Re: [cas-user] Cannot open Apereo CAS version 5.3.x document

2022-04-23 Thread William Jojo
Try https://apereo.github.io/cas/Older-Versions.html Sent from a device. > On Apr 23, 2022, at 11:31 AM, '刘观良' via CAS Community > wrote: > >  > why 5.3.x cannot open, but version 6.x and above can be opened. I checked it > out two days ago, and it can be opened. > > 404 appears >

Re: [cas-user] How to setup CAS SSO: Help, some ideas or ressources

2022-04-14 Thread William Jojo
@RootName, Welcome to CAS! To better assist you, what exactly do you want out of this? CAS as an IdP with only the CAS protocol, SAML or both? Moodle: https://docs.moodle.org/311/en/CAS_server_(SSO)_authentication Office 365:

[cas-user] Re: CAS 6.x as a Shibboleth replacement ?

2022-04-09 Thread William Jojo
FWIW, we were once a Shib shop. Then we went to SimpleSAMLphp for the SAML piece while CAS served only the CAS protocol. We have since moved everything into CAS starting in 6.1. The config is very versatile in the service properties. We have some interesting vendors who want the craziest names

[cas-user] Re: CAS PM password reset works on 6.3.7.4 but not 6.4.6.2 (same config)

2022-04-06 Thread William Jojo
, 2022 at 5:35:39 AM UTC-4 William Jojo wrote: > Our password reset config has worked perfectly on 6.1, 6.2, and 6.3. > Moving to 6.4 seems to have some bug. > > Please see the log entries below. It seems the JDBC PM service thinks the > query is null. > > 6.3.7.4 debug

[cas-user] CAS PM password reset works on 6.3.7.4 but not 6.4.6.2 (same config)

2022-04-06 Thread William Jojo
Our password reset config has worked perfectly on 6.1, 6.2, and 6.3. Moving to 6.4 seems to have some bug. Please see the log entries below. It seems the JDBC PM service thinks the query is null. 6.3.7.4 debug at the point of using the reset link: 2022-04-06 04:49:27,511 DEBUG

[cas-user] Re: 6.4.6.2 Could not get unknown property 'Files' for task ':getResource' of type org.gradle.api.DefaultTask.

2022-04-01 Thread William Jojo
), StandardCopyOption.REPLACE_EXISTING) Hope this helps someone else. And, if anyone has an idea why I'd love to know... Bill On Friday, April 1, 2022 at 9:50:22 AM UTC-4 William Jojo wrote: > Hello, > > I have tried clearing my .gradle cache and I am running out of ideas to > get these resources extract

[cas-user] Re: 6.4.6.2 Could not get unknown property 'Files' for task ':getResource' of type org.gradle.api.DefaultTask.

2022-04-01 Thread William Jojo
Hello, I have tried clearing my .gradle cache and I am running out of ideas to get these resources extracted. Any help is greatly appreciated. Thank you! On Friday, April 1, 2022 at 5:32:37 AM UTC-4 William Jojo wrote: > Hello all, > > Trying to extract template views using ge

[cas-user] 6.4.6.2 Could not get unknown property 'Files' for task ':getResource' of type org.gradle.api.DefaultTask.

2022-04-01 Thread William Jojo
Hello all, Trying to extract template views using getResource and I keep getting the following: > Task :getResource FAILED FAILURE: Build failed with an exception. * Where: Script '/opt/workspace/6.4-new/cas-overlay-template/gradle/tasks.gradle' line: 341 * What went wrong: Execution failed

[cas-user] Re: delegated auth not working after upgrade to CAS 6.4.2

2021-11-15 Thread William Jojo
Noelette, Confirmed. I am doing non-autoforwarding SAML2 delegation to Azure. I have nginx proxy in front of embedded Tomcat app.war. Works in 6.3.7.1, borked in 6.4.2. Double-checked all of my cas.properties, nothing amiss. In 6.3.7.1 (working): 2021-11-15 07:04:50,891 DEBUG

Re: [cas-user] 6.3 and 6.4 Deploy embedded Tomcat container behind proxy does not work.

