Re: [cas-user] Force Reauthentication for OAuth Protocol CAS 5.3.x

2019-07-24 Thread Justin Isenhour
Hey Ray, Thanks for the suggestion. I had considered that, my concern with this approach is that it would end the SSO session for the user across the board, forcing them to reauthenticate for all apps, not just this one. This may end up being the solution but my hope is to find a solution

Re: [cas-user] Force Reauthentication for OAuth Protocol CAS 5.3.x

2019-07-24 Thread Ray Bon
Justin, Your application can call /cas/logout when it destroys its local session (if you can edit the application or its config). Ray On Wed, 2019-07-24 at 14:14 -0700, Justin Isenhour wrote: Hello, We have a new application that we have set up SSO with using OAuth protocol. This

[cas-user] Force Reauthentication for OAuth Protocol CAS 5.3.x

2019-07-24 Thread Justin Isenhour
Hello, We have a new application that we have set up SSO with using OAuth protocol. This application has some HIPAA related information and they have a concern around the logout handling for their application. The basic flow is as follows: User goes to the site, user isn't authenticated and

[cas-user] Session count is huge or negative (-9223372036854776000)

2019-07-24 Thread Christian Poirier
Hi Does anyone already had a session count so bizarre? { "status":"UP", "memory":{ "status":"UP", "freeMemory":2245086872, "totalMemory":3817865216 }, "session":{ "status":"UP", "sessionCount":-9223372036854775808, "ticketCount":-9223372036854775808, "message":"OK" },

Re: [cas-user] Re: CAS management

2019-07-24 Thread Matthew Uribe
Thank you for confirming that your /var mount point is rw. Also, since you are running tomcat as root (definitely not recommended for PROD), permissions should not be an issue. It sounds like you need to make sure your configurations are all uniform. Specifically, that your

Re: [cas-user] Re: CAS management

2019-07-24 Thread alain ubfc
Matthew, I relanched tomcat each time as root. So i addes the user toto in the casermgnt group. I cheched the mounting of the partitions : casermgnt@casermgnt:~$ cat /proc/mounts sysfs /sys sysfs rw,nosuid,nodev,noexec,relatime 0 0 proc /proc proc rw,nosuid,nodev,noexec,relatime 0 0 udev /dev

[cas-user] CAS 4.1.x, how to override class in cas-server-core?

2019-07-24 Thread Yan Zhou
Hello, CAS 4.1.x, I want to override org.jasig.cas.authentication.UsernamePasswordCredential so that I can customize the validation logic. This class is part of cas-server-core jar, If I simply recreate this class in my overlay, I end up with two classes, one in WEB-INF/classes and the other

Re: [cas-user] Re: CAS management

2019-07-24 Thread Matthew Uribe
Alain, Your fstab file shows that /var should be mounting correctly, but a file system can become read-only for any number of reasons. If it is in fact read only, then any user, even root, would not be able to write to it. You could try the following command from the directory

Re: [cas-user] Re: CAS management

2019-07-24 Thread David Curry
Check that the process is actually running as tomcat. Turn on debug logging and see what's happening. Compare the owners and modes of the working logs (cas) to the non-working ones (cas-management). There's a permission that's wrong, or it's running as the wrong user, or there's a typo in a path

Re: [cas-user] Re: CAS management

2019-07-24 Thread David Curry
Are you positive that the tomcat process is actually running as the tomcat user? The error message says read-only file system. Are you sure the file system is mounted read-write? Can you create files in it? Have you turned on debug-level logging to get a more granular idea of what's going on?

Re: [cas-user] Re: CAS management

2019-07-24 Thread alain ubfc
Hello David, Thank you for your answer. The directory /var/log/cas-management has the following rights : drwxr-x--- 2 tomcat adm 4096 juil. 22 09:23 cas-management And for the filecas-management.log -rw-r- 1 tomcat tomcat0 juil. 19 14:39 cas-management.log That's what i did.

Re: [cas-user] Re: CAS management

2019-07-24 Thread David Curry
[2019-07-22 08:57:45] [info] 2019-07-22 08:57:45,023 main ERROR RollingFileManager (/var/log/cas-management/cas-management.log) java.io.FileNotFoundException: /var/log/cas-management/cas-management.log (Read-only file system) Is your file system mounted read-only? Is the directory writable by the

[cas-user] Re: Start with external configuration in CAS 6.1.x

2019-07-24 Thread first_step_with_CAS
I can't find version of this artifact for 6.1.0-RC5 W dniu środa, 24 lipca 2019 05:14:41 UTC+2 użytkownik Andy Ng napisał: > > which is why this failed => which might be why this failed - Andy > > On Wednesday, 24 July 2019 11:14:15 UTC+8, Andy Ng wrote: >> >> Hi, >> >> Do you want to import this

[cas-user] OAuth profile return fields as arrays

2019-07-24 Thread first_step_with_CAS
Why OAuth user profile return fields as arrays? { "number":[ "1234" ], "fullname": [ "John Smith" ], "email":[ "em...@example.com" ], "sso_id":[ "5d0364ef4fd1c900075487f0" ], "service":"https://url.com/redirect;,

[cas-user] Re: CAS management

2019-07-24 Thread alain ubfc
Hello, In fact I noticed that the/var/log/case-management file has nothing in it. Yet I set the rights for the file cas-management.log with the chown -R tomcat:tomcat/var/log/cas-management command. [2019-07-22 08:57:43] [info] 2019-07-22 08:57:43,429 main ERROR Could not create plugin of