedView.html
casAuthyLoginView.html
casBadHoursView.html
casBadWorkstationView.html
casCompositeMfaProviderSelectionView.html
casConfirmLogoutView.html
casConfirmView.html
casConsentView.html
casDelegatedAuthnErrorView.html
casDuoLoginView.html
casExpiredPassView.html
casForgotUsernameSendInfoView.html
casForgotUsernameSentInfoView.html
casGenericSuccessView.html
casGoogleAuthenticatorLoginView.html
casGoogleAuthenticatorRegistrationView.html
casGuaDisplayUserGraphicsView.html
casGuaGetUserIdView.html
casInterruptView.html
casLoginMessageView.html
casLoginView.html
casLogoutView.html
casMfaDeniedView.html
casMfaRegisterDeviceView.html
casMfaUnavailableView.html
casMustChangePassView.html
casOpenIdAssociationSuccessView.html
casOpenIdServiceFailureView.html
casOpenIdServiceSuccessView.html
casPac4jStopWebflow.html
casPasswordUpdateSuccessView.html
casPasswordlessDisplayView.html
casPasswordlessGetUserIdView.html
casPostResponseView.html
casPropagateLogoutView.html
casProxyFailureView.html
casProxySuccessView.html
casRadiusLoginView.html
casResetPasswordErrorView.html
casResetPasswordSendInstructionsView.html
casResetPasswordSentInstructionsView.html
casResetPasswordVerifyQuestionsView.html
casRiskAuthenticationBlockedView.html
casSamlIdPDiscoveryView.html
casServiceErrorView.html
casServiceValidationFailure.html
casServiceValidationFailure.html
casServiceValidationSuccess.html
casServiceValidationSuccess.html
casSimpleMfaLoginView.html
casSurrogateAuthnListView.html
casSwivelLoginView.html
casU2fLoginView.html
casU2fRegistrationView.html
casWsFedStopWebflow.html
casYubiKeyLoginView.html
casYubiKeyRegistrationView.html
confirm.html
confirm.html
deviceCodeApproval.html
deviceCodeApproved.html
error.html
footer.html
header.html
layout.html
loginProviders.html
loginform.html
loginsidebar.html
pmlinks.html
pwdupdateform.html
scripts.html
serviceui.html
sessionStaleMismatchError.html
user.html

Deprecated Gradle features were used in this build, making it incompatible 
with Gradle 6.0.
Use '--warning-mode all' to show the individual deprecation warnings.
See https:
//docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 12s
5 actionable tasks: 1 executed, 4 up-to-date

$ ./gradlew getResource -PresourceName=header.html

> Task :getResource
No resources could be found matching header.html

Deprecated Gradle features were used in this build, making it incompatible 
with Gradle 6.0.
Use '--warning-mode all' to show the individual deprecation warnings.
See https:
//docs.gradle.org/5.6.3/userguide/command_line_interface.html#sec:command_line_warnings

BUILD SUCCESSFUL in 10s
5 actionable tasks: 1 executed, 4 up-to-date


Any ideas? 

Thanks

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/cc659b82-2e6c-408f-9597-e2ee30187e3b%40apereo.org.

Re: [cas-user] Re: Service Registry - Store in MySQL database

2020-03-26 Thread Mathieu HETRU

you are welcome :)

Sincerly,

Mathieu

Le jeu. 26 mars 2020 à 11:42, Bob  a écrit :

> Thank you very much Mathieu!
>
> That workaround fixed it for me and I now have CAS Management (6.1.0-RC4)
> saving the services in the MySQL database.
> Much appreciated!
> Regards,
>
> Bob
>
>
> On Tuesday, March 24, 2020 at 5:13:09 PM UTC+1, Mathieu HETRU wrote:
>>
>> hello Bob,
>> i have the solution : remove the git feature from the war file (produced
>> by gradlew) in order to cas-management 6.1.x works fine :
>>
>> add this line in the build.gradle (in the bootWar step) :
>> ---
>> excludes = ["**/cas-mgmt-config-version-control*.jar",
>> "**/cas-mgmt-config-delegated*.jar", "**/HikariCP-java7-2.4.13.jar"]
>> ---
>>
>> Sincerly,
>>
>> Mathieu
>>
>> Le mar. 24 mars 2020 à 16:04, Bob  a écrit :
>>
>>> Thanks Mathieu,
>>>
>>> I tried that also but never could get cas-management 6.1.x working (it
>>> kept using the built-in git repo, despite having properties set not to use
>>> that) with the MySQL data.
>>> Finally I gave up on cas-management and have used the workaround from
>>> Michele instead.
>>> Thanks,
>>>
>>> Bob
>>>
>>>
>>> On Monday, March 23, 2020 at 4:06:08 PM UTC+1, Mathieu HETRU wrote:

 Hello Bob,

 You should install cas-management web interface because the service
 entry in the db got java objects serialized in the db blob fields in the db
 tables.

