Re: [cas-user] CAS-Management not starting due to Self Signed Certificate Error - I'm at a loss

2020-09-02 Thread Ray Bon
Colin, I run it in a separate tomcat on my local (that is where I am in the upgrade process). Our sysadmins have switched to multiple applications managed, not run by, a single tomcat. I have not set up my local for that yet. It involves the difference between CATALINA_BASE and CATALINA_HOME.

Re: [cas-user] CAS-Management not starting due to Self Signed Certificate Error - I'm at a loss

2020-09-02 Thread Ray Bon
Colin, Have you tried running in a standalone tomcat? I have never used the embedded one. We front our tomcat with apache and connect with ajp. Ray On Wed, 2020-09-02 at 12:33 -0400, Colin Ryan wrote: So as a follow-on Phase 3. I moved this whole thing to a Linux environment in the off

Re: [cas-user] How to give encrypted password in cas.properties for redis ticket registry

2020-09-02 Thread Ray Bon
Priyambada, Are those spring boot properties? We add our secrets in as part of the deploy process, they are encrypted in an ansible vault. In some cases entire files are stored. This looks like a better system if only bootstrap.properties needs protection. Ray On Wed, 2020-09-02 at 08:01

Re: [cas-user] CAS-Management not starting due to Self Signed Certificate Error - I'm at a loss

2020-09-02 Thread Colin Ryan
So as a follow-on Phase 3. I moved this whole thing to a Linux environment in the off chance that macOS's 10.15 funky overlay filesystems were causing me grief. No joy. Can someone do me a favour and just confirm that the cas-management-overlay out of the box build will work with a self

Re: [cas-user] How to give encrypted password in cas.properties for redis ticket registry

2020-09-02 Thread Priyambada Madala
Thank you @leleuj . I could solve the issue with providing the following configs . bootstrap.properties : encrypt.key=secretekey cas.properties : cas.ticket.registry.redis.password={cipher}520b0bce66df5446f764fcbce5828d18ac5872a67 On Wednesday, September 2, 2020 at 4:56:15 PM UTC+5:30

Re: [cas-user] How to give encrypted password in cas.properties for redis ticket registry

2020-09-02 Thread Jérôme LELEU
Hi, See: https://apereo.github.io/cas/6.2.x/configuration/Configuration-Properties-Security.html to secure your properties. Thanks. Best regards, Jérôme Le mer. 2 sept. 2020 à 13:22, Priyambada Madala a écrit : > Passwords for your redis cluster should be treated as a sensitive > information

Re: [cas-user] How to give encrypted password in cas.properties for redis ticket registry

2020-09-02 Thread Priyambada Madala
Passwords for your redis cluster should be treated as a sensitive information . It would be nice to have the password encrypted with a private key. On Tuesday, September 1, 2020 at 8:44:37 PM UTC+5:30 Ray Bon wrote: > Priyambada, > > Why do you want an encrypted password in your config? > > Ray