Re: [cas-user] CAS 5.2 Passing LDAP Attributes to Application

2022-01-18 Thread Gowtham Krishna
Did you get solution to this, even i am having the same scenario and looking for the solution to the same question? On Wednesday, 11 August 2021 at 16:38:36 UTC+5:30 fryc...@gmail.com wrote: > Hello! > > And what to do if: > > I have CAS 5.2.3 and an LDAP connection. > > LDAP has 1 domain and 2

Re: [cas-user] CAS 5.2/5.3 cas.util.LdapUtils try connect to localhost for LDAP

2020-07-30 Thread mohsen saeedi
The problem solved! with remove cas-server-support-ldap-service-registry from pom.xml On Thursday, July 30, 2020 at 11:53:00 PM UTC+4:30 mohsen saeedi wrote: > I think i added cas-server-support-ldap-service-registry as dependency. > and i don't have any configuration parameter for that on

Re: [cas-user] CAS 5.2/5.3 cas.util.LdapUtils try connect to localhost for LDAP

2020-07-30 Thread mohsen saeedi
I think i added cas-server-support-ldap-service-registry as dependency. and i don't have any configuration parameter for that on cas.properties. maybe the problem caused for that!!! I will test again and send result here On Thursday, July 30, 2020 at 9:03:25 PM UTC+4:30 mohsen saeedi wrote: >

Re: [cas-user] CAS 5.2/5.3 cas.util.LdapUtils try connect to localhost for LDAP

2020-07-30 Thread mohsen saeedi
The problem occur when it try to connect to ldap and finally failed to start. for example i defined 192.168.250.71 as ldapUrl but it try to connect to localhost! Jul 30 20:58:38 SSO1 server[10311]: 2020-07-30 20:58:38,797 DEBUG [org.apereo.cas.util.LdapUtils] - ldap://localhost:389]> Jul 30

Re: [cas-user] CAS 5.2/5.3 cas.util.LdapUtils try connect to localhost for LDAP

2020-07-30 Thread Daniel Fisher
On Thu, Jul 30, 2020 at 3:23 AM mohsen saeedi wrote: > Jul 30 11:24:40 SSO1 server[4213]: 2020-07-30 11:24:40,315 ERROR > [org.ldaptive.pool.BlockingConnectionPool] > What error is reported here? --Daniel Fisher -- - Website: https://apereo.github.io/cas - Gitter Chatroom:

Re: [cas-user] CAS 5.2 - OIDC and attribute release

2020-06-09 Thread qla3fa
I use apache module mod_auth_openidc to my test. My apache conf is : OIDCProviderMetadataURL https://my-url.com/cas/oidc/.well-known/openid-configuration OIDCClientID applicationQLA-testPHP OIDCClientSecret x #OIDCMetadataDir /var/cache/apache2/mod_auth_openidc/metadata OIDCScope

Re: [cas-user] CAS 5.2 - OIDC and attribute release

2020-06-09 Thread Jérôme Steve
So, what is your client OIDC application configuration ? Have you configured the scope ? Le lun. 8 juin 2020 à 18:23, qla3fa a écrit : > Thanks for your response. > > sn and mail are attributes I extract from my LDAP. I use it with CAS > services and it works... I configured Oauth2.0 module too

Re: [cas-user] CAS 5.2 - OIDC and attribute release

2020-06-08 Thread qla3fa
Thanks for your response. sn and mail are attributes I extract from my LDAP. I use it with CAS services and it works... I configured Oauth2.0 module too and I use and map these attributes with success... So I think it's ok with these attributes. It's only with OIDC services it doesn't work...

Re: [cas-user] CAS 5.2 - OIDC and attribute release

2020-06-08 Thread Jérôme Steve
Hi, Your OIDC configuration look good. You map your claims like this : cas.authn.oidc.claimsMap.name=sn cas.authn.oidc.claimsMap.email=mail Maibe you don't have sn and email in your attribute repository ? Le lun. 8 juin 2020 à 16:37, qla3fa a écrit : > Hi, > > I try to configure OIDC with

Re: [cas-user] cas 5.2.x leaking connections

2020-01-13 Thread Daniel Fisher
On Mon, Jan 13, 2020 at 11:26 AM Trenton D. Adams wrote: > We are using Java 8 though, and we are using the UnboundIDProvider. > Can you post some logs that demonstrate the problem? Both application logs and OS netstat logs would be useful. --Daniel Fisher -- - Website:

