[cas-user] How to hide "redirect_url" at loginProviders in CAS login page when used delegated authentication?

2020-09-14 Thread zl anson
Hi all, I used CAS to do delegate authenticate to another idp used saml protocal, and this works fine. A thirdparty button will appears in login corner and when user clicks, it will generate saml url and redirect to idp's login page. But question is ,when our website are doing audit, th

[cas-user] Deny the authentication with Google using Pac4j, when the email_verified = [false]

2020-09-14 Thread Fernando Gómez
Hello, I am writing to see if you can guide me, I need to deny the authentication with Google using Pac4j, when the email_verified = [false], or when the email does not exist because for example it is private. Thanks in advance -- - Website: https://apereo.github.io/cas - Gitter Chatroom: http

Re: [cas-user] [CAS As Authorization Server Problem]

2020-09-14 Thread Ray Bon
Nguyen, I am wonder if it is network access. I meant to try curl "https://ssostandalone.vdc2.com.vn:8443/cas/login to be sure cas is running correctly. I have not used oauth so maybe you already know cas is working correctly. Ray On Mon, 2020-09-14 at 23:09 +0700, Nguyen Tran Thanh Lam wrote:

Re: [cas-user] [CAS As Authorization Server Problem]

2020-09-14 Thread Nguyen Tran Thanh Lam
Hi Ray, I have tried root@ssostandalone:~# curl " https://ssostandalone.vdc2.com.vn:8443/cas/oauth2.0/authorize?response_type=code&client_id=clientid&redirect_uri=https%3A%2F%2Fhello.*"; | jq But it still request nothing. If I use root@ssostandalone:~# curl " https://ssostandalone.vdc2.com.vn:8443/

Re: [cas-user] [CAS As Authorization Server Problem]

2020-09-14 Thread Ray Bon
Nguyen, Try double quotes and escape :// in redirect_uri, replace it with %3A%2F%2F Can you curl https://ssostandalone.vdc2.com.vn:8443/cas/login Ray On Mon, 2020-09-14 at 22:11 +0700, Nguyen Tran Thanh Lam wrote: Notice: This message was sent from outside the University of Victoria email syst

Re: [cas-user] CAS 6.2.1: InvalidTicketException after Login with OIDC

2020-09-14 Thread Ray Bon
Frederik, This sounds like something that could be fixed with user education. Why would a user bookmark a log in page? cas.view.default-redirect-url will only be triggered if no service is provided. Ray On Mon, 2020-09-14 at 05:16 -0700, 'Frederik B.' via CAS Community wrote: Notice: This mess

[cas-user] RE: CAS 6.1 git service registry

2020-09-14 Thread King, Robert
I found the solution to my configuration issues. The service registry Git option is using SSH to do git pull/push as the tomcat user. For the system to work properly you should setup your tomcat user to be able to do git push/pull via console. I had to set up that user with a SSH key pair and

Re: [cas-user] how to config CAS in Java code?

2020-09-14 Thread Ray Bon
James There is the spring configuration server, https://apereo.github.io/cas/6.1.x/configuration/Configuration-Server-Management.html Is this what you mean? Ray On Mon, 2020-09-14 at 02:12 -0700, jm wrote: Notice: This message was sent from outside the University of Victoria email system. Ple

Re: [cas-user] [CAS As Authorization Server Problem]

2020-09-14 Thread Nguyen Tran Thanh Lam
Hello Mr Sven Specker I have tried 1. Using Ubuntu command line like this root@ssostandalone:~# curl ' https://ssostandalone.vdc2.com.vn:8443/cas/oauth2.0/authorize?response_type=code&client_id=clientid&redirect_uri=https://hello.*' | jq End it responses nothing 2. Then I try to use POSTMAN Like th

[cas-user] CAS 6.2.1: InvalidTicketException after Login with OIDC

2020-09-14 Thread 'Frederik B.' via CAS Community
We use CAS as an OIDC Provider for our service. After upgrading from 6.0 to 6.2 we received reports from some of our users that they weren't able to login anymore but were presented an error page with a org.apereo.cas.ticket.InvalidTicketException. We found that the users reporting the problem

[cas-user] CAS 5.3.8 EhCache & DiskStorage Problem

2020-09-14 Thread Artur Stöcklin
Hi Community Currently we use the CAS in version 5.3.8. There are two instances which share tickets through the ehcache (version 2.10.5). The CAS gets his property data from the cas config server. The problem we are facing applies to the EhCache disk storage. Unfortunately the tickets are not

[cas-user] how to config CAS in Java code?

2020-09-14 Thread jm
Hi, We have a configuration center service in our company, who holds every application's configuraions. I have to use this configuration service because it's very hard to use a configuration file on our K8S cluster. Is there any way to convert those settings from our configuration server to C

Re: [cas-user] [CAS As Authorization Server Problem]

2020-09-14 Thread Sven Specker
On 2020-09-14 10:33, Napoleon Ponaparte wrote: Hi! Step 2: I request Authorization code like this: Request curl https://ssostandalone.vdc2.com.vn:8443/cas/oauth2.0/authorize?response_type=code&client_id=clientid&redirect_uri=https://hello.* Response [1] 14428 [2] 14429 That looks like a bash

[cas-user] How can i set cas servises (defined in json file) to use indexed auth: cas.authn.ldap[x] ?

2020-09-14 Thread artur mis
Hello: I have got : cas.authn.ldap[0] etc for index 0 and cas.authn.ldap[1] etc for index 1 service A I want that use definistion in index 0. This one is defined for let say wab page A service B i want that it use aut deinfied in index 1. This one is definded lets say for wab service B.

[cas-user] [CAS As Authorization Server Problem]

2020-09-14 Thread Napoleon Ponaparte
Hi, I am using CAS Apereo version 6.1.7 and I want to user CAS server as Authorization server. Here is my service registry: Step 1: Register service cat /etc/cas/services-repo/MyOAuthservice-100.json { "@class" : "org.apereo.cas.support.oauth.services.OAuthRegisteredService", "clientId": "cli