Re: [cas-user] CAS as WS-Federation proxy

2014-09-04 Thread John Gasper 
Glad it worked. Good luck with the rest of it, and don't hesitate to ask
if you run into more issues with the WS-Fed module.

-J-

On 9/4/14 12:30 PM, Michael O Holstein wrote:
>
> >https://github.com/Unicon/cas-adfs-integration/tree/v1.0.0/cas-server-support-
>
> >wsfederation-sample-site. It's should get you started. It's vanilla
> with the WS-Fed module added in 
>
> >and other related changes made.
>
>
> I cloned from GIT and changed the ~5 lines that are site-specific and
> the resulting WAR deploys fine .. so that gives me a baseline to
> backtrack my other mistakes.
>
> Thanks,
>
> ~Mike.
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: 
> jgas...@unicon.net
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
*John Gasper*
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

RE: [cas-user] CAS as WS-Federation proxy

2014-09-04 Thread Michael O Holstein 
>https://github.com/Unicon/cas-adfs-integration/tree/v1.0.0/cas-server-support-

>wsfederation-sample-site.
> It's should get you started. It's vanilla with the WS-Fed module added in

>and other related changes made.

I cloned from GIT and changed the ~5 lines that are site-specific and the 
resulting WAR deploys fine .. so that gives me a baseline to backtrack my other 
mistakes.

Thanks,

~Mike.

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] CAS as WS-Federation proxy

2014-09-04 Thread John Gasper 
Mike,

You are just down a different track.. Don't mix the EWU docs/stuff (at
least not the file contents) with the Unicon one. They are very similar
in functionality but different in implementation.

The error you are getting now is because you are mixing classes. The
pom.xml is probably referencing the Unicon dependency, but you have
connections to "org.jasig.cas.support." packages in the
deployerConfigContext.xml. They should read "net.unicon.cas.support" (or
whatever).

But seriously, check out
https://github.com/Unicon/cas-adfs-integration/tree/v1.0.0/cas-server-support-wsfederation-sample-site.
It's should get you started. It's vanilla with the WS-Fed module added
in and other related changes made.

I hope that helps.

John

On 9/4/14 11:48 AM, Michael O Holstein wrote:
>
> John,
>
>
> Thanks for your help .. I built 3.5.2.1 using the same method (copying
> files from source, modify per Unicorn/EWU docs, etc.) with the same 4
> things in my pom.xml .. here is the error on deploy :
>
>
> Sep 4, 2014 2:44:48 PM org.apache.catalina.core.ApplicationContext log
>
> SEVERE: SafeContextLoaderListener: 
>
> The Spring ContextLoaderListener we wrap threw on contextInitialized.
>
> But for our having caught this error, the web application context
> would not have initialized.
>
> org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'centralAuthenticationService' defined in
> ServletContext resource
> [/WEB-INF/spring-configuration/applicationContext.xml]: Cannot resolve
> reference to bean 'authenticationManager' while setting bean property
> 'authenticationManager'; nested exception is
> org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'authenticationManager' defined in
> ServletContext resource [/WEB-INF/deployerConfigContext.xml]: Cannot
> create inner bean
> 'org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver#1bd7643a'
> of type
> [org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver]
> while setting bean property 'credentialsToPrincipalResolvers' with key
> [2]; nested exception is
> org.springframework.beans.factory.CannotLoadBeanClassException: Cannot
> find class
> [org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver]
> for bean with name
> 'org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver#1bd7643a'
> defined in ServletContext resource
> [/WEB-INF/deployerConfigContext.xml]; nested exception is
> java.lang.ClassNotFoundException:
> org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver
>
>
> so no further along ?
>
>
> Thanks,
>
>
> ~Mike.
>
>
> 
> *From:* John Gasper 
> *Sent:* Thursday, September 04, 2014 12:17 PM
> *To:* cas-user@lists.jasig.org
> *Subject:* Re: [cas-user] CAS as WS-Federation proxy
>  
> Mike,
>
> At this point, the module hasn't been update to work with 4.0. It
> should work fine with 3.5.2.1.
>
> For what it is worth, there is an example build in the project that
> can probably get you going pretty quickly too.
>
> On 9/4/14 8:55 AM, Michael O Holstein wrote:
>> John,
>>
>> CAS is 4.0 and WS-Federation is 1.0.0
>>
>> I should have also mentioned that a "vanilla" build using Maven,
>> et.al. but minus the WS-Federation bit did build and deploy
>> successfully, so I've introduced the failure with this module.
>>
>> I'm happy to try earlier or bleeding if it's known to work better in
>> one of them.
>>
>> Thanks,
>>
>> ~Mike.
>> 
>> *From:* John Gasper 
>> *Sent:* Thursday, September 04, 2014 11:33 AM
>> *To:* cas-user@lists.jasig.org
>> *Subject:* Re: [cas-user] CAS as WS-Federation proxy
>>  
>> Hi Michael,
>>
>> What version of CAS Server are you trying to deploy?
>>
>> John
>>
>> -- 
>> *John Gasper*
>> IAM Consultant
>> Unicon, Inc.
>> PGP/GPG Key: 0xbafee3ef
>>
>> On 9/4/14 8:11 AM, Michael O Holstein wrote:
>>>
>>> Hello list,
>>>
>>>
>>> I am trying to configure CAS to act as a WS-Federation proxy per the
>>> instructions found here :
>>>
>>>
>>> https://github.com/Unicon/cas-adfs-integration/wi