Re: [cas-user] cas 5.2.x leaking connections

2020-01-13 Thread Trenton D. Adams
We are using Java 8 though, and we are using the UnboundIDProvider. On 2020-01-11 8:25 a.m., Daniel Fisher wrote: On Fri, Jan 10, 2020 at 5:40 PM Trenton D. Adams mailto:tre...@athabascau.ca>> wrote: Below is the configuration we're using for both LDAP and the password manager. We were

Re: [cas-user] cas 5.2.x leaking connections

2020-01-11 Thread Daniel Fisher
On Fri, Jan 10, 2020 at 5:40 PM Trenton D. Adams wrote: > Below is the configuration we're using for both LDAP and the password > manager. We were hoping someone understand why this could be happening, as > the CAS documentation is not very good for these settings, and neither are > the javadoc

Re: [cas-user] cas 5.2.x leaking connections

2020-01-10 Thread Trenton Adams
Those docs appear to imply that passivators are essentially require, or authenticated state information gets shared, no? From: cas-user@apereo.org on behalf of David Curry Sent: January 10, 2020 5:15 PM To: CAS Community Subject: Re: [cas-user] cas 5.2.x

Re: [cas-user] cas 5.2.x leaking connections

2020-01-10 Thread David Curry
You might want to experiment with turning the passivator off, or changing its setting. Not sure that's it, but it might help? https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#why-passivators -- DAVID A. CURRY, CISSP *DIRECTOR • INFORMATION SECURITY & PRIVACY* THE

Re: [cas-user] CAS 5.2.x OAuth2 Server support

2019-10-17 Thread Gandhi Pullalarevu
Hi Rao, Can you share the sample request? It would be helpful for me. Thanks, Gandhi Reddy P. On Thu, Oct 17, 2019 at 9:57 PM Mr Rao wrote: > Hi Gandhi, > > Thank you for your quick response. Actually its working when you pass in > the body instead of params. I tried using Postman to test it.

Re: [cas-user] CAS 5.2.x OAuth2 Server support

2019-10-17 Thread Mr Rao
Hi Gandhi, Thank you for your quick response. Actually its working when you pass in the body instead of params. I tried using Postman to test it. Rao On Wednesday, October 16, 2019 at 9:50:42 PM UTC-7, Gandhi wrote: > > Hi Rao, > > Yes, I faced the same issue as the sensitive information is

Re: [cas-user] CAS 5.2.x OAuth2 Server support

2019-10-16 Thread Gandhi Pullalarevu
Hi Rao, Yes, I faced the same issue as the sensitive information is passed over request params. You can configure Tomcat to not log the request params as below: In tomcat server.xml, at the end of the file, find the below entry and update it to Hope this helps. Thanks,

Re: [cas-user] CAS 5.2 and AD - Auth fail for just one OU

2019-03-26 Thread Matthew Uribe
Thanks David. After getting someone from the AD side to sit down and look at it with me, we were able to find in the logs on the DC the following error for the affected users: "The user has not been granted the requested logon type (aka logon right) at this machine" It looks like the issue

Re: [cas-user] CAS 5.2 and AD - Auth fail for just one OU

2019-03-25 Thread David Curry
Just a quick off the cuff thought, but could there be a syntax error in the properties file somewhere before the dn setting that's causing that line to be misread? David A. Curry, CISSP Director of Information Security The New School - Information Technology 71 Fifth Ave., 9th Fl. ~ New York,

Re: [cas-user] CAS 5.2 Passing LDAP Attributes to Application

2018-08-31 Thread Bill Scully
Yup, it was just the CAS client configuration. All is well. Thanks! On Friday, August 31, 2018 at 4:02:11 PM UTC-5, Bill Scully wrote: > > Thank you both for your helpful links and examples! > > I haven't been able to successfully retrieve any specified attributes in > our testing, but it may

Re: [cas-user] CAS 5.2 Passing LDAP Attributes to Application

2018-08-31 Thread Bill Scully
Thank you both for your helpful links and examples! I haven't been able to successfully retrieve any specified attributes in our testing, but it may our client configuration. On to troubleshooting! Many, many thanks to both of you, again! On Friday, August 31, 2018 at 2:17:12 PM UTC-5,

Re: [cas-user] CAS 5.2 Passing LDAP Attributes to Application

2018-08-31 Thread Bill Scully
Thank you both for your helpful links and examples! I haven't been able to successfully retrieve any specified attributes in our testing, but it may our client configuration. On to troubleshooting! Many, many thanks to both of you, again! On Friday, August 31, 2018 at 2:17:12 PM UTC-5,