 I have not use the initFromJson feature.

 Sincerly,

 Mathieu

 Le mardi 28 janvier 2020 12:50:54 UTC+1, Bob a écrit :
>
> Hello,
>
> We are upgrading to CAS 6.1.x.
> Most things seem to work fine (LDAP and reading Service Registry from
> json file) but we cannot get it to save the Service Registry in a MySQL
> casdb.
> Is there a way to manually enter a Service Registry into a MySQL
> database?
>
> Running CAS has created 3 tables in our MySQL database:
>
> regex_registered_service
> regex_registered_service_regex_registered_service_property
> regex_registered_service_registered_service_impl_contact
>
>
> Table regex_registered_service has the following columns:
>
> +--+
> | COLUMN_NAME  |
> +--+
> | access_strategy  |
> | attribute_release|
> | description  |
> | environments |
> | evaluation_order |
> | expiration_policy|
> | expression_type  |
> | id   |
> | information_Url  |
> | logo |
> | logout_type  |
> | logout_url   |
> | mfa_policy   |
> | name |
> | privacy_Url  |
> | proxy_policy |
> | proxy_ticket_expiration_policy   |
> | public_key   |
> | required_handlers|
> | response_Type|
> | service_Id   |
> | service_ticket_expiration_policy |
> | sso_participation_policy |
> | theme|
> | username_attr|
> +--+
> 25 rows in set (0.00 sec)
>
> How would I get the following json into this table?
>
> {
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>   "serviceId" : "https://localhost:9000/dashboard;,
>   "name" : "My App",
>   "id" : 10001000,
>   "description" : "My Dashboard App",
>   "attributeReleasePolicy" : {
> "@class" :
> "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy",
> "allowedAttributes" : {
>   "@class" : "java.util.TreeMap",
>   "memberOf" : "authorities"
> }
>   },
>   "evaluationOrder" : 100,
>   "accessStrategy" : {
> "@class" :
> "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy",
> "enabled" : true,
> "ssoEnabled" : true
>   }
> }
>
> Thanks in advance!
>
> Bob
>
 --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to cas-...@apereo.org.
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/85c1a43d-a4b1-4d91-9106-3ed8a4e9d92d%40apereo.org
>>>

Re: [cas-user] Re: Service Registry - Store in MySQL database

2020-03-26 Thread Bob

Thank you very much Mathieu!

That workaround fixed it for me and I now have CAS Management (6.1.0-RC4) 
saving the services in the MySQL database.
Much appreciated!
Regards,

Bob


On Tuesday, March 24, 2020 at 5:13:09 PM UTC+1, Mathieu HETRU wrote:
>
> hello Bob,
> i have the solution : remove the git feature from the war file (produced 
> by gradlew) in order to cas-management 6.1.x works fine :
>
> add this line in the build.gradle (in the bootWar step) :
> ---
> excludes = ["**/cas-mgmt-config-version-control*.jar", 
> "**/cas-mgmt-config-delegated*.jar", "**/HikariCP-java7-2.4.13.jar"]
> ---
>
> Sincerly,
>
> Mathieu
>
> Le mar. 24 mars 2020 à 16:04, Bob > a 
> écrit :
>
>> Thanks Mathieu,
>>
>> I tried that also but never could get cas-management 6.1.x working (it 
>> kept using the built-in git repo, despite having properties set not to use 
>> that) with the MySQL data.
>> Finally I gave up on cas-management and have used the workaround from 
>> Michele instead.
>> Thanks,
>>
>> Bob
>>
>>
>> On Monday, March 23, 2020 at 4:06:08 PM UTC+1, Mathieu HETRU wrote:
>>>
>>> Hello Bob,
>>>
>>> You should install cas-management web interface because the service 
>>> entry in the db got java objects serialized in the db blob fields in the db 
>>> tables.
>>>
>>> I have not use the initFromJson feature.
>>>
>>> Sincerly,
>>>
>>> Mathieu
>>>
>>> Le mardi 28 janvier 2020 12:50:54 UTC+1, Bob a écrit :

 Hello,

 We are upgrading to CAS 6.1.x.
 Most things seem to work fine (LDAP and reading Service Registry from 
 json file) but we cannot get it to save the Service Registry in a MySQL 
 casdb.
 Is there a way to manually enter a Service Registry into a MySQL 
 database?