RE: [cas-user] CAS as WS-Federation proxy

2014-09-04 Thread Michael O Holstein 
John,


Thanks for your help .. I built 3.5.2.1 using the same method (copying files 
from source, modify per Unicorn/EWU docs, etc.) with the same 4 things in my 
pom.xml .. here is the error on deploy :


Sep 4, 2014 2:44:48 PM org.apache.catalina.core.ApplicationContext log

SEVERE: SafeContextLoaderListener:

The Spring ContextLoaderListener we wrap threw on contextInitialized.

But for our having caught this error, the web application context would not 
have initialized.

org.springframework.beans.factory.BeanCreationException: Error creating bean 
with name 'centralAuthenticationService' defined in ServletContext resource 
[/WEB-INF/spring-configuration/applicationContext.xml]: Cannot resolve 
reference to bean 'authenticationManager' while setting bean property 
'authenticationManager'; nested exception is 
org.springframework.beans.factory.BeanCreationException: Error creating bean 
with name 'authenticationManager' defined in ServletContext resource 
[/WEB-INF/deployerConfigContext.xml]: Cannot create inner bean 
'org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver#1bd7643a'
 of type 
[org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver]
 while setting bean property 'credentialsToPrincipalResolvers' with key [2]; 
nested exception is 
org.springframework.beans.factory.CannotLoadBeanClassException: Cannot find 
class 
[org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver]
 for bean with name 
'org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver#1bd7643a'
 defined in ServletContext resource [/WEB-INF/deployerConfigContext.xml]; 
nested exception is java.lang.ClassNotFoundException: 
org.jasig.cas.support.wsfederation.authentication.principal.WsFederationCredentialsToPrincipalResolver


so no further along ?


Thanks,


~Mike.



From: John Gasper 
Sent: Thursday, September 04, 2014 12:17 PM
To: cas-user@lists.jasig.org
Subject: Re: [cas-user] CAS as WS-Federation proxy

Mike,

At this point, the module hasn't been update to work with 4.0. It should work 
fine with 3.5.2.1.

For what it is worth, there is an example build in the project that can 
probably get you going pretty quickly too.

On 9/4/14 8:55 AM, Michael O Holstein wrote:
John,

CAS is 4.0 and WS-Federation is 1.0.0

I should have also mentioned that a "vanilla" build using Maven, et.al. but 
minus the WS-Federation bit did build and deploy successfully, so I've 
introduced the failure with this module.

I'm happy to try earlier or bleeding if it's known to work better in one of 
them.

Thanks,

~Mike.

From: John Gasper <mailto:jgas...@unicon.net>
Sent: Thursday, September 04, 2014 11:33 AM
To: cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org>
Subject: Re: [cas-user] CAS as WS-Federation proxy

Hi Michael,

What version of CAS Server are you trying to deploy?