Re: [cas-user] CAS 5.2 Passing LDAP Attributes to Application

2018-08-31 Thread Carl Waldbieser
Bill, In `cas.properties`, in your LDAP section, you want a property like this: cas.authn.ldap[0].principalAttributeList=uid,givenName,sn:surname,mail:email,memberOf That says that the principal that is authenticated should get the above list of LDAP attributes. For the ones that have 2

Re: [cas-user] CAS 5.2 Passing LDAP Attributes to Application

2018-08-31 Thread Ray Bon
Bill, Service config: https://apereo.github.io/cas/5.2.x/integration/Attribute-Release-Policies.html CAS config: https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#passivators in particular, cas.authn.ldap[0].principalAttributeList Ray On Fri, 2018-08-31 at 12:00

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-25 Thread Viacheslav Babanin
I have checked apache access.log on web server where client is placed and there is no POST requests on logout. 0 messages or requests completely. Thats while logging out with my cas 5.2.3 I have checked same log when i issue logout from cas 4.1.9 where SLO works on same client, and I can see

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-25 Thread Viacheslav Babanin
This shouldn't matter since cas 4.1.9 sends same request and SAME client, placed in same directory on the same server handles it correctly. >From phpCAS.log SAML REQUEST: @NOT_USED@ST-149-YAFlxnMQjDojiStFG4eN-cas.uek.krakow.pl [Client.php:1752] вторник, 24 апреля 2018 г., 19:09:17 UTC+2

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-25 Thread Viacheslav Babanin
Yes, and it releases attributes via saml with no issues. Only SLO doesn't work. вторник, 24 апреля 2018 г., 15:16:32 UTC+2 пользователь Manfredo Hopp написал: > > Do you have saml support dependency > > El martes, 24 de abril de 2018, Viacheslav Babanin > escribió: >

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-24 Thread Man H
from your log 2018-04-24 08:59:48,360 DEBUG [org.apereo.cas.logout.SamlCompliantLogoutMessageCreator] - @NOT_USED@ST-3-PppjmWz1yAHPFrZwFNMCRW5wsvI-v-cas-1]> its SAML2 whereas your client is SAML1 2018-04-24 7:27 GMT-03:00 Viacheslav Babanin : > It seems like I have a

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-24 Thread Ray Bon
Check your Apache access.log to see if the request is getting through. I see this when CAS sends logout request: 2018-04-24T09:32:57.816-07:00 lo...@z.comp.uvic.ca local2.notice httpd[2310]: access: coursespaces2d.uvic.ca: 111.104.118.193 - -

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-24 Thread Man H
See https://github.com/apereo/cas/tree/5.2.x/core/cas-server-core-logout/src/main/java/org/apereo/cas/logout El martes, 24 de abril de 2018, Viacheslav Babanin escribió: > It seems like I have a problem witch CAS 5.2.3 and SAML logout requests. > Single logout

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-24 Thread Man H
Do you have saml support dependency El martes, 24 de abril de 2018, Viacheslav Babanin escribió: > It seems like I have a problem witch CAS 5.2.3 and SAML logout requests. > Single logout doesn't work and from the logs it seems like CAS constructs > SAML logout request

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-24 Thread Viacheslav Babanin
It seems like I have a problem witch CAS 5.2.3 and SAML logout requests. Single logout doesn't work and from the logs it seems like CAS constructs SAML logout request but not actually sends it. I am using examplary phpCAS client from docs and when i go to ${cas-server}/cas/logout endpoint in

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-24 Thread Viacheslav Babanin
Ray, I have set handleLogoutRequests(true) and added those Loggers to CAS log4j2.xml, restarted CAS server in tomcat and nothing changes, and it seems in log like its publishing logout request but no details. That's exactyly what I did: 1. Added Loggers to CAS log4j2.xml 2. Restarted CAS in

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-23 Thread Ray Bon
Viacheslav, You will want to have handleLogoutRequests(true) so that logout is handled. While testing, skip the CAS server array, just in case the network config changes the apparent source of the request. Put this in your CAS log4j2.xml to see what happens on CAS side of things:

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-23 Thread Viacheslav Babanin
That's how phpCAS.log looks if i provide it with phpCAS::handleLogoutRequests(false); DA64 .=> phpCAS::client('S1', 'cas-1.server.test.pl', 443, '/cas') [index.php:13] DA64 .|=> CAS_Client::__construct('S1', false, 'cas-1.server.test.pl', 443, '/cas', true) [CAS.php:360] DA64 .||

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-23 Thread Viacheslav Babanin
Could you elaborate, please? Quoting official documentation at https://wiki.jasig.org/display/casc/phpcas+examples "By default phpCAS by default only handles requests that emanate from the CAS host exclusively (declared in phpCAS::client() or phpCAS::proxy()). Failure to restrict SAML logout

