[cas-user] Is there a way to replicate sessions in version 5.2.9 ?

2022-09-26 Thread Freedom K
Hi everyone,

I am using CAS vesrion 5.2.9 with saml okta as authenticator and I am 
searching for a way to share the sessions between two cas servers.
This is because the service is stored in the session and if the login 
requests starts in cas 1 but after the okta authentication is redirected to 
cas 2 the service /session is not recognized by cas 2.
Up to now I am using ehcache to replicate the tgt and st , but for the 
sessions I have not found a way yet. 

Thank you,
Ria

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/44f80081-e110-4324-b58b-b4c39ece170an%40apereo.org.


Re: [cas-user] Is there a way to replicate sessions in version 5.2.9 ?

2022-09-27 Thread Freedom K
Thank you for your answer.
Is this the only way to succeed this in cas version 5.2.9?

I see, probably in a greater version of cas, some other options that I am 
not sure however if exist in this version of cas.
e.g set the config cas.authn.saml-idp.core.session-storage-type=TICKET_REGISTRY 
. Is something similar possible in the cas version I am using?

Thanks 
Ria


On Monday, September 26, 2022 at 6:36:07 PM UTC+3 Ray Bon wrote:

> Ria,
>
> The session is managed by the application container; tomcat, jetty, etc.
> Look into clustering the container.
>
> Ray
>
> On Mon, 2022-09-26 at 07:00 -0700, Freedom K wrote:
>
> Notice: This message was sent from outside the University of Victoria 
> email system. Please be cautious with links and sensitive information. 
>
>
> Hi everyone,
>
> I am using CAS vesrion 5.2.9 with saml okta as authenticator and I am 
> searching for a way to share the sessions between two cas servers.
> This is because the service is stored in the session and if the login 
> requests starts in cas 1 but after the okta authentication is redirected to 
> cas 2 the service /session is not recognized by cas 2.
> Up to now I am using ehcache to replicate the tgt and st , but for the 
> sessions I have not found a way yet. 
>
> Thank you,
> Ria
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/58fca83f-f18b-48ed-9917-8ff9393bf297n%40apereo.org.


[cas-user] redis setup in 5.2.9

2022-12-20 Thread Freedom K
Hi,

How can I set up cas to use redis for ticket replication in 5.2.9?

It seems to always tries to setup with ehcache.

Thanks

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/469e1f36-8041-4415-805b-4041c81048e8n%40apereo.org.


Re: [cas-user] Problem with CAS 6.2.6

2023-01-03 Thread Freedom K
I am also facing the same issue.
I am using OKTA as authenticator so when I try to login and the browser 
redirects to okta login page, if I wait 2 minutes and then provide my 
credentials, then the JSESSION changes resulting in loosing the destination 
service and redirecting to cas default page. If I provide immediate the 
credentials, then there is no issue.

I am using cas 5.2.9 and Tomcat/8.5.35

Do you recommend to upgrade tomcat? Can I do it by keeping the same cas 
version?


On Sunday, March 28, 2021 at 6:20:58 PM UTC+3 nicol...@gmail.com wrote:

> Hi Andy, your idea of using the Chrome  throttling, somehow led us to the 
> idea of "could it be a Tomcat issue?". Then we tested with an embedded one 
> we had and the issue did not occur, and it was a newer version. Next step 
> was to update the older Tomcat and that's it! 
>
> El domingo, 28 de marzo de 2021 a las 0:25:56 UTC-3, Andy Ng escribió:
>
>> Hello,
>>
>> Nice to hear that the Chrome throttling idea leader to new discovery.
>>
>> It seems like this post might describe your issue: 
>> https://support.f5.com/csp/article/K85361055
>>
>> It specifically said upgrading to at least 9.0.34 or above can solve the 
>> issue, so that's excluding your previous 9.0.33 which is possible why it 
>> have the issue. 
>>
>> Cheers,
>> Andy
>>
>> On Saturday, 27 March 2021 at 07:12:00 UTC+8 nicol...@gmail.com wrote:
>>
>>> Finally after doing some research we updated the Tomcat from v9.0.33 to 
>>> 9.0.43 and the issue seems to be solved. At least we tested with one 
>>> particular user that was having this problem almost all the time, and with 
>>> the Chrome throttling and we couldn't reproduce it again.
>>>
>>> El viernes, 26 de marzo de 2021 a las 11:27:15 UTC-3, Nicolás López 
>>> escribió:
>>>
 Additional information: using the Chrome throttling, with a custom 
 profile entering ANY value for the upload speed (even 100Mb) the issue can 
 be reproduced.

 Can anybody please test if it happens under this scenario?

 El viernes, 26 de marzo de 2021 a las 10:19:48 UTC-3, Nicolás López 
 escribió:

> If I use the 3G throttling in Chrome for log in I can reproduce the 
> issue consistently...now what should I do with this information? :D
> Using firefox, even with the GPRS profile it logs in without any 
> problem.
>
> With the throttling you can just set upload/download max speed and 
> latency, it looks so wierd.
>
>
> El viernes, 26 de marzo de 2021 a las 7:01:39 UTC-3, Andy Ng escribió:
>
>> Hi all,
>>
>> I think I also am running out of idea, let see if the following would 
>> help identify the issue:
>>
>>
>>1. Would it be your firewall blocking other browser but allow 
>>only Firefox?
>>   - You said using 4G will work but Wifi will not work. Usually 
>>   company firewall only block Wifi and not 4G, so it is a possible 
>> issue
>>2. CAS server and client need to have communication between them, 
>>good to take a look see if that is ok
>>3. Would there be a special proxy in firefox that make it a 
>>different browser than Chrome / Edge
>>   - it is normal for me to forget to turn of proxy for Firefox 
>>   after use, maybe it is the same issue as well
>>4. If network is involved, Chrome does have a Network speed 
>>throttle feature, which might or might not be helpful:
>>   1. Open Chome, 
>>   2. Press F12,
>>   3. Click on "No throttling"
>>   4. Select Fast 3G or other type of throttling
>>   5. Well Sometime this type of throttling will produced 
>>   differnet result than using just using normal network speed 
>> browser. If 
>>   nothing happen then oh well
>>   
>> See if this would helps...
>>
>> Cheers,
>> Andy
>> On Friday, 26 March 2021 at 16:49:18 UTC+8 Florent Vallée wrote:
>>
>>> Hello, 
>>>
>>> We tried the 2 solutions but none worked. We don't have any issues 
>>> if we're connected on wifi, we only have the issue with 4G connection 
>>> (smartphone with 4G or on computer with 4G shared connection)
>>> We tried with version 6.1, 6.2 and 6.3.
>>> Any other ideas ?
>>> We are desperate.
>>>
>>> Regards,
>>>
>>> Florent
>>>
>>>
>>> --
>>> *De: *"Andy Ng" 
>>> *À: *"CAS Community" 
>>> *Cc: *"nicol...@gmail.com" , "jrautureau" <
>>> jraut...@gmail.com>
>>> *Envoyé: *Jeudi 25 Mars 2021 02:44:03
>>>
>>> *Objet: *Re: [cas-user] Problem with CAS 6.2.6
>>> Hi all,
>>> On our side we are using 6.2.x and in production, no such problem 
>>> observed.
>>>
>>> We did implemented a customization multiple customization regarding 
>>> cookies, which are:
>>>
>>>- Samesite = None
>>>- 3rd party 

[cas-user] service registry with redis

2023-01-12 Thread Freedom K
Hi all,

I am using cas 5.2.9 and trying to register the services at initialization 
from .json files using redis, but is not working. Is it possible in this 
cas version?

Thanks

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d0bb8d01-5cef-42ee-8f9f-0976147bed68n%40apereo.org.


[cas-user] Re: service registry with redis

2023-01-12 Thread Freedom K
I have the configs
cas.serviceRegistry.json.location=classpath:/services
cas.serviceRegistry.initFromJson=true
On Thursday, January 12, 2023 at 4:15:22 PM UTC+2 Freedom K wrote:

> Hi all,
>
> I am using cas 5.2.9 and trying to register the services at initialization 
> from .json files using redis, but is not working. Is it possible in this 
> cas version?
>
> Thanks
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/42781c45-eba4-4477-971d-6adffd22d8c2n%40apereo.org.


[cas-user] tomcat session cookie expiration

2023-01-02 Thread Freedom K
Hi everyone.

What is the default expiration time for the JSESSION cookie of tomcat for 
cas?
I would like to increase it, as I thing it is small right now, but it is 
not working when I use the 
server.connection-timeout or server.session.timeout configs.

The problem: 
I notice that when I try to login to an app via CAS, with okta as 
authenticator, the JSESSION changes if I do not authenticate quickly, 
making the service to be lost (as is stored in the session) and redirecting 
me to CAS green screen instead of the app's screen.
So the normal path in my setup is
1. application login page
2. redirection to cas (JSESSION creation)
3. redirection to okta
4. redirection back to cas
5. redirection back to application

but if in step 3 I do not give the credentials immediately and wait for 
some minutes,
the JSESSION is changing, causing the path to finish in step 4. (and not be 
able to create service ticket)

Have anyone faced this issue before or know how this could be fixed?

I am using cas 5.2.9 and Spring Boot Version: 1.5.12.RELEASE Apache 
Tomcat/8.5.35

Thank you,
Ria

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/18a176ab-017a-4c19-9fcb-00b29742a3ecn%40apereo.org.


Re: [cas-user] Why is ovewriting configs not supported in all kind of configs?

2022-12-02 Thread Freedom K
Hi everyone,
The issue with the configs seem to appear when we "seperate" the 
cas.authn.pac4j.saml[0] configs in different config files

For example all the configs of the type cas.authn.pac4j.saml[0]  that we 
use in cas are the below:
cas.authn.pac4j.saml[0].keystorePassword=pac4j-demo-passwd
cas.authn.pac4j.saml[0].privateKeyPassword=pac4j-demo-passwd
cas.authn.pac4j.saml[0].serviceProviderEntityId=urn:mace:saml:pac4j.org
cas.authn.pac4j.saml[0].serviceProviderMetadataPath=/etc/cas/config/sp-metadata.xml
cas.authn.pac4j.saml[0].keystorePath=/etc/cas/config/samlKeystore.jks
cas.authn.pac4j.saml[0].identityProviderMetadataPath=https://blablabla
cas.authn.pac4j.saml[0].clientName=SAML2Client

When we set up e.g. cas.authn.pac4j.saml[0].identityProviderMetadataPath in 
the file conf/cas_custom.properties and all the rest in the file 
conf/cas_base.properties, then the login does not work correctly.
However, when we set up ALL the used cas.authn.pac4j.saml[0]  configs in 
the config file (either cas_custom.properties or/and cas_base.properties) 
then the login is working as expected.
So it looks like those kind of configs need to be read from the same file 
all together, else if they are read partially from different files, 
something is not working as expected.
I am not sure if this kind of issue can happen in different config types as 
well.

Thanks,
Ria


On Friday, December 2, 2022 at 11:50:09 AM UTC+2 Freedom K wrote:

> Thank you Ray. 
> I will try it (in thelog4j2.xml?) and see if more information will be 
> visible.
> If this is a spring config issue, can we use a bigger version of spring 
> for the cas version 5.2.9?
> I see that the versions in the pom.xml is 
> 1.5.14.RELEASE
> 4.3.17.RELEASE
>
> On Thursday, December 1, 2022 at 6:42:36 PM UTC+2 Ray Bon wrote:
>
>> Ria
>>
>> This sounds more like a spring config issue than a cas one.
>> This logger may provide some details:
>>
>> 
>>
>> Ray
>>
>> On Thu, 2022-12-01 at 07:10 -0800, Freedom K wrote:
>>
>> Notice: This message was sent from outside the University of Victoria 
>> email system. Please be cautious with links and sensitive information.
>>
>>
>> Hi everyone,
>>
>> I am facing an issue when trying to create a config file hierarchy for 
>> cas.
>>
>> I am using something like the below arguments in the run line of cas
>>
>> --spring.config.location=conf/cas_base.properties,conf/cas_custom.properties
>>
>> so as to be able to have some hierarchy of configs based on some 
>> environment specific preferences.
>>
>> I have noticed that if I set for example 
>> logging.level.org.apereo.cas=DEBUG in the file cas_base.properties and no 
>> logging.level.org.apereo.cas is set to cas_custom.properties, it is read 
>> from cas and I can see the logs in debug mode, as expected.
>>
>> However, if I set cas.authn.pac4j.saml[0].clientName in 
>> cas_base.properties and not in cas_custom.properties, then the app does not 
>> read it and I cannot get redirected to the identity provider I wish (OKTA).
>>
>> Is there any differences between the different type of configs that 
>> prevents them from being able to work with a hierarchy type of config file 
>> reading?
>>
>> The CAS version I am using is 5.2.9
>>
>> Thanks,
>> Ria
>>
>>
>>
>>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d68acdb1-ae26-4f78-bd57-e5c6d967efcdn%40apereo.org.


[cas-user] Exception Broken pipe

2022-12-21 Thread Freedom K
Hi,

I am using cas 5.2.9 and sometimes I get the message 
[org.apereo.cas.web.FlowExecutionExceptionResolver] -  
and the exception 
org.apache.catalina.connector.ClientAbortException: java.io.IOException: 
Broken pipe

Does anyone know why this is happenng and how I can fix it?

cas_1   | 12/20-15:58:50.247 DEBUG 
[org.apereo.cas.web.FlowExecutionExceptionResolver] - 
cas_1   | 
org.apache.catalina.connector.ClientAbortException: java.io.IOException: 
Broken pipe
cas_1   | at 
org.apache.catalina.connector.OutputBuffer.realWriteBytes(OutputBuffer.java:356)
 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.connector.OutputBuffer.flushByteBuffer(OutputBuffer.java:825)
 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.connector.OutputBuffer.append(OutputBuffer.java:730) 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.connector.OutputBuffer.writeBytes(OutputBuffer.java:391) 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.connector.OutputBuffer.write(OutputBuffer.java:369) 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.connector.CoyoteOutputStream.write(CoyoteOutputStream.java:96)
 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.springframework.util.StreamUtils.copy(StreamUtils.java:138) 
~[spring-core-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.http.converter.ResourceHttpMessageConverter.writeContent(ResourceHttpMessageConverter.java:110)
 
~[spring-web-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.http.converter.ResourceHttpMessageConverter.writeInternal(ResourceHttpMessageConverter.java:102)
 
~[spring-web-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.http.converter.ResourceHttpMessageConverter.writeInternal(ResourceHttpMessageConverter.java:45)
 
~[spring-web-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.http.converter.AbstractHttpMessageConverter.write(AbstractHttpMessageConverter.java:226)
 
~[spring-web-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.web.servlet.resource.ResourceHttpRequestHandler.handleRequest(ResourceHttpRequestHandler.java:480)
 
~[spring-webmvc-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.web.servlet.mvc.HttpRequestHandlerAdapter.handle(HttpRequestHandlerAdapter.java:51)
 
~[spring-webmvc-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:967)
 
~[spring-webmvc-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:901)
 
~[spring-webmvc-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970)
 
~[spring-webmvc-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:861)
 
~[spring-webmvc-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
javax.servlet.http.HttpServlet.service(HttpServlet.java:635) 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846)
 
~[spring-webmvc-4.3.16.RELEASE.jar!/:4.3.16.RELEASE]
cas_1   | at 
javax.servlet.http.HttpServlet.service(HttpServlet.java:742) 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) 
~[tomcat-embed-websocket-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   | at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-8.5.35.jar!/:8.5.35]
cas_1   

[cas-user] Why is ovewriting configs not supported in all kind of configs?