 Running CAS has created 3 tables in our MySQL database:

 regex_registered_service
 regex_registered_service_regex_registered_service_property
 regex_registered_service_registered_service_impl_contact


 Table regex_registered_service has the following columns:

 +--+
 | COLUMN_NAME  |
 +--+
 | access_strategy  |
 | attribute_release|
 | description  |
 | environments |
 | evaluation_order |
 | expiration_policy|
 | expression_type  |
 | id   |
 | information_Url  |
 | logo |
 | logout_type  |
 | logout_url   |
 | mfa_policy   |
 | name |
 | privacy_Url  |
 | proxy_policy |
 | proxy_ticket_expiration_policy   |
 | public_key   |
 | required_handlers|
 | response_Type|
 | service_Id   |
 | service_ticket_expiration_policy |
 | sso_participation_policy |
 | theme|
 | username_attr|
 +--+
 25 rows in set (0.00 sec)

 How would I get the following json into this table?

 {
   "@class" : "org.apereo.cas.services.RegexRegisteredService",
   "serviceId" : "https://localhost:9000/dashboard;,
   "name" : "My App",
   "id" : 10001000,
   "description" : "My Dashboard App",
   "attributeReleasePolicy" : {
 "@class" : 
 "org.apereo.cas.services.ReturnMappedAttributeReleasePolicy",
 "allowedAttributes" : {
   "@class" : "java.util.TreeMap",
   "memberOf" : "authorities"
 }
   },
   "evaluationOrder" : 100,
   "accessStrategy" : {
 "@class" : 
 "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy",
 "enabled" : true,
 "ssoEnabled" : true
   }
 }

 Thanks in advance!

 Bob

>>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-...@apereo.org .
>> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/85c1a43d-a4b1-4d91-9106-3ed8a4e9d92d%40apereo.org
>>  
>> 
>> .
>>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions:

Re: [cas-user] Cas dont redirect to the application after succesful logged in

2020-03-26 Thread MIPM GmbH


 I checked the network panel. You can see attached the results. It seems 
like the redirect to validate is missing.
Am Mittwoch, 25. März 2020 16:55:37 UTC+1 schrieb rbon:
>
> My guess would be the service did not or could not complete the log in 
> process.
> ST-9 was validated but ST-8 was not. After a ST is created, cas redirects 
> to the service. You can check this in your browser's network panel in 
> developer tools. The service needs to contact cas to validate the ticket, 
> this is done directly, not through the browser.
>
> Ray
>
> On Wed, 2020-03-25 at 07:46 -0700, MIPM GmbH wrote:
>
> Notice: This message was sent from outside the University of Victoria 
> email system. Please be cautious with links and sensitive information. 
>
> Hello,
>
> My CAS is on Version 6.2.0-RC3. Most of the time CAS works just fine but 
> sometimes the casified application stucks and firefox shows the message 
> "wait for cas".  To fix that i restart cas everytime. 
> This problem seem to appear whenever I use two diffrent browser at the 
> same client on that cassifed application. I figured out that the parameter 
> ticket is missing in the url.
> I hope someone can help me.
> You find attached cas.properties and the log. I have tried to reproduce 
> the problem. The log isnt very helpful either. It just shows that cas 
> stopped working at "Service ticket created".  
> Please let me know if you need further informations
>  
>
>
> -- 
>
> Ray Bon
> Programmer Analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | rb...@uvic.ca 
>
> I respectfully acknowledge that my place of work is located within the 
> ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
> WSÁNEĆ Nations.
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1476a6d8-12aa-4215-901c-5404c395f3e7%40apereo.org.

[cas-user] Tomcat Session Persistence, CAS 6.2.0 RC3

Re: [cas-user] Re: [Enable Oauth JWT token on CAS overlay template version 6.0]

[cas-user] Re: cas-management 6.1 RC4 turn off version control

Re: [cas-user] Re: [Enable Oauth JWT token on CAS overlay template version 6.0]

Re: [cas-user] Cas dont redirect to the application after succesful logged in

RE: [cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

Re: [cas-user] Re: [Enable Oauth JWT token on CAS overlay template version 6.0]

Re: [cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

RE: [cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

[cas-user] 'No resources can be found matching ' using gradlew getResource-PresourceName=

Re: [cas-user] Re: Service Registry - Store in MySQL database

Re: [cas-user] Re: Service Registry - Store in MySQL database

Re: [cas-user] Cas dont redirect to the application after succesful logged in

13 matches

Site Navigation

Mail list logo

Footer information