Re: [cas-user] CAS 5.2 single sign out does not work for SAML 1.1 phpCAS clients

2018-04-23 Thread Man H
Logout requests are handled by clients. .=> CAS_Client::handleLogoutRequests(true, array ( 0 => ' cas-1.server.test.pl',)) [CAS.php:1276] D0EE .|Not a logout request [Client.php:1739] See phpcas El lunes, 23 de abril de 2018, Viacheslav Babanin escribió: > Hello,

Re: [cas-user] CAS 5.2 return JWT for service

2018-04-11 Thread Cristina Vlaicu
Rhfbc On Thu, Apr 12, 2018, 01:40 William E. wrote: > Hi all, > > > I am trying to follow the CAS docs to configure a service to return jwt's > but not having much success. > > Docs I am reading on this: > > >

Re: [cas-user] CAS 5.2 delegate authentication to custom CAS 3

2018-03-26 Thread Diego Henrique Pagani
I've already read that but it doesn't explain how it works. I saw on cas properties four parameters that I've set to several values and nothing changes. In other versions, we have to (I found it on

Re: [cas-user] CAS 5.2 delegate authentication to custom CAS 3

2018-03-26 Thread Diego Henrique Pagani
Hi, after I read at documentation on 'Delegate Authentication' : User Interface All available clients are automatically displayed on the login page as clickable buttons. CAS does allow options for

Re: [cas-user] CAS 5.2 delegate authentication to custom CAS 3

2018-03-22 Thread Man H
see https://apereo.github.io/cas/5.2.x/installation/Trusted-Authentication.html 2018-03-22 17:52 GMT-03:00 Diego Henrique Pagani : > Hello, > > I have a problem guys: > We have an legacy CAS3, witch has some customizations inside the source > code and some application that

Re: [cas-user] [CAS 5.2.x] [OAuth] [Theme] How to make custom theme for OAuth sp

2018-02-28 Thread Man H
Try with https://mysite.example.com:443/cas/oauth2.0/callbackAuthorize ? client_name=XXX& client_id=OAuthApp& redirect_uri=http://www.example.com/sp; response_type=code as serviceId El miércoles, 28 de febrero de 2018, Andy Ng

Re: [cas-user] Cas 5.2 OpenLDap notworking: authentication failure and sucess

2018-02-28 Thread Man H
Log says - escribió: > I config Cas 5.2 Authen user login by OpenLDap, but not working > My cas.properties: > cas.authn.accept.users= > cas.authn.ldap[0].type=AUTHENTICATED > cas.authn.ldap[0].ldapUrl=ldap://localhost:389 > cas.authn.ldap[0].useSsl=false >

Re: [cas-user] [CAS 5.2.x] [OAuth] [Theme] How to make custom theme for OAuth sp

2018-02-27 Thread Man H
open browser developper tool to see if itheme gets loaded El miércoles, 28 de febrero de 2018, Man H escribió: > Cant you just build a simple webapp with index.html > > El miércoles, 28 de febrero de 2018, Andy Ng escribió: > >> Thanks Manfedo, >> >>

Re: [cas-user] [CAS 5.2.x] [OAuth] [Theme] How to make custom theme for OAuth sp

2018-02-27 Thread Man H
Cant you just build a simple webapp with index.html El miércoles, 28 de febrero de 2018, Andy Ng escribió: > Thanks Manfedo, > > Do you mean that I should: > - Redirect user to login using Non Oauth Service first (with theme) > - Then redirect user to login using Oauth

Re: [cas-user] [CAS 5.2.x] [OAuth] [Theme] How to make custom theme for OAuth sp

2018-02-27 Thread Andy Ng
Thanks Manfedo, Do you mean that I should: - Redirect user to login using Non Oauth Service first (with theme) - Then redirect user to login using Oauth Service for actual Oauth login Am I correct? I would prefer not to do the above, since that mean the service provider need to change their

Re: [cas-user] CAS 5.2 -- Custom Authenticator and UserDetailsService

2018-02-23 Thread Misagh Moayyed
See: https://apereo.github.io/cas/5.2.x/installation/Configuration-Management-Extensions.html https://apereo.github.io/2017/02/21/cas-autocfg-strategy/ https://apereo.github.io/2016/06/26/survey-results/ And refer to Spring Boot docs. --Misagh > From: "Michael MacEachran"

Re: [cas-user] CAS 5.2

2018-02-23 Thread Uxío
gt; >> >> === >> >> Thank You; >> >> Chris Cheltenham >> Technology Services >> The School District of Philadelphia >> >> Work # 215-400-5025 >> Cell # 215-301-6571 >> From: cas-user@apereo.org [mailto

Re: [cas-user] CAS 5.2

2018-02-23 Thread Ray Bon
] On Behalf Of Ray Bon Sent: Friday, February 23, 2018 12:36 PM To: cas-user@apereo.org Subject: Re: [cas-user] CAS 5.2 Chris, cas.view.defaultRedirectUrl= Ray On Fri, 2018-02-23 at 08:36 -0500, Cheltenham, Chris wrote: Hello Everyone, I am sure most folks change the default landing page AFTER

RE: [cas-user] CAS 5.2

2018-02-23 Thread Cheltenham, Chris
Sent: Friday, February 23, 2018 12:36 PM To: cas-user@apereo.org Subject: Re: [cas-user] CAS 5.2 Chris, cas.view.defaultRedirectUrl= Ray On Fri, 2018-02-23 at 08:36 -0500, Cheltenham, Chris wrote: Hello Everyone, I am sure most folks change the default landing page AFTER you get login

Re: [cas-user] CAS 5.2

2018-02-23 Thread Ray Bon
Chris, cas.view.defaultRedirectUrl= Ray On Fri, 2018-02-23 at 08:36 -0500, Cheltenham, Chris wrote: Hello Everyone, I am sure most folks change the default landing page AFTER you get login to work. It looks like it lands on a page called casGenericSuccessView.html. My question is how do

Re: [cas-user] CAS 5.2

2018-02-23 Thread David Curry
In theory, people shouldn't ever see that page, because they should be hitting the CAS server from an application, which they then get sent back to after authenticating. The only time you'll see this page is if go to "/cas/login" with no "?service=" parameter. And if you set the CAS server to

Re: [cas-user] CAS 5.2 and Ellucian Banner 9 (XE)

2018-02-22 Thread Matthew Uribe
My thanks to all who have responded. I finally spotted the issue. In the logs, I found this: https://testssbxe.aims.edu:8444/Ba nnerGeneralSsb/j_spring_cas_security_check] does not match supplied service

Re: [cas-user] CAS 5.2 and Ellucian Banner 9 (XE)

2018-02-22 Thread Greg Booth
Matthew, Here is our service definition: { @class: org.apereo.cas.services.RegexRegisteredService id: name: Banner description: Self-Service logo: https://www.mtu.edu/images/mtu-logo.png serviceId: https://(www\.)?bannerweb.mtu.edu(:443)?/.* attributeReleasePolicy: {

Re: [cas-user] CAS 5.2 and Ellucian Banner 9 (XE)

2018-02-22 Thread Matthew Uribe
Thanks Greg. I've got all the following attributes listed in by cas.properties. When I look in /cas/status/ssosessions I see all of these attributes in the TGT. That's why I was thinking it must be something to do with the way the attributes are released in the service definition.

Re: [cas-user] CAS 5.2 and Ellucian Banner 9 (XE)

2018-02-22 Thread Matthew Uribe
Thanks Travis. That's the track I've been on. Can you tell me whether this service definition looks anything like what you ended up with? { @class: org.apereo.cas.services.RegexRegisteredService serviceId:

Re: [cas-user] CAS 5.2 and Ellucian Banner 9 (XE)

2018-02-21 Thread Greg Booth
Specifically, in cas.properties: cas.authn.attributeRepository.ldap[0].attributes.udcid=UDC_IDENTIFIER On Wed, Feb 21, 2018 at 7:48 PM, Greg Booth wrote: > We also had to map UDC_IDENTIFIER to get it to work, although we are on > CAS 5.1.5. > > On Wed, Feb 21, 2018 at 7:18 PM,

Re: [cas-user] CAS 5.2 and Ellucian Banner 9 (XE)

2018-02-21 Thread Greg Booth
We also had to map UDC_IDENTIFIER to get it to work, although we are on CAS 5.1.5. On Wed, Feb 21, 2018 at 7:18 PM, Travis Schmidt wrote: > I am helping a team with this exact issue right now. Don't know anything > about the banner side of things, but I had to map the

Re: [cas-user] CAS 5.2 and Ellucian Banner 9 (XE)

2018-02-21 Thread Travis Schmidt
I am helping a team with this exact issue right now. Don't know anything about the banner side of things, but I had to map the attribute they were looking for to UDC_IDENTIFIER in the Service Registry for it to work. On Wed, Feb 21, 2018 at 3:46 PM Matthew Uribe wrote:

Re: [SOLVED] Re: [cas-user] CAS 5.2.x SAML IdP Issues

2018-02-15 Thread Misagh Moayyed
Cc: "Misagh Moayyed" <mmoay...@unicon.net> > Sent: Thursday, February 15, 2018 11:46:57 AM > Subject: Re: [SOLVED] Re: [cas-user] CAS 5.2.x SAML IdP Issues > I'm writing a SAML authentication extension for the Guacamole Project > (http://guacamole.apache.org). > -Ni

Re: [SOLVED] Re: [cas-user] CAS 5.2.x SAML IdP Issues

2018-02-15 Thread vnick
> > *From: *"vnick" <nick.e@gmail.com > > *To: *"CAS Community" <cas-...@apereo.org > > *Cc: *"Misagh Moayyed" <mmoa...@unicon.net > > *Sent: *Thursday, February 15, 2018 10:48:25 AM > *Subject: *[SOLVED] Re: [cas-user] CAS

Re: [SOLVED] Re: [cas-user] CAS 5.2.x SAML IdP Issues

2018-02-15 Thread Misagh Moayyed
Cool. Who exactly is the SP in this scenario? --Misagh > From: "vnick" <nick.e.couch...@gmail.com> > To: "CAS Community" <cas-user@apereo.org> > Cc: "Misagh Moayyed" <mmoay...@unicon.net> > Sent: Thursday, February 15, 2018 10:48

[SOLVED] Re: [cas-user] CAS 5.2.x SAML IdP Issues

2018-02-15 Thread vnick
Well, this put me on the right path - turns out the number of services the log file told me was loading just happened to match what was in the services directory, but the CAS configuration was not pointing at anything but the default location, so it wasn't actually loading my services.

Re: [cas-user] CAS 5.2.x SAML IdP Issues

2018-02-15 Thread vnick
There are other service definitions in the registry, yes, but none that should overlap with this definition. There are only two other service definitions - one is the OAuth Callback, which is automatically generated by CAS, and the other is one for the server on which CAS is running, which is

Re: [cas-user] CAS 5.2.x SAML IdP Issues

2018-02-15 Thread Misagh Moayyed
Do you have other JSON service definitions in the registry? Anything with a lower evaluation order or a more relaxed regex pattern? --Misagh > From: "vnick" > To: "CAS Community" > Sent: Thursday, February 15, 2018 10:15:40 AM > Subject:

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: "David Curry" <david.cu...@newschool.edu> To: "cas-user" <cas-user@apereo.org> Sent: Thursday, February 8, 2018 12:31:22 PM Subject: Re: [cas-user] CAS 5.2.x It's a pain in the butt, mostl

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
du> To: "cas-user" <cas-user@apereo.org> Sent: Thursday, February 8, 2018 11:38:10 AM Subject: Re: [cas-user] CAS 5.2.x All we do to build just the cas.war file is run this command in the directory with the pom.xml file & our src overlay directory: mvn clean packag

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread David Curry
chool.edu> > *To: *"cas-user" <cas-user@apereo.org> > *Sent: *Thursday, February 8, 2018 12:13:48 PM > > *Subject: *Re: [cas-user] CAS 5.2.x > > These could probably be shortened up in a couple of ways by: > >- combining the [0] and [2] Active Dire

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread David Curry
d Curry" <david.cu...@newschool.edu> > *To: *"cas-user" <cas-user@apereo.org> > *Sent: *Thursday, February 8, 2018 12:13:48 PM > > *Subject: *Re: [cas-user] CAS 5.2.x > > These could probably be shortened up in a couple of ways by: > >

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: "David Curry" <david.cu...@newschool.edu> To: "cas-user" <cas-user@apereo.org> Sent: Thursday, February 8, 2018 12:13:48 PM Subject: Re: [cas-user] CAS 5.2.x These could probably be

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
<david.cu...@newschool.edu> To: "cas-user" <cas-user@apereo.org> Sent: Thursday, February 8, 2018 12:13:48 PM Subject: Re: [cas-user] CAS 5.2.x These could probably be shortened up in a couple of ways by: * combining the [0] and [2] Active Directory configs, which go ag

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread David Curry
phia > > Work # 215-400-5025 > Cell # 215-301-6571 > > -- > *From: *"David Curry" <david.cu...@newschool.edu> > *To: *"cas-user" <cas-user@apereo.org> > *Sent: *Thursday, February 8, 2018 11:27:48 AM > > *Sub

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
: "David Curry" <david.cu...@newschool.edu> To: "cas-user" <cas-user@apereo.org> Sent: Thursday, February 8, 2018 11:27:48 AM Subject: Re: [cas-user] CAS 5.2.x I'm afraid Gradle is a complete mystery to me. Hopefully someone else can jump in. --Dave --

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread David Curry
; Technology Services > The School District of Philadelphia > > Work # 215-400-5025 > Cell # 215-301-6571 > > -- > *From: *"David Curry" <david.cu...@newschool.edu> > *To: *"cas-user" <cas-user@apereo.org> > *Sent: *Thursd

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
ay, February 8, 2018 10:49:08 AM Subject: Re: [cas-user] CAS 5.2.x Try changing what you have: org.apereo.cas cas-server-support-ldap to this: org.apereo.cas cas-server-support-ldap ${cas.version} I'm pretty sure you have to have a version in there, so Maven knows

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Man H
nfig]# cat cas.properties | grep basedn >> [root@devcas5 config]# cat cas.properties | grep -i basedn >> *cas.authn.ldap[0].baseDn=dc=philasd,dc=org* >> >> === >> >> Thank You; >> >> Chris Cheltenham >> Technology Serv

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Man H
-- > *From: *"Man H" <info.ings...@gmail.com> > *To: *"cas-user" <cas-user@apereo.org> > *Sent: *Thursday, February 8, 2018 10:17:57 AM > > *Subject: *Re: [cas-user] CAS 5.2.x > > this is an Ldap error check your properties pr

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
Work # 215-400-5025 Cell # 215-301-6571 From: "Man H" <info.ings...@gmail.com> To: "cas-user" <cas-user@apereo.org> Sent: Thursday, February 8, 2018 10:17:57 AM Subject: Re: [cas-user] CAS 5.2.x this is an Ldap error check your properties probably baseDn 20

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread David Curry
on handler that > supports [ccheltenham-ext] of type [UsernamePasswordCredential].> > > === > > Thank You; > > Chris Cheltenham > Technology Services > The School District of Philadelphia > > Work # 215-400-5025 > Cell # 215-301-6571 > > --

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Man H
gt; ------------------ > *From: *"David Curry" <david.cu...@newschool.edu> > *To: *"cas-user" <cas-user@apereo.org> > *Sent: *Thursday, February 8, 2018 7:54:21 AM > *Subject: *Re: [cas-user] CAS 5.2.x > > > $ jar tvf cas.war |

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
"David Curry" <david.cu...@newschool.edu> To: "cas-user" <cas-user@apereo.org> Sent: Thursday, February 8, 2018 7:54:21 AM Subject: Re: [cas-user] CAS 5.2.x $ jar tvf cas.war | grep ldap WEB-INF/lib/cas-server-support-ldap-5.2.2.jar WEB-INF/lib/cas-server-suppo

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Cheltenham, Chris
r@apereo.org> Sent: Thursday, February 8, 2018 7:54:21 AM Subject: Re: [cas-user] CAS 5.2.x $ jar tvf cas.war | grep ldap WEB-INF/lib/cas-server-support-ldap-5.2.2.jar WEB-INF/lib/cas-server-support-ldap-core-5.2.2.jar WEB-INF/lib/ldaptive-1.2.3.jar WEB-INF/lib/ldaptive-beans-1.2.3.jar WEB-

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread David Curry
$ jar tvf cas.war | grep ldap WEB-INF/lib/cas-server-support-ldap-5.2.2.jar WEB-INF/lib/cas-server-support-ldap-core-5.2.2.jar WEB-INF/lib/ldaptive-1.2.3.jar WEB-INF/lib/ldaptive-beans-1.2.3.jar WEB-INF/lib/ldaptive-unboundid-1.2.3.jar WEB-INF/lib/unboundid-ldapsdk-4.0.1.jar

Re: [cas-user] CAS 5.2.x

2018-02-08 Thread Uxío Prego
If you are using UNIX-like, do: $ 7z l cas_without_ldap_support.war >cas_without_ldap_support_listing $ 7z l cas_supposedly_with_ldap_support.war >cas_supposedly_with_ldap_support_listing $ diff cas_*_listing > [...]ldap[...] $ _ If you are not, you can easily get a Cygwin equivalent of that.

