Re: [cas-user] Cas5 Ldap Authentication

2018-03-08 Thread Alberto Cabello Sánchez
On Thu, 8 Mar 2018 06:32:52 -0800 (PST) yashwanth chowdary wrote: > I have written my .own classes handler,configuration(please refer to > the attached files).What i observe is My handler is getting registered > properly but when i give the credentials the

Re: [cas-user] Re: Authorize request verification fails with OAuth and CAS 5.0.x

2018-03-08 Thread Ryan Rolland
Thanks for response. Yea, that is exactly what I am doing, i.e. trying to call 'cas/oidc/accessToken' before 'cas/oidc/profile'. The implementation of 'cas/oidc/accessToken' does a profile lookup per the stack trace I gave. On Wednesday, March 7, 2018 at 4:55:44 AM UTC-10, Todd Pratt wrote: > >

[cas-user] Re: CAS 5.2.3 - Spnego evaluateClientRequest

2018-03-08 Thread Arnaud N.
Hello, turns out there is a simple way of doing what i want, it is detailed here : Configuring-Service-Required-AuthN if i want to trigger spnego for a specific service i just have to add this line in

[cas-user] CAS 5.2.x oauth property set doesn't work

2018-03-08 Thread Leo Pintos
Hi I'm trying to set the grant types and response types but something is wrong I put the bellow configuration in my OAuthRegisteredService json: "supported_grants" : ["authorization_code", "password", "client_credentials", "refresh_token"], "supported_responses" : ["code", "token",

Re: [cas-user] Cas5 Ldap Authentication

2018-03-08 Thread yashwanth chowdary
> > Dave I have written my .own classes handler,configuration(please refer to > the attached files).What i observe is My handler is getting registered > properly but when i give the credentials the method " > authenticateUsernamePasswordInternal" is not getting called. properties > are same as

Re: [cas-user] Cas5 Ldap Authentication

2018-03-08 Thread yashwanth chowdary
Dave can you give a ref for writing our own customization handlers and configuration classes for Ldap On Thursday, March 8, 2018 at 6:42:04 PM UTC+5:30, David Curry wrote: > > It looks right, but I have never used that particular property, so I'm > just guessing. > > In our environment we have

[cas-user] Re: CAS 5.2.3 - Spnego evaluateClientRequest

2018-03-08 Thread Arnaud N.
I realise that my first sentence is not very clear : "I have succesfully configured CAS 5.2.3 to work with CAS and Spnego/kerberos, but i was not able to restrict spnego on certain ip/hostname." => what i want to do is configure CAS to authenticate users by login/password OR spnego depending

Re: [cas-user] Cas5 Ldap Authentication

2018-03-08 Thread David Curry
It looks right, but I have never used that particular property, so I'm just guessing. In our environment we have to merge attributes from two different directories, so I have the authentication and attribute resolution configured separately and list the attributes out individually. Someone else

Re: [cas-user] Cas5 Ldap Authentication

2018-03-08 Thread yashwanth chowdary
Hi David , Is this the correct way to initialize my principalAttributeList? By the way , I am using 5.3.0RC2 version On Wednesday, March 7, 2018 at 6:23:27 PM UTC+5:30, David Curry wrote: > > You don't say what version you're using, but the userFilter property was > renamed to searchFilter

[cas-user] CAS 5.2.3 - Spnego evaluateClientRequest

2018-03-08 Thread Arnaud N.
Hello everyone, I have succesfully configured CAS 5.2.3 to work with CAS and Spnego/kerberos, but i was not able to restrict spnego on certain ip/hostname. I looked into the code and i found this class : SpengoWebflowConfigurer with the action "evaluateClientRequest" (which is described in the

Re: [cas-user] Re: JWT Service ticket

2018-03-08 Thread Pascal Rigaux
As written in the pull request: "not tested" On 08/03/2018 12:11, Stefano Nucci wrote: Hello I tried your fix but there are errors. Are you sure is ok? Il giorno mercoledì 31 gennaio 2018 18:01:21 UTC+1, Pascal Rigaux ha scritto: Note that if you disable encryption with

[cas-user] Re: JWT Service ticket

2018-03-08 Thread Stefano Nucci
Hello I tried your fix but there are errors. Are you sure is ok? Il giorno mercoledì 31 gennaio 2018 18:01:21 UTC+1, Pascal Rigaux ha scritto: > > Note that if you disable encryption with > > cas.authn.token.crypto.encryptionEnabled=false > > The payload will be double base64 encoded. I