[cas-user] Username is not being set to samaccountname

2019-02-27 Thread MOakley
We have a service defined as follows { "id":16, "serviceId":"https://some.company.net/tenant/**;, "name":"Some company Test", "enabled":true, "description":"Some company Test", "ssoEnabled":true, "evaluationOrder":16,

Re: [cas-user] Re: Which ticket repository are you using?

2019-02-27 Thread David Curry
Thanks to everyone who responded to this thread. I switched our dev servers over to a Hazelcast ticket registry (keeping MongoDb for the service registry) this afternoon, and assuming no problems, we'll gradually move it from dev to test to production. --Dave -- DAVID A. CURRY, CISSP *DIRECTOR

Re: [cas-user] Use of CAS generated JWT instead of Proxy Ticket

2019-02-27 Thread Drew Liscomb
Hi Konstantin, If you have complete control over the client, then the JWT route may indeed be 'easier'. Until v5.3.7, one limiting factor was that all JWTs were created using a single set of signing & encryption keys. That implementation doesn't allow for JWTs to be distributed to many

[cas-user] Re: Need to upgrade CAS 5.1.4 to 5.3.8

2019-02-27 Thread Matthew Uribe
Pameliya, What details do you have about your current deployment? Is it running in Tomcat? Do you have access to the overlay that was used to build the current deployment or the current cas.properties file? Being new to CAS it might be helpful to have a start to finish guide, such as David

[cas-user] Use of CAS generated JWT instead of Proxy Ticket

2019-02-27 Thread Konstantin
We consider using CAS generated JWT instead of Service Ticket. We also face a proxy like use case described here . Why would we go into complexities of the CAS proxy call flow

[cas-user] Use JWT instead of proxy ticket

2019-02-27 Thread Konstantin
We consider using CAS generated JWT instead of Service Ticket. We also face a proxy like use case described here . Why would we go into complexities of the CAS proxy call flow

Re: [cas-user] Re: Need to upgrade CAS 5.1.4 to 5.3.8

2019-02-27 Thread Drew Liscomb
I agree with Peter; we upgraded from 5.1.3 to 5.3.8 (just finished yesterday), and it wasn't straightforward at all. I recommend turning on logging for the classes you have changed. Using the debugger might be of use, but for me, trying to trace in Spring applications wasn't useful. YMMV. The

[cas-user] Re: Anyone using ellucian banner 9 apps with saml on cas?

2019-02-27 Thread 'Robert Bond' via CAS Community
Hi Matt, Thanks for your reply. I think it might just be a bug currently. Looks like there have been some changes to how cas selects mfa. It currently does not work for finding the service when it comes in using the TARGET= service method. 2019-02-25 09:47:54,016 DEBUG [

[cas-user] Re: Need to upgrade CAS 5.1.4 to 5.3.8

2019-02-27 Thread Peter Machala
Hi Pameliya, I did upgrade from version 5.1.8 to 5.3.2 and it was really pain. The cas source code was divided into many modules so will need to add some new dependencies and update a lot of properties. So first change the version to the new and run CAS with debug logs see the error(probably