John

--
John Gasper
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef

On 9/4/14 8:11 AM, Michael O Holstein wrote:

Hello list,


I am trying to configure CAS to act as a WS-Federation proxy per the 
instructions found here :


https://github.com/Unicon/cas-adfs-integration/wiki/wsfederation-cas-config

and the original author's blog here :

http://sites.ewu.edu/jgasper/setting-up-adfs-to-communicate-with-the-ws-federation-cas-module/


I followed the instructions in the first link verbatim, and this is a complete 
delegation .. namely, the only things in my pom.xml are :


cas-server-webapp

cas-server-core

cas-server-support-wsfederation

xml-apis (this one to resolve a dependency that maven doesn't catch)


The files that were required to be modified in the instructions were taken from 
the cas source tarball, modified per the Unicorn Github doc, and placed in the 
tree a'la Maven overlay. The WAR builds without complaint.


I've worked through several errors with the help of Google and list archives, 
but I'm stuck with this one as it appears the WS-Federation stuff is a one-off 
case .. when the WAR deploys in Tomcat I get :


Sep 4, 2014 11:03:44 AM org.apache.catalina.core.ApplicationContext log

SEVERE: SafeContextLoaderListener:

The Spring ContextLoaderListener we wrap threw on contextInitialized.

But for our having caught this error, the web application context would not 
have initialized.

org.springframework.beans.factory.BeanCreationException: Error creating bean 
with name 'centralAuthenticationService' defined in ServletContext resource 
[/WEB-INF/spring-configuration/applicationContext.xml]: Cannot resolve 
reference to bean 'authenticationManager' while setting constructor argument; 
nested exception is org.springframework.beans.

Re: [cas-user] CAS as WS-Federation proxy

2014-09-04 Thread John Gasper 
Mike,

At this point, the module hasn't been update to work with 4.0. It should
work fine with 3.5.2.1.

For what it is worth, there is an example build in the project that can
probably get you going pretty quickly too.

On 9/4/14 8:55 AM, Michael O Holstein wrote:
> John,
>
> CAS is 4.0 and WS-Federation is 1.0.0
>
> I should have also mentioned that a "vanilla" build using Maven,
> et.al. but minus the WS-Federation bit did build and deploy
> successfully, so I've introduced the failure with this module.
>
> I'm happy to try earlier or bleeding if it's known to work better in
> one of them.
>
> Thanks,
>
> ~Mike.
> 
> *From:* John Gasper 
> *Sent:* Thursday, September 04, 2014 11:33 AM
> *To:* cas-user@lists.jasig.org
> *Subject:* Re: [cas-user] CAS as WS-Federation proxy
>  
> Hi Michael,
>
> What version of CAS Server are you trying to deploy?
>
> John
>
> -- 
> *John Gasper*
> IAM Consultant
> Unicon, Inc.
> PGP/GPG Key: 0xbafee3ef
>
> On 9/4/14 8:11 AM, Michael O Holstein wrote:
>>
>> Hello list,
>>
>>
>> I am trying to configure CAS to act as a WS-Federation proxy per the
>> instructions found here :
>>
>>
>> https://github.com/Unicon/cas-adfs-integration/wiki/wsfederation-cas-config
>>
>> and the original author's blog here :
>>
>> http://sites.ewu.edu/jgasper/setting-up-adfs-to-communicate-with-the-ws-federation-cas-module/
>>
>>
>> I followed the instructions in the first link verbatim, and this is a
>> complete delegation .. namely, the only things in my pom.xml are :
>>
>>
>> cas-server-webapp
>>
>> cas-server-core
>>
>> cas-server-support-wsfederation
>>
>> xml-apis (this one to resolve a dependency that maven doesn't catch)
>>
>>
>> The files that were required to be modified in the instructions were
>> taken from the cas source tarball, modified per the Unicorn Github
>> doc, and placed in the tree a'la Maven overlay. The WAR builds
>> without complaint.
>>
>>
>> I've worked through several errors with the help of Google and list
>> archives, but I'm stuck with this one as it appears the WS-Federation
>> stuff is a one-off case .. when the WAR deploys in Tomcat I get :
>>
>>
>> Sep 4, 2014 11:03:44 AM org.apache.catalina.core.ApplicationContext log
>>
>> SEVERE: SafeContextLoaderListener: 
>>
>> The Spring ContextLoaderListener we wrap threw on contextInitialized.
>>
>> But for our having caught this error, the web application context
>> would not have initialized.
>>
>> org.springframework.beans.factory.BeanCreationException: Error
>> creating bean with name 'centralAuthenticationService' defined in
>> ServletContext resource
>> [/WEB-INF/spring-configuration/applicationContext.xml]: Cannot
>> resolve reference to bean 'authenticationManager' while setting
>> constructor argument; nested exception is
>> org.springframework.beans.factory.BeanCreationException: Error
>> creating bean with name 'authenticationManager' defined in
>> ServletContext resource [/WEB-INF/deployerConfigContext.xml]: Cannot
>> resolve reference to bean 'proxyAuthenticationHandler' while setting
>> constructor argument; nested exception is
>> org.springframework.beans.factory.BeanCreationException: Error
>> creating bean with name 'proxyAuthenticationHandler' defined in
>> ServletContext resource [/WEB-INF/deployerConfigContext.xml]: Cannot
>> resolve reference to bean
>> 'supportsTrustStoreSslSocketFactoryHttpClient' while setting bean
>> property 'httpClient'; nested exception is
>> org.springframework.beans.factory.NoSuchBeanDefinitionException: No
>> bean named 'supportsTrustStoreSslSocketFactoryHttpClient' is defined
>>
>>
>> Any thoughts appreciated ..
>>
>>
>> Regards,
>>
>>
>> Michael Holstein
>>
>> ​Cleveland State University
>>
>> -- 
>> You are currently subscribed to cas-user@lists.jasig.org as: 
>> jgas...@unicon.net
>> To unsubscribe, change settings or access archives, see 
>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
>
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: 
> michael.holst...@csuohio.edu
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: 
> jgas...@unicon.net
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
*John Gasper*
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