2022-12-01 Thread Freedom K
Hi everyone,

I am facing an issue when trying to create a config file hierarchy for cas.

I am using something like the below arguments in the run line of cas
--spring.config.location=conf/cas_base.properties,conf/cas_custom.properties

so as to be able to have some hierarchy of configs based on some 
environment specific preferences.

I have noticed that if I set for example logging.level.org.apereo.cas=DEBUG 
in the file cas_base.properties and no logging.level.org.apereo.cas is set 
to cas_custom.properties, it is read from cas and I can see the logs in 
debug mode, as expected.

However, if I set cas.authn.pac4j.saml[0].clientName in cas_base.properties 
and not in cas_custom.properties, then the app does not read it and I 
cannot get redirected to the identity provider I wish (OKTA).

Is there any differences between the different type of configs that 
prevents them from being able to work with a hierarchy type of config file 
reading?

The CAS version I am using is 5.2.9

Thanks,
Ria



-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/e677b077-dc04-42e5-a2b4-a00a553c4cd0n%40apereo.org.


Re: [cas-user] Why is ovewriting configs not supported in all kind of configs?

2022-12-02 Thread Freedom K
Thank you Ray. 
I will try it (in thelog4j2.xml?) and see if more information will be 
visible.
If this is a spring config issue, can we use a bigger version of spring for 
the cas version 5.2.9?
I see that the versions in the pom.xml is 
1.5.14.RELEASE
4.3.17.RELEASE

On Thursday, December 1, 2022 at 6:42:36 PM UTC+2 Ray Bon wrote:

> Ria
>
> This sounds more like a spring config issue than a cas one.
> This logger may provide some details:
>
> 
>
> Ray
>
> On Thu, 2022-12-01 at 07:10 -0800, Freedom K wrote:
>
> Notice: This message was sent from outside the University of Victoria 
> email system. Please be cautious with links and sensitive information.
>
>
> Hi everyone,
>
> I am facing an issue when trying to create a config file hierarchy for cas.
>
> I am using something like the below arguments in the run line of cas
>
> --spring.config.location=conf/cas_base.properties,conf/cas_custom.properties
>
> so as to be able to have some hierarchy of configs based on some 
> environment specific preferences.
>
> I have noticed that if I set for example 
> logging.level.org.apereo.cas=DEBUG in the file cas_base.properties and no 
> logging.level.org.apereo.cas is set to cas_custom.properties, it is read 
> from cas and I can see the logs in debug mode, as expected.
>
> However, if I set cas.authn.pac4j.saml[0].clientName in 
> cas_base.properties and not in cas_custom.properties, then the app does not 
> read it and I cannot get redirected to the identity provider I wish (OKTA).
>
> Is there any differences between the different type of configs that 
> prevents them from being able to work with a hierarchy type of config file 
> reading?
>
> The CAS version I am using is 5.2.9
>
> Thanks,
> Ria
>
>
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/8aed0e06-9775-432a-b114-3e755b467d11n%40apereo.org.


[cas-user] Change the default "Log In Successful" page

2022-11-15 Thread Freedom K
Hi everyone.
I am using cas version 5.2.9 and okta as the identity provider.
Sometimes it happens that after the authentication with okta, probably teh 
session changes and the service is not recognized by CAS, resulting in the 
green screen of CAS "Log In Successful" (url 
https://hostname/cas/login?client_name=SAML2Client), instead redirecting to 
the destination service.

As the root cause of this is hard to be identified, I want to change the "Log 
In Successful" CAS page to a different url (e.g. the okta page) , so as in 
cases where the service is not recognized, to show the user the okta page 
instead of the cas page (we don't want the user to see cas pages as is used 
as an intermediate application).

Is there a way to replace the default "Log In Successful" page of CAS to a 
url specified by me via a config or via a different way?

Thank you 

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/358fca91-d79f-4215-867d-7b35fc7eac46n%40apereo.org.