Re: [cas-user] CAS 6.2 new theme

2020-11-25 Thread Florent Vallée
Yes i add this in my cas.properties De: "Jérôme NENERT" À: "CAS Community" Envoyé: Mercredi 25 Novembre 2020 17:22:54 Objet: Re: [cas-user] CAS 6.2 new theme Hi, Did you add cas.theme.default-theme-name=newtheme in /etc/cas/config/cas.properties ? Regards. Jerome Le

[cas-user] Invalid `KeyInfo` when per-SP idP configuration is used

2020-11-25 Thread Linos Giannopoulos
Hey, We have the following setup in place to utilize the per-SP configuration for the idP and so override the keys and metadata: ``` # user@cas-node[~] → tree /etc/cas/saml /etc/cas/saml ├── service_name-6 -> /etc/cas/saml/new-keys ├── idp-encryption.crt ├── idp-encryption.key ├──

Re: [cas-user] CAS 6.2 new theme

2020-11-25 Thread Jérôme NENERT
Hi, Did you add cas.theme.default-theme-name=newtheme in /etc/cas/config/cas.properties ? Regards. Jerome Le 25/11/2020 à 16:23, Florent Vallée a écrit : Hello, I have a problem with CAS 6.2 It works fine but I can't change the default theme. I have indeed created the newtheme.properties

[cas-user] CAS 6.2 new theme

2020-11-25 Thread Florent Vallée
Hello, I have a problem with CAS 6.2 It works fine but I can't change the default theme. I have indeed created the newtheme.properties file in src / main / resources then the static / themes / newthemes folder with the css images and js subdirectories then I integrated my files there. I

Re: [cas-user] Invalid `KeyInfo` when per-SP idP configuration is used

2020-11-25 Thread Ray Bon
Linos, You should only need one metadata file, with both certs in it. Could it be that one step uses the new and one uses the old which is causing the mismatch? Ray On Wed, 2020-11-25 at 06:37 -0800, Linos Giannopoulos wrote: Notice: This message was sent from outside the University of

[cas-user] org.pac4j.saml.exceptions.SAMLAuthnInstantException: Authentication issue instant is too old or in the future

2020-11-25 Thread Sean Day
Hi, I have CAS 6.2 configured to authenticate against Azure AD, I have some users that are getting an error: org.pac4j.saml.exceptions.SAMLAuthnInstantException: Authentication issue instant is too old or in the future It seems to be browser/PC dependent, if they try a different PC it is OK,

Re: [cas-user] CAS upgrade from 3.5.4 to 6.2.2

2020-11-25 Thread Ray Bon
Sobhen, A lot has changed between those two versions. The short answer; plan to start from scratch. Cas now has many more builtin capabilities. Some things that you had to implement may just need some configuration. In our 3.5 version I used LPPE for throttling, now I use cas configuration.

[cas-user] JWE decoding

2020-11-25 Thread Jeffrey Ramsay
All - I am hoping someone can point me in the right direction. I am trying to extract the claims from a CAS JWE token and I am not sure what I should pass to the AESDecrypter for the key; "X" as shown below. I tried using the json web key and that failed as well. final String jwkJson =

Re: [cas-user] org.pac4j.saml.exceptions.SAMLAuthnInstantException: Authentication issue instant is too old or in the future

2020-11-25 Thread Ray Bon
Sean, This looks like your clock is incorrect. Use a tool like samltracer to see what is being passed. You do not want to have large lifetime windows on authentication responses, to limit replay attacks. Ray On Wed, 2020-11-25 at 10:15 -0800, Sean Day wrote: Notice: This message was sent from

Re: [cas-user] CAS upgrade from 3.5.4 to 6.2.2

2020-11-25 Thread Sobhen C
Thank you Ray for a quick response. Yes, as you mentioned, my approach is the same that the application is developing from scratch. you have mentioned that "In our 3.5 version I used LPPE for throttling, now I use cas configuration.", I am actually stuck here only, can you put some light on this

Re: [cas-user] org.pac4j.saml.exceptions.SAMLAuthnInstantException: Authentication issue instant is too old or in the future

2020-11-25 Thread Sean Day
Hi Ray, Thanks for the quick response, I have got the users to check the time on their PC plus I have checked the CAS server and all seem to be in sync. Also, the users have noticed that if they use a different browser they can login, I have had users switch from Chrome to Firefox on the same

[cas-user] CAS upgrade from 3.5.4 to 6.2.2

2020-11-25 Thread Sobhen C
I was trying to upgrade the CAS application from version 3.5.4 into 6.2.2. I went through the 6.2.2 password policy. Now, I am wondering if CAS 6.2 supports Ippe configurations. In the existing application, all the configurations are mentioned in the lppe.configuration.xml file. But, in the