Re: [cas-user] CAS 5.2.x Password management

2018-02-06 Thread Man H
That is only achieved through extending CA's functionality which means development. This could be an enhancement for future versions if Cas people agree its worth. El martes, 6 de febrero de 2018, casuser escribió: > thanks for the answer but I am not sure how to do

Re: [cas-user] CAS 5.2.x Password management

2018-02-05 Thread casuser
thanks for the answer but I am not sure how to do that? is there any example that I can follow? _Fazla On Tuesday, February 6, 2018 at 10:41:40 AM UTC+8, Manfredo Hopp wrote: > > I think this would be posible only if you include pm properties as part of > LDAP properties > > El lunes, 5 de

Re: [cas-user] CAS 5.2.x Password management

2018-02-05 Thread Man H
I think this would be posible only if you include pm properties as part of LDAP properties El lunes, 5 de febrero de 2018, casuser escribió: > How to set a LDAP password management for 2 different OU's? Using the > current documentation password management can be

Re: [cas-user] CAS 5.2.x

2018-02-05 Thread David Curry
k You; > > Chris Cheltenham > Technology Services > The School District of Philadelphia > > Work # 215-400-5025 > Cell # 215-301-6571 > > *From:* cas-user@apereo.org [mailto:cas-user@apereo.org] *On Behalf Of *David > Curry > *Sent:* Monday, February 5, 2018 1:57 PM >

RE: [cas-user] CAS 5.2.x

2018-02-05 Thread Cheltenham, Chris
Curry Sent: Monday, February 5, 2018 1:57 PM To: cas-user@apereo.org Subject: Re: [cas-user] CAS 5.2.x Chris, Are you using the Gradle overlay because you need to, or because you don't know which one to use. IMHO, unless you're going to be building CAS from source, the Maven overlay is easier

RE: [cas-user] CAS 5.2.x

2018-02-05 Thread Cheltenham, Chris
Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Man H Sent: Monday, February 5, 2018 1:38 PM To: cas-user@apereo.org Subject: Re: [cas-user] CAS 5.2.x dee https://github.com/apereo

RE: [cas-user] CAS 5.2.x

2018-02-05 Thread Cheltenham, Chris
-6571 From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Man H Sent: Monday, February 5, 2018 1:21 PM To: cas-user@apereo.org Subject: Re: [cas-user] CAS 5.2.x just add org.apereo.cas cas-server-support-ldap 2018-02-05 15:14 GMT-03:00 Chris

Re: [cas-user] CAS 5.2 configuration to delegate authentication to SAML IdP [Octa] through SAML 2.0

2017-12-18 Thread Ravikumar Ganugapanta
Thanks for the prompt answer. I actually want the file name where I should put the properties. Consider I have CAS 5.2 deployed to Tomcat. I see two properties files in tomcat8/webapps/cas\WEB-INF\classes 1. bootstrap.properties 2. application.properties In which file should I put the

Re: [cas-user] CAS 5.2 configuration to delegate authentication to SAML IdP [Octa] through SAML 2.0

2017-12-18 Thread Jérôme LELEU
Hi, This is the properties to configure: https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#saml Follow this example: https://github.com/pac4j/spring-webmvc-pac4j-boot-demo/blob/master/src/main/java/org/pac4j/demo/spring/Pac4jConfig.java#L59 Thanks. Best regards,

Re: [cas-user] CAS 5.2 ST errors

2017-12-07 Thread vallee.romain
the error from my test plateform !! i can't have 2 cas server with the same name ! Le jeudi 7 décembre 2017 22:06:52 UTC+1, Jeffrey Ramsay a écrit : > > I know the feeling :) > > Good luck. > > On Thu, Dec 7, 2017 at 3:37 PM, vallee.romain > wrote: > >> Thanks you Jeff

Re: [cas-user] CAS 5.2 ST errors

2017-12-07 Thread Jeffrey Ramsay
I know the feeling :) Good luck. On Thu, Dec 7, 2017 at 3:37 PM, vallee.romain wrote: > Thanks you Jeff for your answer. > I try toMorrow, i spend so many Time on jasig this week. > I turn off the pc and i'm going to do jasig dream!!! > > And thanks you again > > -- >

Re: [cas-user] CAS 5.2 ST errors

2017-12-07 Thread vallee.romain
Thanks you Jeff for your answer. I try toMorrow, i spend so many Time on jasig this week. I turn off the pc and i'm going to do jasig dream!!! And thanks you again -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7

Re: [cas-user] CAS 5.2 ST errors

2017-12-07 Thread Jeffrey Ramsay
Try switching these: //phpCAS::client(SAML_VERSION_1_1, $cas_host, $cas_port, $cas_context); phpCAS::client(CAS_VERSION_3_0, $cas_host, $cas_port, $cas_context); -Jeff On Thu, Dec 7, 2017 at 3:22 PM, vallee.romain wrote: > hello users, > i need help !!! > i prepare a