RE: [cas-user] CAS as WS-Federation proxy

2014-09-04 Thread Michael O Holstein 
John,

CAS is 4.0 and WS-Federation is 1.0.0

I should have also mentioned that a "vanilla" build using Maven, et.al. but 
minus the WS-Federation bit did build and deploy successfully, so I've 
introduced the failure with this module.

I'm happy to try earlier or bleeding if it's known to work better in one of 
them.

Thanks,

~Mike.

From: John Gasper 
Sent: Thursday, September 04, 2014 11:33 AM
To: cas-user@lists.jasig.org
Subject: Re: [cas-user] CAS as WS-Federation proxy

Hi Michael,

What version of CAS Server are you trying to deploy?

John

--
John Gasper
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef

On 9/4/14 8:11 AM, Michael O Holstein wrote:

Hello list,


I am trying to configure CAS to act as a WS-Federation proxy per the 
instructions found here :


https://github.com/Unicon/cas-adfs-integration/wiki/wsfederation-cas-config

and the original author's blog here :

http://sites.ewu.edu/jgasper/setting-up-adfs-to-communicate-with-the-ws-federation-cas-module/


I followed the instructions in the first link verbatim, and this is a complete 
delegation .. namely, the only things in my pom.xml are :


cas-server-webapp

cas-server-core

cas-server-support-wsfederation

xml-apis (this one to resolve a dependency that maven doesn't catch)


The files that were required to be modified in the instructions were taken from 
the cas source tarball, modified per the Unicorn Github doc, and placed in the 
tree a'la Maven overlay. The WAR builds without complaint.


I've worked through several errors with the help of Google and list archives, 
but I'm stuck with this one as it appears the WS-Federation stuff is a one-off 
case .. when the WAR deploys in Tomcat I get :


Sep 4, 2014 11:03:44 AM org.apache.catalina.core.ApplicationContext log

SEVERE: SafeContextLoaderListener:

The Spring ContextLoaderListener we wrap threw on contextInitialized.

