Re: [cas-user] CAS 4.1.7 and SPNEGO

2016-07-24 Thread Colin Wilkinson
2016 10:15:59 UTC+10, Colin Wilkinson wrote: > > Hi, > > No that is the weirdest thing the ip CAS machine. > > CAS Machine ip address is XX.XX.XX.XX > DEVADDC ip address is YY.YY.YY.YY > > The JCIFS Config is as follows, I tried kerberosKdc with ip a

Re: [cas-user] CAS 4.1.7 and SPNEGO

2016-07-24 Thread Colin Wilkinson
Hi, No that is the weirdest thing the ip CAS machine. CAS Machine ip address is XX.XX.XX.XX DEVADDC ip address is YY.YY.YY.YY The JCIFS Config is as follows, I tried kerberosKdc with ip address and same results. http://devad.vu.edu.au/>"

Re: [cas-user] CAS 4.1.7 and SPNEGO

2016-07-24 Thread Colin Wilkinson
Hi, No that is the weirdest thing the ip CAS machine. The JCIFS Config is as follows, I tried kerberosKdc with ip address and same results. caskrb5.conf is as follows, [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server =

[cas-user] CAS 4.1.7 and SPNEGO

2016-07-21 Thread Colin Wilkinson
Hi CAS Community, At my work I have been requested see if we can configure CAS to Authenticate with AD using SPNEGO, but I am getting the below exception. I have tried a variety of things with no success. I thinking there maybe an issue with regards to how the network is setup. Basically the

[cas-user] Re: CAS 4.1.9 error, Unable to correctly extract the Initialization Vector or ciphertext

2016-12-11 Thread Colin Wilkinson
We are getting the same issue in production, did you manage to solve this On Tuesday, 30 August 2016 02:48:45 UTC+10, Yan Zhou wrote: > > Hi there, > > Running CAS 4.1.9 overlay, intermittently seeing this error repeatedly. > Any idea what could be wrong? > > Thanks, > Yan > > > this is my

[cas-user] Re: CAS 4.2.2 Distributed Issue - NullPointerException - Unable to correctly extract the Initialization Vector

2016-12-11 Thread Colin Wilkinson
We are getting the same issue in production, did you manage to solve this On Wednesday, 23 November 2016 17:18:34 UTC+11, liu chenghai wrote: > > I have the same problem and don't resolve > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines:

[cas-user] Re: CAS Ticket Issue

2016-12-13 Thread Colin Wilkinson
t page <https://tomcat.apache.org/tomcat-8.0-doc/config/valve.html> On Tuesday, 13 December 2016 07:31:19 UTC+11, Colin Wilkinson wrote: > > Hi, > > We seem to have an strange problem every now and then. We people are > already signed into the Portal and click another lin

[cas-user] CAS and Windows 10

2016-12-03 Thread Colin Wilkinson
Guys, We have had a strange problem that took us most of the week to realise that there looks to be a real weird issue with access CAS from a windows 10 device. When accessing CAS from a Windows 10 devices through a browser it executes the login flow twice. This means you loose all attributes

Re: [cas-user] Re: CAS and Windows 10

2016-12-05 Thread Colin Wilkinson
-page-requests.htm > > ) > Any chance of a missing image file in your Windows 10 environment, in case > you have customized casLoginView.jsp (or any of the jsps it includes) > > On Mon, Dec 5, 2016 at 2:01 AM, Colin Wilkinson <wilc...@gmail.com > > wrote: > >> T

Re: [cas-user] Re: CAS and Windows 10

2016-12-05 Thread Colin Wilkinson
Tuesday, 6 December 2016 07:23:38 UTC+11, Colin Wilkinson wrote: > > Hi Kartik, > > Thanks for the Help information we have noticed dev server is working > correctly, but test, uat and prod and working incorrect. May be something > is missing. > > Regards, > Colin > >

[cas-user] Re: CAS and Windows 10

2016-12-04 Thread Colin Wilkinson
gt; in which the login flow fails to execute if there's a malformed HTML > element. > > On Saturday, December 3, 2016 at 11:22:41 PM UTC-8, Colin Wilkinson wrote: >> >> Guys, >> >> We have had a strange problem that took us most of the week to realise >> that t

Re: [cas-user] CAS server in Angular JS + spring REST API architecture

2017-07-07 Thread Colin Wilkinson
Hi, I am looking at intergrating CAS with angular not angularjs. I came across this website during my travels and unsure if it helps. https://github.com/fedon/spring-cas-auth Regrads, Colin On Sat, Jul 8, 2017 at 2:17 AM, Filip Majernik wrote: > I have a following

