Re: [cas-user] Attribute Resolution and Merging Radius and LDAP

2019-11-06 Thread Colin Ryan
So I've continue to try to get this to work, and implemented mod_auth_cas with SAML support in apache server so as to maybe see if that triggered the attribute merging, specifically using the cas-attribute directive to I was hoping force pulling/releasing of attributes. Using Require

Re: [cas-user] Radius Authentication seems not work if MFA is not enabled on CAS 6.1.x, is that intended?

2019-11-06 Thread Andy Ng
Hi Colin Thanks for the advice! It work after adding `cas:cas-server-support-simple-mfa`. Pretty sure that is a bug lol, see if I can trace it down when free, thanks again. Cheers! - Andy -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List

Re: [cas-user] Radius Authentication seems not work if MFA is not enabled on CAS 6.1.x, is that intended?

2019-11-06 Thread Colin Ryan
I ran across this too. I had to add the gradle linkage for simple MFA to get around this. compile "org.apereo.cas:cas-server-support-simple-mfa:${project.'cas.version'}" Not sure why, but I did. colin On 2019-11-06 2:28 a.m., Andy Ng wrote: Hi all, In my quest to test out some CAS

[cas-user] Issue with Ticket Registry Cleanup (MongoDB - CAS 5.3.12.1

2019-11-06 Thread Paul Chauvet
Hi all, There's an error that is in our cas.log file very two minutes, regarding the DefaultTicketRegistryCleaner. The error is coming up on all three of our production CAS servers. I don't know if it is causing issues or not - but when I look at the ticket registry (MongoDB) - I see tickets

RE: [cas-user] mod_auth_cas and attributes

2019-11-06 Thread Jon Anderson
My recollection was that: CAS v1 returned just username as plain text CAS v2 returned just username in xml By then everybody wanted attribute delivery, and it was common in SAML, so as a sort of extension to CAS the service ticket validation request and response could be done with SAML 1.1

[cas-user] Re: Too many LDAP connections with 6.0.5

2019-11-06 Thread n99
For anyone else who finds themselves scratching their head over this cas.authn.ldap[0].providerClass=org.ldaptive.provider.unboundid. UnboundIDProvider is the magic setting if you are using open JDK 9, 11, 12, 13. https://bugs.openjdk.java.net/browse/JDK-8217606 and "The JNDI provider

Re: [cas-user] mod_auth_cas and attributes

2019-11-06 Thread Alberto Cabello Sánchez
On Mon, 4 Nov 2019 17:16:33 + Ray Bon wrote: > Alberto, > > My apologies. I missed the part about cas protocol v2. Attribute release > is available only with protocol v3 and saml 1.1 (and saml 2). No need to apologize, of course! A little more explanation is welcome, though... I read in

[cas-user] Problems with Single Logout when using CAS as SAML Client

2019-11-06 Thread lars.grefer
Hello everyone, we have a problem with using CAS 5.3.12.1 as SAML client for delegated authentication. The login process seems to work fine, but an SAML-IDP initiated logout causes the following exception inside CAS: 2019-10-24 14:10:04,330 INFO

Re: [cas-user] Sample Java Web Application to test the login

2019-11-06 Thread Steve Cheung
Hi andy, thx I hv tried the sample java web app . It seems not very details for my poc. Btw, many thx for suggestion. Will look into the other links as well. Thx, steve Sent from my iPhone > On 6 Nov 2019, at 16:33, Andy Ng wrote: > >  > Hi Steve, > > > build sample java web app on

Re: [cas-user] Re: configure CAS 6.1 to operate with another application

2019-11-06 Thread ratm
Thanks, i do that. Cheers, Anthony Le mercredi 6 novembre 2019 10:12:41 UTC+1, Andy Ng a écrit : > > Hi Anthony, > > > First (of all), i thinks it's better to explain in the readme.md that > copyCasConfiguration only copy /cas-overlay-template-version/etc/cas/config > into /etc/cas/config to

Re: [cas-user] Re: configure CAS 6.1 to operate with another application

2019-11-06 Thread Andy Ng
Hi Anthony, > First (of all), i thinks it's better to explain in the readme.md that copyCasConfiguration only copy /cas-overlay-template-version/etc/cas/config into /etc/cas/config to avoid bad interpretation. Secondly why copyCasConfiguration doesn't copy entire folder

Re: [cas-user] Re: configure CAS 6.1 to operate with another application

2019-11-06 Thread ratm
Thanks for response and help ! I have many questions andsuggestions : First (of all), i thinks it's better to explain in the readme.md that copyCasConfiguration only copy /cas-overlay-template-version/etc/cas/config into /etc/cas/config to avoid bad interpretation. Secondly why

Re: [cas-user] Sample Java Web Application to test the login

2019-11-06 Thread Andy Ng
Hi Steve, > build sample java web app on tomcat Ah, I see > a typical Java EE security web application. I haven't seen any Java EE security web application on the web, so can't recommend any Java EE security web application example to you. A few suggestions, see if those can help you: - Follow

[cas-user] Re: CAS 6.0.5.1 and RADIUS Auth.

2019-11-06 Thread Andy Ng
Hi all, Have encounter the same issue with CAS 6.1.x. I have make my CAS to build with Radius Authentication by including the following url for repositoryies: maven { url "https://maven.repository.redhat.com/ga/; } I am also not very sure if this is an appropriate fix.. but it works for me -

Re: [cas-user] Sample Java Web Application to test the login

2019-11-06 Thread Steve Cheung
Hi Andy, I suggest to build sample java web app on tomcat to test login function via CAS. i am looking for a typical Java EE security web application. On Wed, Nov 6, 2019 at 3:47 PM Andy Ng wrote: > Hi Steve, > > What language of sample web app are you talking about, PHP? Java? Others? > >