[cas-user] Re: Service registry initialisation using JSON files. Help needed

2017-09-20 Thread Andy Ng
Hi Didier, Seems like your service registry config location is invalid. In my application.properties I always uses file:/ instead of file:// and it works. Maybe you can tries *cas.serviceRegistry.config.location=file:/etc/cas/json* if not ok, you can also try

Re: [cas-user] Change query and encode database authentication hashing algorithm.

2017-09-20 Thread Misagh Moayyed
> And in addition I wondered why this relatively simple hashing is delegated to > apache shiro while you can write it yourself with only the > java.security.MessageDigest dependency in almost the same amount of lines. The > 'default' MessageDigest also supports all the algorithms. IMO this would >

Re: [cas-user] How to turn off SSO authentication on client side occasionally

2017-09-20 Thread Ray Bon
Tiancheng, My filter knowledge may be rusty but you could break out of the filter chain when !isSsoOn. if (isSsoOn){ chain.doFilter(request, response); // continue with CAS filters }else{ String path = ...; // non SSO login response.sendRedirect(path); } Ray On Wed, 2017-09-20 at

Re: [cas-user] Change query and encode database authentication hashing algorithm.

2017-09-20 Thread Stef Schenkelaars
Yes, for now it is only the appended part which is blocking. But I could also imagine other algorithms that are not supported now, think about pepper or adding the salt every iteration. In my opinion it would be great to add the possibility to choose your hash class, just like you select your

[cas-user] CAS 5.0.x to 5.1.x upgrade guide?

2017-09-20 Thread Adam Causey
Is there an upgrade guide to go from CAS 5.0.x to 5.1.x? I am not able to start CAS using the 'java -jar cas.war' as I was previously. I only get this output: [36m __ _ __ / / / ___|/ \/ ___| \ \ | | | | / _ \ \___ \ | | | | | |___ / ___ \

Re: [cas-user] Change query and encode database authentication hashing algorithm.

2017-09-20 Thread Misagh Moayyed
> Hi Cas Community, > I am trying to setup a cas server with query and encode database > authentication > handler. In the current application, the encrypted password is calculated with > 20 runs of SHA-512 with an APPENDED salt. However since this encoding is > delegated to Apache Shiro's

[cas-user] Change query and encode database authentication hashing algorithm.

2017-09-20 Thread Stef Schenkelaars
Hi Cas Community, I am trying to setup a cas server with query and encode database authentication handler. In the current application, the encrypted password is calculated with 20 runs of SHA-512 with an APPENDED salt. However since this encoding is delegated to Apache Shiro's

[cas-user] [CAS 5.1.3] status/config page is displayed but without parameters

2017-09-20 Thread Didier Capdevielle
Hi all, I use CAS Server 5.1.3 on debian stretch witj tomcat8 and Java 1.8. I can display all status pages but status/config is empty with messages "No data available in table" and "Showing 0 to 0 of 0 entries". I suppose there is a new security (comparing to 5.0.x) but how to display config ?

[cas-user] Re: Service registry initialisation using JSON files. Help needed

2017-09-20 Thread Didier Capdevielle
Hi all, I use CAS server 5.1.3 on Debian Stretch with Tomcat8 and Java 1.8 In cas.properties, *cas.serviceRegistry.initFromJson=true* *cas.serviceRegistry.config.location=file://etc/cas/json* In pom.xml, the needed dependency. But don't work (NB: It works if i cas.serviceRedistry.config.location

[cas-user] Re: How to turn off SSO authentication on client side occasionally

2017-09-20 Thread TimothyHu
I'm using CasServer 4.2.7 and CasClient 3.4.1, aiming at normal Servlet Apps. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you

[cas-user] cas 5.0.8 ldap authentication error

2017-09-20 Thread mceylan
Hi, I am using cas 5.0.8. I am working on Openldap authentication. I get an invalid credentials error when I enter the username and password I created on OpenLDAP. add dependency for ldap vim pom.xml0 org.apereo.cas cas-server-support-ldap ${cas.version}

[cas-user] How to turn off SSO authentication on client side occasionally

2017-09-20 Thread Tiancheng Hu
For certain necessities, I've to implement a *switchable* SSO scheme in WebApp side. Current plan is to add a top-level filter which retrieves SSO ON/OFF config, forwards to 4 SSO filters + 1 SLO filter when SSO's on, or keep on to non-SSO authentication when SSO' off. if (!isSsoOn){

[cas-user] Re: CAS 5.2.0-RC3 saml 2.0 response KeyInfo how to configure

2017-09-20 Thread Andy Ng
Hi all: I found out the problem occurs in this file: org.apereo.cas.support.saml.web.idp.profile.builders.enc.BaseSamlObjectSigner, in the function [protected SignatureSigningConfiguration getSignatureSigningConfiguration()] Instead of adding a *BasicX509Credential *to the credidential, a