Re: [cas-user] CAS 5 - SNPEGO with LDAP fallback

2017-06-03 Thread Colin Wilkinson
What we found is that chrome does not have it own settings it relies on the Internet Explorer settings. Internet explorer unlike Firefox has three settings. Internet Explorer settings. 1. On and CAS server allowed. 2. On and CAS server not allowed. Note this default setting. 3. Turned off. The

[cas-user] Using Eclipse

2017-10-29 Thread Colin Wilkinson
Hi, This is just an F.Y.I for any other person trying to import CAS into an eclipse workspace. CAS does *NOT* work with the eclipse gradle buildship plugin as by the looks it cannot configure the class path properly and crashes on importing of the CAS webapp modules. When you try an import

[cas-user] CAS Password Management webflow

2018-05-03 Thread Colin Wilkinson
Hi, We are in the process of upgrading from 4.1.7, we are currently doing the development on 5.3.0-RC4. While trying to get an understanding of how your password management webflow configure worked out, I created a Java class to be able to dump the flow to disk and noticed something really

[cas-user] Re: [Cas 5.1.8] Unable to connect to Database for authentication.

2018-08-21 Thread Colin Wilkinson
As Andy Ng has already stated you need to include the database driver, oracle have there own maven repository that all you need is logon credentials to use. Just be careful oracle include alot of dependencies that are not required and actually cause problems. Specifically exclude

[cas-user] CAS 5.3.x PAC4J

2018-09-24 Thread Colin Wilkinson
Hi, We at working are looking at implementing delegated authentication for facebook, google, twitter, etc but there seems to be a weird issue with it. A little bit of background we have extended the delegated authentication as we need to map the email associated with facebook for instance back

Re: [cas-user] Re: AUP and X509 authentication

2018-09-24 Thread Colin Wilkinson
Hi, I had to do something similar for the Password Management and did not want to recreate everything. So the solution I came up with was to remove the passwordManagementWebflowConfigurer from the execution plan and set the order to one before my configurer and readd the

[cas-user] Re: CAS 5.3.x PAC4J

2018-09-24 Thread Colin Wilkinson
Hi, I have worked out what the issue was. It one of the scope session beans being loaded after the initial request that was causing the issue. Regards, On Monday, 24 September 2018 15:59:52 UTC+10, Colin Wilkinson wrote: > > Hi, > > We at working are looking at implementi

Re: [cas-user] Re: CAS 5.3.x PAC4J

2018-09-25 Thread Colin Wilkinson
Was it a bug on your customization or something from the CAS server itself? > Thanks. > Best regards, > Jérôme > > > On Tue, Sep 25, 2018 at 4:37 AM Colin Wilkinson > wrote: > >> Hi, >> >> I have worked out what the issue was. It one of the scope se

Re: [cas-user] Re: CAS 5.3.x PAC4J

2018-09-25 Thread Colin Wilkinson
Regarding Authentication I have ask a separate question to see if what I want to do is possible. On Wednesday, 26 September 2018 08:14:00 UTC+10, Colin Wilkinson wrote: > > Hi Jérôme, > > I am not 100% sure, if it maybe a edge bug with CAS server itself. > Basically it

[cas-user] CAS Authentication Handlers

2018-09-25 Thread Colin Wilkinson
Hi, I wondering if its possible to have multiple authentication handlers run for the same credential type. Take "ClientCredential" for instance, I am trying to have multiple authentication handlers run. I am trying to leave your default ClientAuthenticationHandler as and have second

[cas-user] Re: lose service parameter when incorrect credential entered

2019-02-06 Thread Colin Wilkinson
Hi Yan, As Ray correct pointed out the XML webflow defined is a basic starting point, if search through the you find alot of class extending Cas*Webflow*Configurer this include the DefaultLoginWebflowConfigurer. During our upgrade from I noticed the same issue that at times the service

[cas-user] CAS 5.3.7 IDP Metadata creation

2019-02-06 Thread Colin Wilkinson
Hi, We are in the process of trying to migrated so of our SAML related logins across to CAS when noticed that not all the end points are actually defined in the metadata file. Upon further investigation we found that the template file that is used to generate the metadata file is missing the

Re: [cas-user] Re: Cas Default language

2019-02-19 Thread Colin Wilkinson
Hi John, firstly there is no such locale in java as UK, the locale for UK is en_GB see Java Locale “English (United Kingdom)” . Secondly its defined in the wrong location, you have it defined application.properties but you need to define it

