Re: [cas-user] Use of # in service URL

2021-02-18 Thread Cutting, Shawn
Thanks for your input, Ray.  Yes, that is how the URL is.  I have a request 
into the client to see if there is a way to eliminate the #.

Shawn

On Feb 18, 2021, at 3:24 PM, Ray Bon mailto:r...@uvic.ca>> wrote:

[[***CAUTION*** This email originated from outside of Messiah University]]
Shawn,

Is the '#' really bare like that? And the continuation of the path, 
'/login-page', following it?

Is it possible for the client to encode the url (this may / may not would work)?

Ray

On Thu, 2021-02-18 at 09:09 -0800, Shawn Cutting wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.


Good Day,
I am running into an issue with a service URL that includes a "#"... example 
like this:
https://service-site.com/#/login-page
The issue is that after CAS authenticates, it is returning the URL of:
https://service-site.com/?ticket=ST-370468-randomticketstuff#/login-page
(note the #/login-page at the end of the ST info).  How can I get CAS to return 
back to the original URL?

Thanks for your insight.
Shawn


--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I respectfully acknowledge that my place of work is located within the 
ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
WSÁNEĆ Nations.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to a topic in the Google 
Groups "CAS Community" group.
To unsubscribe from this topic, visit 
https://groups.google.com/a/apereo.org/d/topic/cas-user/7ER2rRA95ug/unsubscribe.
To unsubscribe from this group and all its topics, send an email to 
cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/edb12f0738abcc54371b522bcd923db974bef07e.camel%40uvic.ca.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/A08B0C70-97C9-4994-852D-7E5ABC7F16A8%40messiah.edu.


Re: [cas-user] Use of # in service URL

2021-02-18 Thread Ray Bon
Shawn,

Is the '#' really bare like that? And the continuation of the path, 
'/login-page', following it?

Is it possible for the client to encode the url (this may / may not would work)?

Ray

On Thu, 2021-02-18 at 09:09 -0800, Shawn Cutting wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.


Good Day,
I am running into an issue with a service URL that includes a "#"... example 
like this:
https://service-site.com/#/login-page
The issue is that after CAS authenticates, it is returning the URL of:
https://service-site.com/?ticket=ST-370468-randomticketstuff#/login-page
(note the #/login-page at the end of the ST info).  How can I get CAS to return 
back to the original URL?

Thanks for your insight.
Shawn

--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I respectfully acknowledge that my place of work is located within the 
ancestral, traditional and unceded territory of the Songhees, Esquimalt and 
WSÁNEĆ Nations.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/edb12f0738abcc54371b522bcd923db974bef07e.camel%40uvic.ca.


Re: [cas-user] Diffie-Hellman parameter's size

2021-02-18 Thread Jonathon Taylor
Hi,

If you haven't already figured this out, I believe you need to set this as
a Java option at CAS startup (-Djdk.tls.ephemeralDHKeySize=2048).  We use
external Tomcat and have something like this in our systemd unit file, but
it should work just as well if you are using just the CAS WAR:

Environment='JAVA_OPTS=-Djdk.tls.ephemeralDHKeySize=2048'

Jonathon

On Fri, Feb 5, 2021 at 8:59 AM Hervé Guillemet 
wrote:

> I'm running a CAS 6 server with embedded Jetty and ssl checkers tell me
> that my DH parameter's size is only 1024. I haven't found any way to change
> it to 2048.
> my server.ssl configuration group looks like :
>
>   protocol: TLS
>   enabled-protocol: TLSv1.2 TLSv1.3
>   ciphers:
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
>
> Any idea ?
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/9b9917e9-3382-4fad-89e4-112e797ebae9n%40apereo.org
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CABzqDo9e2Bfe8zPv4dOTUDw6%3DAEKFT676ekix2%3DWyiC_Jvvj-w%40mail.gmail.com.


[cas-user] Combine mod_auth_cas and mod_auth_basic?

2021-02-18 Thread Mark Wood
We would like to support access to a service by both our CAS users and a 
table of "local" users in a file or database.  Is there a way to get HTTPD 
to consult both of these modules for the same location?  (The use of 
"AuthType CAS" suggests that the answer is "no":  only one AuthType can be 
declared for a location.)

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b232e278-5d35-4d37-9705-cb9bb9f934f0n%40apereo.org.


[cas-user] Use of # in service URL

2021-02-18 Thread Shawn Cutting

Good Day,
I am running into an issue with a service URL that includes a "#"... 
example like this:
https://service-site.com/#/login-page
The issue is that after CAS authenticates, it is returning the URL of:
https://service-site.com/?ticket=ST-370468-randomticketstuff#/login-page
(note the #/login-page at the end of the ST info).  How can I get CAS to 
return back to the original URL?

Thanks for your insight.
Shawn

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/31900d1e-34e4-4219-93b5-087e97d5653fn%40apereo.org.