[cas-user] Yubico - Yubikey secret key cannot be blank

2018-09-23 Thread Jeffrey Ramsay
I'm getting the following error on a new build of 5.3.3 even though all options are set in cas.properties. Any advise? 01:24:37.084 [localhost-startStop-1] ERROR org.springframework.boot.SpringApplication - Application startup failed org.springframework.beans.factory.BeanCreationException: Error

[cas-user] Re: Unauthorized After Login

2018-09-23 Thread Fahmi L. Ramdhani
*/var/log/apache2/error.log* [Sun Sep 23 06:19:08.233925 2018] [mpm_prefork:notice] [pid 10058] AH00163: Apache/2.4.18 (Ubuntu) OpenSSL/1.0.2g configured -- resuming normal operations [Sun Sep 23 06:19:08.233996 2018] [core:notice] [pid 10058] AH00094: Command line: '/usr/sbin/apache2' [Sun Sep

[cas-user] Re: Unauthorized After Login

2018-09-23 Thread Fahmi L. Ramdhani
*/var/log/apache2/error.log* [Sun Sep 23 06:19:08.233925 2018] [mpm_prefork:notice] [pid 10058] AH00163: Apache/2.4.18 (Ubuntu) OpenSSL/1.0.2g configured -- resuming normal operations [Sun Sep 23 06:19:08.233996 2018] [core:notice] [pid 10058] AH00094: Command line: '/usr/sbin/apache2' [Sun

Re: [cas-user] Re: CAS5.1 ,Application Not Authorized to Use CAS , no service registry issue.???

2018-09-23 Thread Andy Ng
The service file should be: src/main/resources/service/myservice-1001.json -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are

[cas-user] Re: CAS 5.2.6 + Delegated Authentication + SAML + Azure AD =>

2018-09-23 Thread Raghavan TV
This issue is resolved and I had to use the idp metadata obtained from the azure ad portal. Now, the delegated authenticated against azure ad with Cas-5.2.6 is working. (The same with CAS-5.3.3 is failing. But that is a separate issue to be resolved) Raghavan On Thursday, September 20, 2018

Re: [cas-user] Re: CAS5.1 ,Application Not Authorized to Use CAS , no service registry issue.???

2018-09-23 Thread Pedro Rosas
Additionally, I forgot to mention that I have added to the "C:\etc\cas\services" folder the "myservice-1001.json" file with the following content: { "@class" :"org.apereo.cas.services.RegexRegisteredService", "serviceId" : "^https://www.example.com;, "name" :

Re: [cas-user] Re: CAS5.1 ,Application Not Authorized to Use CAS , no service registry issue.???

2018-09-23 Thread Pedro Rosas
Hi Andy, I am using tomcat on Windows 10. I'm also using the Netbeans IDE to load the cas overlay (maven version). I created the C:\etc\cas\config and I have put there the cas.properties, with the following content: cas.server.name: https://cas.example.org:8443 cas.server.prefix:

Re: [cas-user] Re: Unauthorized After Login

2018-09-23 Thread David Curry
Using casuer/Mellon shouldn't make any difference. Try turning mod_auth_cas debug logging on (CASDebug on) and see what it tells you. Note that you also need to set the Apache logging level on the virtual host to Debug to see the logs. -- DAVID A. CURRY, CISSP *DIRECTOR OF INFORMATION SECURITY*

[cas-user] Re: Unauthorized After Login

2018-09-23 Thread Fahmi L. Ramdhani
I forgot to tell. I am logged in using the static cas user that is user: *casuser* and password: *Mellon*. Is there a problem from that? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions:

Re: [cas-user] Unauthorized After Login

2018-09-23 Thread Fahmi L. Ramdhani
Thank you for the reply. There seems to be no influence after I try it. I creating a certificate from openssl then signed by Let's Encrypt. I took several steps to convert the certificate to * .jks (keystore.jks). I tried the above solution by adding *CASCertificatePath* to the

Re: [cas-user] Unauthorized After Login

2018-09-23 Thread David Curry
That's usually a certificate problem. Are you using a self-signed certificate on the CAS server? If so, you need to have CASCertificatePath/etc/pki/tls/certs/casserver.crt in the mod_auth_cas configuration. -- DAVID A. CURRY, CISSP *DIRECTOR OF INFORMATION SECURITY* INFORMATION TECHNOLOGY

Re: [cas-user] Re: CAS5.1 ,Application Not Authorized to Use CAS , no service registry issue.???

2018-09-23 Thread Andy Ng
Hi Pedro, I'm editing the cas.properties provided by the CAS overlay template. Do you mean that this is the wrong place to edit the cas.properties? > Yes, it is the wrong place to edit the cas.properties Should I manually copy the cas.properties file to the "target" folder? (I'm using tomcat).

Re: [cas-user] Re: CAS5.1 ,Application Not Authorized to Use CAS , no service registry issue.???

2018-09-23 Thread Pedro Rosas
Hi Andy, I'm editing the cas.properties provided by the CAS overlay template. Do you mean that this is the wrong place to edit the cas.properties? I searched for a cas.properties file on the "target" folder, but there is no such file there. Should I manually copy the cas.properties file to the

Re: [cas-user] Re: CAS 5.3.2 - Active Directory: cannot authenticate. Cannot find the root cause in log.

2018-09-23 Thread Hoang Anh Duc
With Type = Authenticated, what is different? And if I change type, is there any field need to change following it? And how can I check if my CAS connected to AD? Any log for it? Thanks mate Vào CN 23-09-2018 17:03 Mohannad Henno đã viết: > Try to change > > cas.authn.ldap[0].type=AD > > to > >

Re: [cas-user] Re: CAS 5.3.2 - Active Directory: cannot authenticate. Cannot find the root cause in log.

2018-09-23 Thread Hoang Anh Duc
With Type = Authenticated, what is different? And if I change type, is there any field need to change following it? Thanks mate! On Sun, Sep 23, 2018 at 5:03 PM Mohannad Henno wrote: > Try to change > > cas.authn.ldap[0].type=AD > > to > > cas.authn.ldap[0].type=Authenticated > > Best Regards,

[cas-user] Re: CAS 5.3.2 - Active Directory: cannot authenticate. Cannot find the root cause in log.

2018-09-23 Thread Mohannad Henno
Try to change cas.authn.ldap[0].type=AD to cas.authn.ldap[0].type=Authenticated Best Regards, Mohannad On Sunday, September 23, 2018 at 1:56:48 PM UTC+4, Hoang Anh Duc wrote: > > Hi! > I'm using CAS 5.3.2 to connect to my Active Directory. But I cannot login. > When I look at log: I see

[cas-user] CAS 5.3.2 - Active Directory: cannot authenticate. Cannot find the root cause in log.

2018-09-23 Thread Hoang Anh Duc
Hi! I'm using CAS 5.3.2 to connect to my Active Directory. But I cannot login. When I look at log: I see some thing which maybe the root cause: 2018-09-23 15:02:02,184 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - 2018-09-23 15:02:02,184 DEBUG

[cas-user] CAS ADFS Integration

2018-09-23 Thread Mohannad Henno
Hi There, I am trying to integrate our CAS system with ADFS using the WSFederation. The issue which i am facing is that when CAS is trying to redirect to ADFS i am getting unauthorized service exception as following: CAS is unable to process this request: "500:Internal Server Error"

Re: [cas-user] Re: CAS5.1 ,Application Not Authorized to Use CAS , no service registry issue.???

2018-09-23 Thread Andy Ng
Hi Pedro, To see whether or not your service is being loaded, turn on CAS debugger mode and look at the logs. The (cas.serviceRegistry.x.location) is *based on CAS version*, so you should look for the config for your CAS version: cas.serviceRegistry.json.location=file:/etc/cas/services

[cas-user] Unauthorized After Login

2018-09-23 Thread Fahmi L. Ramdhani
Hello, all. I tried to build CAS server based on the guidelines from https://dacurry-tns.github.io/deploying-apereo-cas. In the trial phase my client application gets a problem: > *Unauthorized*This server could not verify that you are authorized to > access the document requested. Either you