But for our having caught this error, the web application context would not 
have initialized.

org.springframework.beans.factory.BeanCreationException: Error creating bean 
with name 'centralAuthenticationService' defined in ServletContext resource 
[/WEB-INF/spring-configuration/applicationContext.xml]: Cannot resolve 
reference to bean 'authenticationManager' while setting constructor argument; 
nested exception is org.springframework.beans.factory.BeanCreationException: 
Error creating bean with name 'authenticationManager' defined in ServletContext 
resource [/WEB-INF/deployerConfigContext.xml]: Cannot resolve reference to bean 
'proxyAuthenticationHandler' while setting constructor argument; nested 
exception is org.springframework.beans.factory.BeanCreationException: Error 
creating bean with name 'proxyAuthenticationHandler' defined in ServletContext 
resource [/WEB-INF/deployerConfigContext.xml]: Cannot resolve reference to bean 
'supportsTrustStoreSslSocketFactoryHttpClient' while setting bean property 
'httpClient'; nested exception is 
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 
'supportsTrustStoreSslSocketFactoryHttpClient' is defined


Any thoughts appreciated ..


Regards,


Michael Holstein

?Cleveland State University

--
You are currently subscribed to 
cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as: 
jgas...@unicon.net<mailto:jgas...@unicon.net>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user



--
You are currently subscribed to cas-user@lists.jasig.org as: 
michael.holst...@csuohio.edu
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] CAS as WS-Federation proxy

2014-09-04 Thread John Gasper 
Hi Michael,

What version of CAS Server are you trying to deploy?

John

-- 
*John Gasper*
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef

On 9/4/14 8:11 AM, Michael O Holstein wrote:
>
> Hello list,
>
>
> I am trying to configure CAS to act as a WS-Federation proxy per the
> instructions found here :
>
>
> https://github.com/Unicon/cas-adfs-integration/wiki/wsfederation-cas-config
>
> and the original author's blog here :
>
> http://sites.ewu.edu/jgasper/setting-up-adfs-to-communicate-with-the-ws-federation-cas-module/
>
>
> I followed the instructions in the first link verbatim, and this is a
> complete delegation .. namely, the only things in my pom.xml are :
>
>
> cas-server-webapp
>
> cas-server-core
>
> cas-server-support-wsfederation
>
> xml-apis (this one to resolve a dependency that maven doesn't catch)
>
>
> The files that were required to be modified in the instructions were
> taken from the cas source tarball, modified per the Unicorn Github
> doc, and placed in the tree a'la Maven overlay. The WAR builds without
> complaint.
>
>
> I've worked through several errors with the help of Google and list
> archives, but I'm stuck with this one as it appears the WS-Federation
> stuff is a one-off case .. when the WAR deploys in Tomcat I get :
>
>
> Sep 4, 2014 11:03:44 AM org.apache.catalina.core.ApplicationContext log
>
> SEVERE: SafeContextLoaderListener: 
>
> The Spring ContextLoaderListener we wrap threw on contextInitialized.
>
> But for our having caught this error, the web application context
> would not have initialized.
>
> org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'centralAuthenticationService' defined in
> ServletContext resource
> [/WEB-INF/spring-configuration/applicationContext.xml]: Cannot resolve
> reference to bean 'authenticationManager' while setting constructor
> argument; nested exception is
> org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'authenticationManager' defined in
> ServletContext resource [/WEB-INF/deployerConfigContext.xml]: Cannot
> resolve reference to bean 'proxyAuthenticationHandler' while setting
> constructor argument; nested exception is
> org.springframework.beans.factory.BeanCreationException: Error
> creating bean with name 'proxyAuthenticationHandler' defined in
> ServletContext resource [/WEB-INF/deployerConfigContext.xml]: Cannot
> resolve reference to bean
> 'supportsTrustStoreSslSocketFactoryHttpClient' while setting bean
> property 'httpClient'; nested exception is
> org.springframework.beans.factory.NoSuchBeanDefinitionException: No
> bean named 'supportsTrustStoreSslSocketFactoryHttpClient' is defined
>
>
> Any thoughts appreciated ..
>
>
> Regards,
>
>
> Michael Holstein
>
> ​Cleveland State University
>
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: 
> jgas...@unicon.net
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user



-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user