2021-11-15 Thread William Jojo
/catalina/valves/RemoteIpValve.html > NB2 : it requires rev proxy to set some headers. > - nginx : proxy_set_header X-Forwarded-Proto $scheme > - apache2 httpd : RequestHeader set X-Forwarded-Proto > expr=%{REQUEST_SCHEME} > > > On 15/11/2021 00:07, William Jojo wrote: > &g

[cas-user] Re: 6.3 and 6.4 Deploy embedded Tomcat container behind proxy does not work.

2021-11-14 Thread William Jojo
Ugh, of course it makes a difference. It is not using AJP any more... Clearly some rest is in order... Bill On Sun, Nov 14, 2021 at 7:14 PM William Jojo wrote: > Well, it seems adding the following: > > cas.server.tomcat.http-Proxy.protocol=HTTP/1.1 > > Makes a difference. No

[cas-user] Re: 6.3 and 6.4 Deploy embedded Tomcat container behind proxy does not work.

2021-11-14 Thread William Jojo
Well, it seems adding the following: cas.server.tomcat.http-Proxy.protocol=HTTP/1.1 Makes a difference. Not entirely sure why. Can anyone shed light on this? Thank you! Bill On Sunday, November 14, 2021 at 6:08:11 PM UTC-5 William Jojo wrote: > Hello all, > > Whenever I tr

[cas-user] 6.3 and 6.4 Deploy embedded Tomcat container behind proxy does not work.

2021-11-14 Thread William Jojo
Hello all, Whenever I try to used the Fawnoos doc on configuring the CAS (6.3 or 6.4) embedded Tomcat behind a proxy, I always get: *The AJP Connector is configured with secretRequired="true" but the secret attribute is either null or "". This combination is not valid.* Even with the following:

Re: [cas-user] CAS 6.3.5-Azure AD Delegation-OIDC-JDBC-LDAP

2021-07-29 Thread William Jojo
. Any insight would be most helpful. I cannot be the only person using the feature. Bill On Thu, Jul 29, 2021 at 1:55 PM William Jojo wrote: > To anyone who is familiar with the username (user) value being set by the > claims of OIDC in Azure AD Delegation. CAS is setting the us

Re: [cas-user] CAS 6.3.5-Azure AD Delegation-OIDC-JDBC-LDAP

2021-07-29 Thread William Jojo
for additional attributes. Can anyone shed light on this? Thank you! Bill On Wed, Jul 28, 2021 at 6:52 PM William Jojo wrote: > Hello, > > I will try to keep this to the point. > > CAS is using the subject claim from AzureAD Delegation upon return from > auth and setting it as the u

[cas-user] CAS 6.3.5-Azure AD Delegation-OIDC-JDBC-LDAP

2021-07-28 Thread William Jojo
Hello, I will try to keep this to the point. CAS is using the subject claim from AzureAD Delegation upon return from auth and setting it as the username regardless of the setting of: cas.authn.pac4j.oidc[0].azure.principal-attribute-id=email I can use email, upn, does not matter, it is always

[cas-user] Re: CAS 6.1.6 inotify instances skyrocketing with Groovy files in SAML service.

2021-03-08 Thread William Jojo
Hi William, > > We are also facing the same issue like you. Could you please help us? > > On Tuesday, June 2, 2020 at 8:37:03 PM UTC+5:30 William Jojo wrote: > >> Well, I was able to stop the hemorrhaging. Have been watching it for >> about an hour and the inotify li

Re: [cas-user] cas-management application

2020-07-28 Thread William Jojo
Travis, I am producing some documentation on a bunch of topics that have been popping up here of late (Apache-shib, mod-auth-cas, cas-management, locust, etc) which I plan to release shortly. I wanted to know if there was a branch that needs testing so I can update the cas-management docs

[cas-user] Re: CAS 6.1.6 inotify instances skyrocketing with Groovy files in SAML service.

2020-06-02 Thread William Jojo
why this flies out of control. Also, if anyone has info on the syntax limitations of inline Groovy scripts and how to still do logging in the inline script that would be very helpful for debugging. Thank you! Bill On Monday, June 1, 2020 at 12:44:23 PM UTC-4, William Jojo wrote: > >

[cas-user] CAS 6.1.6 inotify instances skyrocketing with Groovy files in SAML service.

2020-06-01 Thread William Jojo
Been running 6.1.6 for about 2 weeks. No issues - until I added SAML support. This morning I noticed CAS no longer working. Checked log and found: >From log: 2020-06-01 09:05:32,086 INFO [org.apereo.cas.util.io.PathWatcherService] - <*Watching directory at [/etc/cas/saml]*> 2020-06-01

[cas-user] CAS 6.1.3 PM password reset link question.

2020-01-24 Thread William Jojo
Good morning! When requesting a password reset from the main CAS login page (not via service) you receive a link like the following: https://casdev.hvcc.edu/cas/login?pswdrst=TST-1-ATe9S6Bym5Vq8Prk6lMa9Pr86war7Ijf However, if selected from a service's login page, you get the following

[cas-user] CAS Management 6.1.0-RC4 BUGS

2020-01-23 Thread William Jojo
Hope this is the right place to list CAS Management bugs, there are several to report. Please know that I love the tool and wanted to provide detailed feedback. My management.properties looks like: cas.server.name=https://casdev-master.hvcc.edu cas.server.prefix=${cas.server.name}/cas

Re: [cas-user] Re: CAS 6.1.3 PM JDBC Bug

2020-01-23 Thread William Jojo
Andy, Awesome! Thank you for the heads up! Bill On Thu, Jan 23, 2020 at 1:10 AM Andy Ng wrote: > Hi Bill, > > Seems like the CAS team will be fixing this in latest CAS version, see > this commit: > > https://github.com/apereo/cas/commit/e214dba59c2273409c406cf4301e2dc875183295 > > Looks to me

[cas-user] CAS 6.1.3 PM JDBC Bug

2020-01-16 Thread William Jojo
Hello all, Running CAS 6.1.3, OpenJDK 11.0.4, CAS Oracle driver (ojdbc10-19.3.0.0.jar) on Ubuntu 18.04. In 5.3.x we never needed to set a value for the *cas.authn.pm.jdbc.sqlFindPhone*. In fact, we do not use it. It seems in 6.1.3 there must be a query set. Otherwise you get the following:

Re: [cas-user] Re: CAS 6.x Error while deploying cas.war in tomcat

2020-01-08 Thread William Jojo
Dmitriy, Late to the party on this one. This solution worked for me on Ubuntu 18.04 with distro packaged Tomcat 9.0.16. Thank you! What are the ramifications of setting this value? Bill On Wednesday, November 13, 2019 at 8:58:43 AM UTC-5, Dmitriy Kopylenko wrote: > > For what it's worth - if

Re: [cas-user] CAS PM JDBC 5.1.5 double query

2018-02-26 Thread William Jojo
On Saturday, February 24, 2018 at 3:28:23 PM UTC-5, Manfredo Hopp wrote: > > Send the same with hibernate debug > > El sábado, 24 de febrero de 2018, William Jojo <joj...@gmail.com > > escribió: > >> My question is very simple. Why on Earth are there two separate calls f

[cas-user] CAS PM JDBC 5.1.5 double query

2018-02-24 Thread William Jojo
My question is very simple. Why on Earth are there two separate calls for validating PM questions? There is a query to get the question(s) followed by what seems like another query to get the answer(s). The format requires the query to be in the form of: select question, answer from table name

[cas-user] Password Reset "500 Internal Server Error" CAS 5.1.5

2017-11-01 Thread William Jojo
Is there a way to better handle a user not yet having an email in our database of questions for PW reset? Currently get 500 Internal Server Error: We wish we could be more directly helpful to you. Error: Exception thrown executing

[cas-user] CAS 5.1.x Password reset link contains dot that breaks link on some devices/apps.

2017-09-25 Thread William Jojo
Is there a quick way to change the link sent from CAS PM? The link often contains multiple instances of a period which breaks the links in some readers/apps. Changing the period to %2e works always works, but can this be done within CAS? Should I file this as a bug? Thank you! -- - Website:

[cas-user] Re: CAS 5.1.x Custom template. Anyone get this working?

2017-09-25 Thread William Jojo
gt; You can even just leave css blank, you do what you need > > ** cas.js (G)* > > You can even just leave js blank, you do what you want > > > If you access your cas site using this: > https://cas.sso.com/cas/login?service=https://dino.example.com > The Jurassic theme should

[cas-user] CAS 5.1.x Custom template. Anyone get this working?

2017-09-19 Thread William Jojo
As the title suggests, we are unable to make this work. Cannot figure out what might be causing custom templates to be ignored. CSS/JS theming works fine, but custom templates are needed to make structural changes. The log shows the service recognizing the theme name, but our fragments are not

[cas-user] Re: 5.1.3 JDBC Password Management issues (two)

2017-09-01 Thread William Jojo
Ok, I fixed the update problem - it was the MySQL dialect I chose. However, the presentation of multiple questions and accepting multiple answers seems like a bug to me. Bill On Wednesday, August 30, 2017 at 9:33:45 AM UTC-4, William Jojo wrote: > > Good day to you all! > > As

[cas-user] 5.1.3 JDBC Password Management issues (two)

2017-08-30 Thread William Jojo
Good day to you all! As the subject says, I am having two issues with JDBC Password Management. The first involves the questions. 2017-08-29 20:42:15,243 DEBUG [org.apereo.cas.pm.jdbc.JdbcPasswordManagementService] - All three questions are found in the DB and the form presents all of the

Re: [cas-user] AD Password Policy in 5.1.x.

2017-08-29 Thread William Jojo
Perfect! As always, thank you so much! Bill On Tuesday, August 29, 2017 at 10:21:29 AM UTC-4, Misagh Moayyed wrote: > > *password.expiration.warning=Your password expires in {0} day(s). Please > change your password now.* > > > Which, of course, translates the href to a local CAS link to {1}.

[cas-user] AD Password Policy in 5.1.x.

2017-08-29 Thread William Jojo
Password policy with AD seems like dabbling in the dark arts. ;-) In 4.2.7 you cannot use it: *Attribute 'usePasswordPolicy' is not allowed to appear in element 'ldaptive:ad-authenticator'.* But you need ad-authenticator to make the return codes work and notify users of expired accounts and

Re: [cas-user] Re: Password Management Assistance

2017-07-07 Thread William Jojo
, 2017 at 6:26:59 PM UTC-4, William Jojo wrote: > > I see all three questions now! But I cannot get to the password entry page > unless I only use one question. > > Also, I read in another thread that the JDBC drivers have an issue at > 5.1.1 (which I, too, experienced) and th

Re: [cas-user] Re: Password Management Assistance

2017-07-07 Thread William Jojo
I see all three questions now! But I cannot get to the password entry page unless I only use one question. Also, I read in another thread that the JDBC drivers have an issue at 5.1.1 (which I, too, experienced) and the person suggested using 5.0.6 - which works. Should this also be fixed in

Re: [cas-user] Re: Password Management Assistance

2017-07-06 Thread William Jojo
s/5.1.x/installation/Configuration-Management-Extensions.html > > More or less the same: > https://apereo.github.io/2017/02/21/cas-autocfg-strategy/ > > --Misagh > > On July 6, 2017 at 12:48:06 PM, William Jojo (joj...@gmail.com > ) wrote: > > Thank you, Misagh. I am looking a

Re: [cas-user] Re: Password Management Assistance

2017-07-06 Thread William Jojo
Thank you, Misagh. I am looking at the code tree at https://github.com/apereo/cas/blob/master/support/cas-server-support-pm/src/main/java/org/apereo/cas/pm/. Again, at the moment, I am attempting to trigger the basic PM functionality, then I can determine the injection point. If may attempt is

[cas-user] Password Management Assistance

2017-07-04 Thread William Jojo
First, I thank all of those who contribute to CAS, to the user community and to the online docs/how-to's which have enlightened my knowledge thus far. CAS has been a wonderful SSO tool at our college. Second, I have both a question and request from the community. Currently we face having to use a