Re: [cas-user] Regarding JWT and CAS Server

2016-10-21 Thread Ajay Madhavan
Sorry my bad. I did not understand what you meant initially. I was able to make the pac 4j work on my webapp. Also I was able to work on the suggestion you provided as to use the CAS identity but use JWTGenerator for the JWT instead of service tickets. As far as validation, I think I will move

Re: [cas-user] where is CAS TGC cookie stored in brower?

2016-10-21 Thread Andrew Morgan
On Fri, 21 Oct 2016, Yan Zhou wrote: OK, thx for explanation. I cannot see any TGC cookie in my browser. Why is that? If it is not there, how does Browser send to CAS server? You could try running something like Firefox's Live HTTP Headers add-on to view the headers sent and received when

Re: [cas-user] where is CAS TGC cookie stored in brower?

2016-10-21 Thread Andrew Morgan
On Fri, 21 Oct 2016, Yan Zhou wrote: Hello, It was said that the TGT cookie (TGC) is hidden, so that we won't see it. I am curious how browser can send such hidden cookie to CAS, when user goes to apps? If browser can see it, there should be a way for us to see it. The reason I am asking is

[cas-user] where is CAS TGC cookie stored in brower?

2016-10-21 Thread Yan Zhou
Hello, It was said that the TGT cookie (TGC) is hidden, so that we won't see it. I am curious how browser can send such hidden cookie to CAS, when user goes to apps? If browser can see it, there should be a way for us to see it. The reason I am asking is because I noticed that Ajax

[cas-user] CAS 5.0.0 RC4-SNAPSHOT - Customize JBDC query with more than the username

2016-10-21 Thread Erdal Gunyar
Hi all, Does anyone know if it is possible to customize the query of either the JDBC authentication or te JDBC attribute repository with the callback URL? The idea behind being to return different result depending on the site which called CAS server. I didn't see anything related to that, so

[cas-user] Installation/Configuration CAS 4.2.6 LDAP

2016-10-21 Thread Sebastian Wilde
Hello everybody, i think it's a very easy question for you, but i'm dispairing. I want to install cas Version 4.2.6 with LDAP Authentication. So i downloaded the Overlay from this site: https://github.com/apereo/cas-overlay-template and created the war file. Everything is working fine and i

[cas-user] Mailing lists: lags and blockages

2016-10-21 Thread Misagh Moayyed
I have noticed that a number of messages posted to CAS mailing lists get tagged as pending/blocked by google. It’s not immediately obvious why but I am keeping an eye to see if I can find a pattern. If you find that your messages are not reaching the lists, please contact the project.  As

Re: [cas-user] How CAS protect server side API in separate apps?

2016-10-21 Thread Ray Bon
Yan, If xyzservice needs to know who the user is, then clearpass is an option, https://apereo.github.io/cas/4.2.x/integration/ClearPass.html. Ray On 2016-10-20 09:28, Yan Zhou wrote: > > Hi > > > > We have CAS 4.1.x overlay. We have one webapp and one backend > services. Two different WAR

[cas-user] Cas client fails to communicate in TLS mode

2016-10-21 Thread Guru Prashanth Thanakodi
Hi All We have CAS 3.4.11 deployed on Apache Tomcat 7. Our Application is deployed on JBOSS 7.1. If we disable the TLS 1.0 communication in JASIG CAS Sever(Apache Tomcat) , We are unable to login. Here is the stack trace Thanks, Guru -- CAS gitter chatroom: https://gitter.im/apereo/cas CAS

Re: [cas-user] Issues using CAS JSON Service Registry. CAS 5.0.0.RC4-SNAP

2016-10-21 Thread Misagh Moayyed
Perfect. Thanks. Could I ask you to file an issue on the overlay project and include details, logs, etc? Just so we don’t forget to get to it.  From: Facundo Bove Reply: Facundo Bove Date: October 21, 2016 at 7:14:25 AM To: CAS Community

Re: [cas-user] Regarding JWT and CAS Server

2016-10-21 Thread Jérôme LELEU
Hi, "pac4j needs cas-server-core 4.0.0": how do you see that? Thanks. Best regards, Jérôme 2016-10-21 1:05 GMT+02:00 Ajay Madhavan : > Hi Jerome, > > I see that pac4j needs cas-server-core 4.0.0. But I use cas-server-core > 3.5.2.1. Is it compatible with that? > > Regards