[cas-user] Re: SAML2 Auth flow broken using CAS 6.1.0-RC6

2020-06-21 Thread Colin Wilkinson
Guys, In CAS 6.1.0-RC5 CoreSamlConfiguration.java was updated to take into account the use of Apache Velocity 2.x, see Pull request 4187

[cas-user] Radius MFA mock call RadiusMultifactorAuthenticationProvider

2020-07-22 Thread Colin Wilkinson
HI, We are currently trying to integrate CAS with Radius MFA and have noticed in the logs of the Radius server that CAS is making an initiall call of using the username "RadiusMultifactorAuthenticationProvider" in the attached method to see if the call is available. Why does CAS make test to

[cas-user] Regarding Radius MFA EAP-MCHAPV2 protocol

2020-07-22 Thread Colin Wilkinson
Hi, While trying to integrate CAS with Radius MFA we have noticed that when using EAP-MCHAPV2 protocol CAS always proceeds to the login has been successful. I have noticed that if CAS receives an Access Challenge reponse it proceeds on, but should CAS only proceed on if Access Accept has been

[cas-user] CAS 6.2.0 - OIDC - JWT Access Token

2020-12-07 Thread Colin Wilkinson
Hi, I am trying to configure an OIDC service with JWT Access Token set to true with an using alternate jwks other than the default. I have tried bunch of different configurations within the service file but it always seems to use the default jwks. At this stage I am only trying to sign but

[cas-user] Two instances of CAS

2023-03-26 Thread Colin Wilkinson
Hi, We have picked up a weird issue during our development of a our CAS upgrade. We are running two instances of CAS an instance handle only the delegation authentication for employee/students to Azure Ad and applicants to the second instance of CAS for on premise AD. This issue when you try

[cas-user] CAS 7.0.0-RC5 change passsword issue

2023-03-26 Thread Colin Wilkinson
Hi, I think you have a slight coding mistake in PasswordChangeAction.java. When we were testing change password the other current password was coming back null. I believe you have a coding mistake in the following lines of code as in the below code you are just setting it back to itself.

[cas-user] Pac4j Azure Ad issue

2023-02-19 Thread Colin Wilkinson
Hi, I am unsure if this related to Pac4j Azure Ad redirect issue or even if its a a CAS issue, but I thought I would start here. I patched the above issue locally to prevent the tenant from going missing so that I could

Re: [cas-user] CAS 7.0.0-RC4 Pac4j Azure not working

2023-02-22 Thread Colin Wilkinson
Tenant()); >> val azureClient = new AzureAd2Client(cfg); >> configureClient(azureClient, clientProperties.getAzure(), >> casProperties); >> return azureClient; >> } >> >> Thanks. >> Regards, &g

Re: [cas-user] CAS 7.0.0-RC4 Pac4j Azure not working

2023-02-16 Thread Colin Wilkinson
ted CAS delegated authn configuration? > > Remove any sensitive information! > > Thanks. > Best regards, > Jérôme > > > Le mer. 15 févr. 2023 à 06:18, Colin Wilkinson a > écrit : > >> Hi, >> >> I am just testing out configuration against CAS 7.0.0-RC4.

[cas-user] Re: Pac4j Azure Ad issue

2023-02-21 Thread Colin Wilkinson
This is a pac4j issue and has been raised with pac4j as https://groups.google.com/g/pac4j-dev/c/k8Dj3ihjtMU On Monday, 20 February 2023 at 17:05:47 UTC+11 Colin Wilkinson wrote: > Hi, > > > I am unsure if this related to Pac4j Azure Ad redirect issue > <https://groups.googl

[cas-user] Re: Two instances of CAS

2023-04-21 Thread Colin Wilkinson
Hi Pablo, Two version of tomcat running under separate users. CAS1 Details, Tomcat Location: /opt/tomcat1 CAS Config: /etc/cas/config Tomcat User: tomcat101 CAS2 Details, Tomcat Location: /opt/tomcat2 CAS Config: /etc/cas2/config Tomcat User: tomcat1012 This issue should be able to be

[cas-user] CAS 7.0.0-RC4 Pac4j Azure not working

2023-02-14 Thread Colin Wilkinson
Hi, I am just testing out configuration against CAS 7.0.0-RC4. The configuration is currently deployed to our dev server against CAS 6.6.x this is working fine. But when I go to run against CAS 7.0.0.RC4 I get, Caused by: java.net.URISyntaxException: Illegal character in path at index 34: