Re: [cas-user] Returning userid in Validation Response

2016-01-06 Thread Dmitriy Kopylenko
Are you manually calling CAS server validation endpoint or using CAS client library? In other words - how do you get that validation XML response that you are showing? Few pointers - for validation, CAS4 has 4 (I believe off the top of my head): 1) Legacy: /validate 2) CAS2 protocol:

Re: [cas-user] queryDatabaseAuthenticationHandler not being called (CAS 4.2.2)

2016-06-03 Thread Dmitriy Kopylenko
te> to create a war and yes > propertyFileDescriptor.xml is where I have copied that xml from. > > Once deployed it is in > apache-tomcat-8.0.33/webapps/cas/WEB-INF/spring-configuration/propertyFileConfigurer.xml > > Do you need any more info? > > Thanks! > John &g

Re: [cas-user] queryDatabaseAuthenticationHandler not being called (CAS 4.2.2)

2016-06-03 Thread Dmitriy Kopylenko
You mentioned ‘propertyFileDescriptor.xml’. Is that where you define your beans shown below? Where do you place this file? D. > On Jun 3, 2016, at 11:21 AM, John Rellis wrote: > > Thanks but that doesn't use queryDatabaseAuthenticationHandler :( > > On Friday, 3 June

Re: [cas-user] (Need Help) ClearPass integration with CAS 4.0.0

2016-06-06 Thread Dmitriy Kopylenko
This -> http://apereo.github.io/cas/4.0.x/integration/ClearPass.html Cheers, D. On Mon, Jun 6, 2016 at 07:14, wael souissi wrote: Hello Cas community , I'm working on CASifying Outlook Web Access 2010 [https://wiki.jasig.org/display/CAS/CASifying+Outlook+Web+Access+2010]

Re: [cas-user] queryDatabaseAuthenticationHandler not being called (CAS 4.2.2)

2016-06-03 Thread Dmitriy Kopylenko
Misagh linked to, thanks to you both. Hopefully I > won't have to come back with more questions. > > Thanks, > John > > On Fri, 3 Jun 2016 at 16:40 Dmitriy Kopylenko <dkopyle...@unicon.net > <mailto:dkopyle...@unicon.net>> wrote: > Place the custom handler def

Re: [cas-user] Re: Help with SLO and Java Web Client

2016-06-13 Thread Dmitriy Kopylenko
It's hard to understand what you are after, but perhaps take a look at the sample CASyfied Spring Boot web app: https://github.com/UniconLabs/bootiful-cas-client [https://github.com/UniconLabs/bootiful-cas-client] Cheers, D. On Mon, Jun 13, 2016 at 02:06, Atul shinde

Re: [cas-user] Problem whith service access strategy

2016-06-15 Thread Dmitriy Kopylenko
Try this (notice 2 comma-separated string in the list literal there: "requiredAttributes": { "@class": "java.util.HashMap", "listas": [ "java.util.HashSet", [ “group1", "group3" ] ] } > On Jun 15, 2016, at 9:28 AM, Juan Carlos Giménez Moncada > wrote: > >

Re: [cas-user] Implicit grant

2016-05-30 Thread Dmitriy Kopylenko
No plans to bring any new features into 4.1.x line as it's purely in the "maintenance" mode (critical bug fixes). Wrt v5 release date - there is no definitive "do or die" set date, but there are targets: https://github.com/apereo/cas/milestones [https://github.com/apereo/cas/milestones]

Re: [cas-user] CAS Server WAR fails to deploy on WildFly 9.0.2 App Server when running on AIX OS

2016-05-26 Thread Dmitriy Kopylenko
Speculation: but I have a feeling it has to do with different processor architectures mismatches e.g. the keystore was built/produced on one processor architecture and when deployed on AIX (ppc64-64) and was tried to be read - Caused by: java.io.IOException:

Re: [cas-user] cannot find ST in debugger mode?

2016-06-01 Thread Dmitriy Kopylenko
Most likely the ST just expires during your debugging session. The default expiration time is 10 second. Set it to a higher value for your debugging so it stays valid. The example below sets it to 3 minutes: st.timeToKillInSeconds=180 This could be the same problem with your REST clients - by

Re: [cas-user] Any published use of cas by "fortune 500" companies?

2016-06-21 Thread Dmitriy Kopylenko
Just did an unscientific Google search for ‘/cas/login’ - lots of CAS login pages came up. Here’s one interesting - Mazda corp. Europe portal is CASyfied: https://mapps.mazdaeur.com/cas/login?service=https%3a%2f%2fportal.mazdaeur.com%2f

Re: [cas-user] Rest API Service Ticket Validation Issue

2016-06-20 Thread Dmitriy Kopylenko
>>>>>> From: cas-...@apereo.org <mailto:cas-...@apereo.org> >>>>>> [mailto:cas-...@apereo.org <mailto:cas-...@apereo.org>] On Behalf Of >>>>>> John Stevens II >>>>>> Sent: Friday, June 17, 2016 12:10 PM >>>>>

Re: [cas-user] CAS 4.1 - How to open to all services

2016-01-11 Thread Dmitriy Kopylenko
So out of the box, as.war contains several JSON services definitions in webapps/resources/services. Allow ALL https or imaps regex definition is one of them. In your case you have HTTP. So you’d want to find this file in your exploded war and add ‘http’ to the serviceId regex:

Re: [cas-user] Anonymous Access (Re-Posting In cas-user)

2016-02-08 Thread Dmitriy Kopylenko
FWIW, the AnonymousRegisteredServiceUsernameAttributeProvider has nothing to do with your use case. Basically this component generates a random, opaque tokens (unique per registered service) and releases those values in place of real authenticated principal ids to CAS client apps. In your

Re: [cas-user] JSON service registry from URL (CAS 3.6)

2016-01-27 Thread Dmitriy Kopylenko
Once the services are loaded into memory from the existing resource (file, URI), the responsibility for “watching” this resource lies in the separate component (a Spring managed bean bound to a periodic scheduled task). If during its "watch loop” iteration the resource becomes unavailable, the

Re: [cas-user] CAS documentation

2016-01-26 Thread Dmitriy Kopylenko
.properties.sample > -rw-rw-r-- 1 root root 3369 Jan 18 17:42 pom.xml > drwxrwxr-x 5 root root 4096 Jan 18 17:42 src/ > > to my current cas-overlay-template ? > > would it be the right way of doing it? what about if I want to allow CAS > server to store tickets in a mySQL

Re: [cas-user] CAS documentation

2016-01-20 Thread Dmitriy Kopylenko
Hi there. Try to go over this: http://jasig.github.io/cas/4.1.x/installation/Maven-Overlay-Installation.html Cheers, Dmitriy. > On Jan 20, 2016, at 9:14 AM, Josep Manel Andrés wrote: > > Hi

Re: [cas-user] CAS overlay, what happens when I must copy a source file and make changes?

2016-03-10 Thread Dmitriy Kopylenko
ing the entire XML and change one line. > > Yan > > On 3/10/2016 1:27 PM, Dmitriy Kopylenko wrote: >> For dispatcher servlet context beans in CAS 4.1+ there is a better way than >> copying the entire cas-servlet.xml. CAS now recognizes the pattern of >> additional

Re: [cas-user] The supplied service xxxxx is not authorized to use CAS proxy authentication.

2016-03-25 Thread Dmitriy Kopylenko
It’d be always useful to provide what exact version of CAS being used when asking questions. For CAS 4.1+ (4.1 and greater), please consult the following guide on proxying config options: https://jasig.github.io/cas/4.2.x/installation/Configuring-Service-Proxy-Policy.html

Re: [cas-user] CAS Service Management webapp not loading

2016-03-08 Thread Dmitriy Kopylenko
What user are you using to login to the mgmt app? By default only 'casuser' is authorized to use the app: https://github.com/Jasig/cas-services-management-overlay/blob/master/etc/user-details.properties#L29 Cheers, Dmitriy. Sent from my iPhone > On Mar 8, 2016, at 08:23, Josep Manel Andrés

Re: [cas-user] CAS Service Management webapp not loading

2016-03-08 Thread Dmitriy Kopylenko
uthorized access page. > > > On 08/03/16 14:29, Dmitriy Kopylenko wrote: >> What user are you using to login to the mgmt app? By default only 'casuser' >> is authorized to use the app: >> <https://github.com/Jasig/cas-services-management-overlay/blob/master/etc/u

Re: [cas-user] Externalizing Log4j2 Not Working on Cas 4.2.1

2016-04-28 Thread Dmitriy Kopylenko
Yes, as indicated in the doc that Misagh referenced, the ‘log4j.configurationFile’ is a system level JVM property that is not set in your cas.properties file. This is the change in 4.2+. You’d need to explicitly pass this system property to your JVM runtime with -D prefix. Here’s for example

Re: [cas-user] Externalizing Log4j2 Not Working on Cas 4.2.1

2016-04-28 Thread Dmitriy Kopylenko
tartup scripts or > setenv.sh script, but I tried to create setenv.sh in the Tomcat home/bin > directory. > > I haven't found anything yet regarding how to tell Tomcat to use setenv.sh. > Is there another way to set this in Tomcat? > > Thanks, > Matt > > On Thursday, April

Re: [cas-user] too many attributes released for org.jasig.cas.services.ReturnAllowedAttributeReleasePolicy

2016-05-23 Thread Dmitriy Kopylenko
Hi Ted, if you could provide the simplest possible CAS overlay with the version that you are using (perhaps with the stub in-memory person dir dao to simulate attribute repo) here: https://github.com/cas-projects/cas-issues that could demonstrate

Re: [cas-user] Missing dependencies?

2016-05-23 Thread Dmitriy Kopylenko
Hi there. The ‘org.apereo.cas’ group id is not available in the released versions of 4.x line of CAS server. This will only be available in the next generation of CAS, namely 5.0.0. For CAS 4.2.x generation, use ‘org.jasig.cas’ group id. Cheers, Dmitriy. > On May 23, 2016, at 9:59 AM, Conan

Re: [cas-user] cas documentation

2016-05-09 Thread Dmitriy Kopylenko
Jasig and Apereo websites. And by the way, all documentations and source code seems to have disappeared from JASIG Github. Is it intended? http://jasig.github.io/cas/ [http://jasig.github.io/cas/] (error 404) Cheers, Mehdi Le 08/05/2016 21:24, Dmitriy Kopylenko a écrit : What exactly do you find confusing in

Re: [cas-user] CAS server with backend Ldap (openldap) :

2016-05-17 Thread Dmitriy Kopylenko
See if this helps: http://apereo.github.io/cas/4.2.x/installation/Maven-Overlay-Installation.html http://apereo.github.io/cas/4.2.x/installation/LDAP-Authentication.html

Re: [cas-user] [CAS 4.2.x] cas-server-support-gauth not resolvable

2016-05-17 Thread Dmitriy Kopylenko
May be this warning box needs to be big BOLD RED ;-) Cheers, D. > On May 17, 2016, at 9:46 AM, Misagh Moayyed wrote: > > See the big blue warning up at the top of the docs. > > From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Abhishek > [ABK] Kumar

Re: [cas-user] [CAS 4.2.x] cas-server-support-gauth not resolvable

2016-05-17 Thread Dmitriy Kopylenko
Sounds good. No “beta” releases are available yet, although milestone releases (you could consider them as “alpha”) should be appearing soon (before the end of May) if everything goes smoothly e.g. 5.0.0-M1, with 5.0.0-M2 to follow, etc. before “beta” releases ('release candidates' in CAS

Re: [cas-user] Re: How to build cas-4.2.1 with LDAP for Active Directory?

2016-05-03 Thread Dmitriy Kopylenko
Make sure you read, understand, and follow instructions described in the documentation represented by links below in the exact order: https://jasig.github.io/cas/4.2.x/installation/Maven-Overlay-Installation.html https://jasig.github.io/cas/4.2.x/installation/LDAP-Authentication.html

Re: [cas-user] Re: How to build cas-4.2.1 with LDAP for Active Directory?

2016-05-03 Thread Dmitriy Kopylenko
ou any defined steps or sample files for deployerConfigContext.xml with Active Directory implementation? Thanks. بتاريخ الثلاثاء، 3 مايو، 2016 1:35:39 م UTC+3، كتب Dmitriy Kopylenko: Make sure you read, understand, and follow instructions described in the documentation represented by links

Re: [cas-user] Dynamic error messages

2016-05-06 Thread Dmitriy Kopylenko
Currently not possible or straightforward to achieve. In CAS v5 (available in SNAPSHOTs versions already) custom error messages based on the custom authentication exceptions would be a trivial feature available out of the box: On Fri, May 6, 2016 at 17:47, Nicolás

Re: [cas-user] Dynamic error messages

2016-05-06 Thread Dmitriy Kopylenko
The link : https://jasig.github.io/cas/development/installation/Webflow-Customization-Exceptions.html [https://jasig.github.io/cas/development/installation/Webflow-Customization-Exceptions.html] On Fri, May 6, 2016 at 18:07, Dmitriy Kopylenko <dkopyle...@unicon.net> wrote: Cur

Re: [cas-user] JS Client to CAS Rest Protocol

2016-05-02 Thread Dmitriy Kopylenko
After simple googling, this came up: https://github.com/danielefenix/jasig-cas-rest-client Cheers, D. > On May 2, 2016, at 11:36 AM, Marcelo Quiroz > wrote: > > Has anyone some Jquery or Javascript

Re: [cas-user] Re: /p3/serviceValidate returning "Ticket...not recognized"

2016-05-10 Thread Dmitriy Kopylenko
Hi William, you’d need to map the default cookie cipher executor to the noop one here: https://github.com/apereo/cas/blob/4.2.x/cas-server-webapp/src/main/webapp/WEB-INF/deployerConfigContext.xml#L76

Re: [cas-user] Releasing credential

2016-04-21 Thread Dmitriy Kopylenko
You need to add one particular authentication metadata populator in deployerConfigContext.xml, so it looks like this: The documentation is missing that piece. Also, you don’t need any of this: Cheers, Dmitriy. > On Apr 21, 2016, at 3:59 AM, Miklós Barabás

Re: [cas-user] CAS User connection with MSSQL database and ASP.NET client

2016-04-19 Thread Dmitriy Kopylenko
621d373cade4e832627b4f6" And I'm testing all three users each time to make sure it's not an encoder problem... Regardless of this possible issue, which log would you need to know more ? And where would it be located ? Thank you, Valentine Tuesday 19 April 2016 12:38:20 UTC+2, Dmitriy Kopylenk

Re: [cas-user] CAS User connection with MSSQL database and ASP.NET client

2016-04-19 Thread Dmitriy Kopylenko
I'm just speculating here since you did not provide any detailed logs: are you storing the password values in the password column for your users in plain text? If so, the DB authn handler delegates to the password encoder to hash the provided credentials and compare it to the password value

Re: [cas-user] [ldap-setting]

2016-07-27 Thread Dmitriy Kopylenko
You want to start here -> https://apereo.github.io/cas/4.2.x/installation/Maven-Overlay-Installation.html and then move to here -> https://apereo.github.io/cas/4.2.x/installation/LDAP-Authentication.html

Re: [cas-user] Hazelcast ticket registry in CAS 4.1.9, connection refused error when startup

2016-08-12 Thread Dmitriy Kopylenko
Just an info message telling that HZ cannot connect to other members of a cluster as there are no other members (by default it auto forms the cluster on ports 5701… and auto increments it for members joining the cluster). So, in short, nothing to worry about here. Cheers, D. > On Aug 12,

Re: [cas-user] Attributes from LDAP Authentication Handler

2016-07-18 Thread Dmitriy Kopylenko
Use this: Cheers, D. On Sun, Jul 17, 2016 at 21:57, Nick Couchman wrote: I'm having a really hard time figuring out the proper deployerContextConfiguration.xml settings to get LDAP attributes from the existing LDAP Authentication Handler rather than having to set

Re: [cas-user] Minor Issue With CAS Functional Tests

2016-07-05 Thread Dmitriy Kopylenko
This proves the usefulness of the functional tests which were able to catch this bug! Cheers, D. > On Jul 5, 2016, at 6:07 PM, William wrote: > > Misagh, > > Will do. I will probably file it late today or tomorrow. Thanks. > > -- > You received this message

Re: [cas-user] cas other attribute

2016-07-07 Thread Dmitriy Kopylenko
Two questions for you: 1) Why are you still using v4.0? (perhaps you're running it in production and haven’t had a chance to upgrade?) 2) What does your authenticationManager bean definition look like? Cheers, D. > On Jul 7, 2016, at 6:47 AM, ghulam faqih wrote: > >

Re: [cas-user] CAS 4.2.3 Release Announcement

2016-07-06 Thread Dmitriy Kopylenko
It’s been fixed in the master and should be available in 4.2.4: https://github.com/apereo/cas/issues/1866 Cheers, D. > On Jul 6, 2016, at 10:46 AM, siim.roma...@gmail.com wrote: > > So I turned DEBUG on found that the problem is transaction manager.

Re: [cas-user] cas other attribute

2016-07-11 Thread Dmitriy Kopylenko
, ghulam faqih <ghulamfa...@gmail.com> wrote: thanks Dmitriy for your advice. 1. im still not success install cas+ldap authentication using v4.2 with same configuration in v4.0 2. here my authenticationManager On Thu, Jul 7, 2016 at 8:14 PM, Dmitriy Kopylenko < dkopyle...@unicon.net

Re: [cas-user] Add static user to some handler

2016-07-11 Thread Dmitriy Kopylenko
You haven’t specified the version of CAS that you use, so I’ll assume the latest. This might solve your use case: https://apereo.github.io/cas/4.2.x/installation/Whitelist-Authentication.html Cheers, D. > On Jul

Re: [cas-user] Add static user to some handler

2016-07-11 Thread Dmitriy Kopylenko
the file. > > > I have tried both: AcceptUsersAuthenticationHandler too, but it never > compiles.... > > Thank you. > > > > On 11/07/16 16:16, Dmitriy Kopylenko wrote: >> You haven’t specified the version of CAS that you use, so I’ll assume >> the latest. This might sol

Re: [cas-user] CAS 5 does not read cas.properties file

2016-08-08 Thread Dmitriy Kopylenko
This should shed some light on CAS v5 configuration facilities: https://apereo.github.io/cas/development/installation/Configuration-Management.html D. > On Aug 8, 2016, at 10:42 AM, Philippe MARASSE >

Re: [cas-user] CAS 4x and gssapi

2016-06-30 Thread Dmitriy Kopylenko
There is this -> https://github.com/apereo/cas/pull/1510 [https://github.com/apereo/cas/pull/1510] Once ldaptive properly releases 1.2.0 GA (no idea when) this should make its way into CAS v5 (unlikely into CAS v4 at that time). Cheers, D. On Thu, Jun 30, 2016 at 03:12, Christophe Ségui

Re: [cas-user] CAS 5.0 developing with bootiful overlay

2016-07-01 Thread Dmitriy Kopylenko
There exists an undocumented (yet) prototype of the next gen CAS deployers Gradle build which consists of an experimental CAS Gradle plugin with a simple DSL to declare dependencies on various CAS modules as 'features' abstraction instead of maven coordinates. It could be used to run CAS in a

Re: [cas-user] Minor Issue With CAS Functional Tests

2016-07-01 Thread Dmitriy Kopylenko
Looks like it’s 4.2.2: https://github.com/wcrowell/cas-functional-tests/blob/master/gradle.properties#L6 D. > On Jul 1, 2016, at 9:46 AM, Misagh Moayyed wrote: > > Which CAS version? >

Re: [cas-user] Hazelcast Management Center with CAS 4.1.x Hazelcast integration

2016-08-16 Thread Dmitriy Kopylenko
CAS 4.1 does not have the native Hazelcast configuration support. That functionality was added in 4.2 Cheers, D. > On Aug 16, 2016, at 3:28 PM, Yan Zhou wrote: > > Hello, > > CAS 4.1.x documentation does not say anything about integrating with > Hazelcast management

Re: [cas-user] Hazelcast Management Center with CAS 4.1.x Hazelcast integration

2016-08-16 Thread Dmitriy Kopylenko
er way is by JMX. Yan On 8/16/2016 3:44 PM, Dmitriy Kopylenko wrote: CAS 4.1 does not have the native Hazelcast configuration support. That functionality was added in 4.2 Cheers, D. On Aug 16, 2016, at 3:28 PM, Yan Zhou < yanand...@gmail.com [yanand...@gmail.com] > wrote: Hell

Re: [cas-user] Database Authentication and External Service for more information about principle object

2017-01-27 Thread Dmitriy Kopylenko
I wouldn’t do it this way. I’d personality plug in Groovy attribute resolver where you’d be able to do external systems HTTP calls, etc. All working within CAS’ framework without the need to reinvent the wheel https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#groovy

Re: [cas-user] Database Authentication and External Service for more information about principle object

2017-01-27 Thread Dmitriy Kopylenko
vices.AbstractRegisteredServiceAttributeReleasePolicy] - 2017-01-27 15:04:48,822 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 2017-01-27 15:04:48,822 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - Thanks, Ganga On

Re: [cas-user] CAS + AD +LDAP

2017-01-25 Thread Dmitriy Kopylenko
Use this ->  https://apereo.github.io/cas/5.0.x/installation/Maven-Overlay-Installation.html Cheers, D. From: Chonv Reply: cas-user@apereo.org Date: January 25, 2017 at 10:31:12 AM To: CAS Community Subject:  [cas-user]

Re: [cas-user] Cas 5.0.2 et Cas Services Management : tables containing services registry are deleted every time I stop tomcat

2017-02-18 Thread Dmitriy Kopylenko
Make sure that this property is set to “update”: cas.serviceRegistry.jpa.ddlAuto=update Or even better, in production never rely on this Hibernate feature to mess with your DB schema during bootstrap. I’d recommend, creating the schema via this Hibernate mechanism once in dev/test environment

Re: [cas-user] Re: Cas 5.x on WildFly

2017-02-23 Thread Dmitriy Kopylenko
Try this:  http://docs.spring.io/spring-boot/docs/1.5.1.RELEASE/reference/htmlsingle/#howto-create-a-deployable-war-file that is - exclude embedded tomcat from either Maven or Gradle overlay build as described there. D. From: Gokhan Mansuroglu Reply: 

Re: [cas-user] CAS/Sprint Security Issue

2017-02-19 Thread Dmitriy Kopylenko
Bring in bootstrap.properties into your Maven/Gradle overlay’s src/main/resources and UNSET this property ->  https://github.com/apereo/cas/blob/5.0.x/webapp/cas-server-webapp/src/main/resources/bootstrap.properties#L24 Note to devs - perhaps we should unset this property by default to not to

Re: [cas-user] Setting up CAS 5.0.2 Server and Banner XE 404 cas/samlValidate?

2017-02-13 Thread Dmitriy Kopylenko
https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#ldap-authentication  see lines 16-20 From: Dmitriy Kopylenko <dkopyle...@unicon.net> Reply: Dmitriy Kopylenko <dkopyle...@unicon.net> Date: February 13, 2017 at 12:17:38 PM To: cas-user@apereo.org <cas-

Re: [cas-user] Setting up CAS 5.0.2 Server and Banner XE 404 cas/samlValidate?

2017-02-13 Thread Dmitriy Kopylenko
Are you “resolving” the attributes?  https://apereo.github.io/cas/5.0.x/integration/Attribute-Resolution.html There are 2 pieces to attributes in CAS: 1) resolution, 2) release. First you need to resolve them from the target authentication store (or some other attribute repository), then

Re: [cas-user] Re: Attributes in Rest Authentication 5.0.1

2017-03-01 Thread Dmitriy Kopylenko
Use version 5.1.0-RC2 or 5.0.3.1 in your overlay. Cheers, D. From: Ivan Cordon Reply: cas-user@apereo.org Date: March 1, 2017 at 8:31:12 AM To: CAS Community Subject:  [cas-user] Re: Attributes in Rest Authentication 5.0.1 I

Re: [cas-user] Step by Step guide

2016-09-09 Thread Dmitriy Kopylenko
There’s always a way… Feel free to contribute ;-) Cheers, D. > On Sep 9, 2016, at 8:51 AM, Josep Manel Andrés wrote: > > Hi guys, > After a while of being subscribedto this mailing list, I have noticed that we > keep asking the same basic questions because there isn't a

Re: [cas-user] Re: Step by Step guide

2016-09-09 Thread Dmitriy Kopylenko
That would be a welcomed contribution to the project, yes. Cheers, D. > On Sep 9, 2016, at 9:18 AM, David Curry wrote: > > For what it's worth, as I've been working on building a CAS 5.0 > development/test environment here, I have been documenting every step along

Re: [cas-user] YUbikey MFA and customized validation URLs

2016-09-14 Thread Dmitriy Kopylenko
That's a valid use case, IMO. I think we need to open up that config option. If you could file an issues on Github, that would be terrific. D. On Wed, Sep 14, 2016 at 06:30, Philippe MARASSE wrote: Actually, we're testing a few Yubikeys with customized

[cas-user] Extending CAS 5 Webflows

2016-10-07 Thread Dmitriy Kopylenko
Folks, as CAS 5 is upon us, I would like to thank Misagh for starting to write a series of blog posts about this next generation of CAS server. Here’s one one excellent post about the new configuration philosophy of CAS 5 and its Spring WebFlow engine configuration overhaul:

Re: [cas-user] CAS / JWT

2016-10-06 Thread Dmitriy Kopylenko
It does. Here’s the v5 documentation: https://apereo.github.io/cas/development/installation/JWT-Authentication.html Cheers, D. > On Oct 6, 2016, at 1:36 PM, Natan Zeferino wrote: > > Folks,

Re: [cas-user] Re: reCAPTCHA validation failed.

2016-09-06 Thread Dmitriy Kopylenko
In CAS 5, the location of the config properties resources is configured in 'bootstrap.properties'. See this guide: https://apereo.github.io/cas/development/installation/Configuration-Management.html [https://apereo.github.io/cas/development/installation/Configuration-Management.html] D. On

Re: [cas-user] why DefaultTicketRegistryCleaner shows up when integrated with Hazelcast?

2016-08-18 Thread Dmitriy Kopylenko
The cleaner just lives there like a parasite ;-) I mean, it’s harmless, but would be something to think about how to auto-disable it when other types of ticket registries that don’t require “external cleaning” are in use. Cheers, D. > On Aug 18, 2016, at 3:21 PM, Yan Zhou

Re: [cas-user] [Cas][SAML2] Decoding issue

2016-08-23 Thread Dmitriy Kopylenko
Would you please file an issue with steps describing how to reproduce the error accompanied with your overlay posted here: https://github.com/cas-projects/cas-issues Thanks, D. > On Aug 23, 2016, at 7:50 AM, Tanna wrote: >

Re: [cas-user] format of variable

2016-08-24 Thread Dmitriy Kopylenko
:10 means if the property placeholder variable is not defined in the properties file, the value of 10 will be used. Cheers, D. > On Aug 24, 2016, at 9:18 AM, vallee.romain wrote: > > Hello, i just have simple question . > > In some files configuration, we can found

[cas-user] Custom coding in CAS 5

2016-10-19 Thread Dmitriy Kopylenko
Folks, here’s an excellent blog post by Misagh on doing custom coding in CAS 5: https://apereo.github.io/2016/10/19/mfacas5-extcfg/ Enjoy, D. -- -- CAS gitter chatroom: https://gitter.im/apereo/cas CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html CAS documentation

Re: [cas-user] Re: CAS and OAuth interoperability

2016-11-15 Thread Dmitriy Kopylenko
It would be nice if I could do it in a similar way to the CasAuthenticationToken.getAssertion().getPrincipal().getProxyTicketFor("xxx") does for cas proxy tickets... Cheers On Tuesday, 15 November 2016 14:23:50 UTC, Dmitriy Kopylenko wrote: There’s this factory API you could try:  https://g

Re: [cas-user] Re: CAS and OAuth interoperability

2016-11-15 Thread Dmitriy Kopylenko
There’s this factory API you could try:  https://github.com/apereo/cas/blob/master/support/cas-server-support-oauth/src/main/java/org/apereo/cas/ticket/accesstoken/AccessTokenFactory.java D. From: Lewis Henderson Reply: cas-user@apereo.org

Re: [cas-user] CAS5 Delegate Authentication for linkedin using pac4j

2016-11-01 Thread Dmitriy Kopylenko
And that is simply because that LinkedIn is not currently implemented. Here are all the pac4j supported clients that are currently implemented:

Re: [cas-user] Can application get TGT ticket?

2016-11-03 Thread Dmitriy Kopylenko
Just to be clear - CAS protocol was never designed to work with Ajax and REST resources (non-interactive service-to-service) Best, D. -- > On Thursday, Nov 03, 2016 at 11:10 AM, Yan Zhou (mailto:yanand...@gmail.com)> wrote: > Hello, > > The basic problem is that CAS

Re: [cas-user] AcceptUsersAuthenticationHandler#0 class not found error

2016-10-17 Thread Dmitriy Kopylenko
Source) > at > org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) > at java.lang.Thread.run(Unknown Source) > > one possible reason is I didn't disable https. I only know how to do it in > the old cas version. Sorry if you thin I s

Re: [cas-user] AcceptUsersAuthenticationHandler#0 class not found error

2016-10-14 Thread Dmitriy Kopylenko
Wrong module and package. v 4.0.0 has the org.jasig.cas.authentication.AcceptUsersAuthenticationHandler in the 'cas-server-core’ module. But more generally, v 4.0,0 is pretty old, so I’d suggest moving into the latest version of CAS. Cheers, D. > On Oct 13, 2016, at 3:14 PM, Xin Gong

Re: [cas-user] How does CAS 4.1.X behave like SAML IdP?

2016-10-14 Thread Dmitriy Kopylenko
Short answer: CAS < v5 cannot act like a standalone SAML IDP. CAS 5 can -> https://apereo.github.io/cas/development/installation/Configuring-SAML2-Authentication.html Cheers, D. > On Oct 13, 2016,

Re: [cas-user] CAS 4.1.x, use a different authentication provider based on the theme of Login page

2016-10-14 Thread Dmitriy Kopylenko
r CAS5 ;-) Cheers, D. > On Oct 13, 2016, at 2:02 PM, Dmitriy Kopylenko <dkopyle...@unicon.net> wrote: > > Off the top of my head - you’d need to somehow make the current “Service” > instance available to the authn handler - perhaps a SWF state to bind it to &g

Re: [cas-user] AcceptUsersAuthenticationHandler#0 class not found error

2016-10-14 Thread Dmitriy Kopylenko
t; https://apereo.github.io/cas/4.0.x/installation/Whitelist-Authentication.html > <https://apereo.github.io/cas/4.0.x/installation/Whitelist-Authentication.html>. > it is probably too old. not sure how to add whitelist in the new CAS module. > > Best regards, > > Xin > > >

Re: [cas-user] CAS 4.1.x, use a different authentication provider based on the theme of Login page

2016-10-14 Thread Dmitriy Kopylenko
how do > I get it? If I have to look up database, I would need a key to look up for. > If it is somewhere populated for the particular service user is logging into, > how do I get to it from authentication handler? > > Thx! > > > On 10/13/2016 1:32 PM, Dmitriy Kop

Re: [cas-user] AcceptUsersAuthenticationHandler#0 class not found error

2016-10-14 Thread Dmitriy Kopylenko
Note that this: accept.authn.users=casuser::Mellon should go to your cas.properties file > On Oct 14, 2016, at 10:41 AM, Dmitriy Kopylenko <dkopyle...@unicon.net> wrote: > > https://apereo.github.io/cas/4.2.x/installation/Whitelist-Authentication.html > <https://apere

Re: [cas-user] Java client - Dynamic service urls

2016-12-20 Thread Dmitriy Kopylenko
Bryan, use the `serverName` param with just a base URL of your client app e.g. https://example.com and the full service URL will be constructed dynamically by CAS client library: see the README: https://github.com/apereo/java-cas-client Cheers, D. From: Bryan Wooten

Re: [cas-user] Tutorial for custom DB authentication with 5.1 (or 5.0)

2017-03-20 Thread Dmitriy Kopylenko
This might help -> https://apereo.github.io/2017/02/02/cas51-authn-handlers/ Cheers, D. From: 'Adalbert Schwafel' via CAS Community Reply: cas-user@apereo.org Date: March 20, 2017 at 6:41:56 AM To: CAS Community Subject: 

Re: [cas-user] REST authentication and attributes

2017-04-06 Thread Dmitriy Kopylenko
Currently in both 5.0.x and master branches, the configuration for the REST authn handler “blindly" sets the person directory principal resolver, disregarding any attributes returned from the remote HTTP resource:

Re: [cas-user] Custom Yubikey registry

2017-03-09 Thread Dmitriy Kopylenko
Which version of CAS? D. From: Dimitri Gavrilov Reply: cas-user@apereo.org Date: March 9, 2017 at 6:46:41 AM To: CAS Community Subject:  [cas-user] Custom Yubikey registry Hello community,   Have anyone already implemented

Re: [cas-user] SAML setup

2017-03-08 Thread Dmitriy Kopylenko
Add this repository to your overlay’s pom: shibboleth-releases https://build.shibboleth.net/nexus/content/repositories/releases D. From: John Wynstra Reply: cas-user@apereo.org Date: March 7, 2017 at 3:15:07 PM To: 

Re: [cas-user] X509 principal resolver to extract substring from CN

2017-07-17 Thread Dmitriy Kopylenko
You’d want to do something like this: 1) Define your own impl of the principal resolver that does the parsing of CN 2) Plug that in via re-defining the x509AuthenticationEventExecutionPlanConfigurer bean. Here’s the current bean definition for you to serve as an example: 

Re: [cas-user] Where exactly can views be found?

2017-07-20 Thread Dmitriy Kopylenko
Thursday, July 20, 2017 at 10:59:33 AM UTC-5, Dmitriy Kopylenko wrote: There is no such directory in the overlay. You need to create one i.e. src/main/resources/templates and then copy the default templates that you are going to be modifying from here:  https://github.com/apereo/cas/tree/mas

Re: [cas-user] How to configure / inject DataSource into AbstractUsernamePasswordAuthenticationHandler (CAS 5.1)

2017-06-28 Thread Dmitriy Kopylenko
You could follow an example of the Jdbc authn handler configuration:  https://github.com/apereo/cas/blob/master/support/cas-server-support-jdbc/src/main/java/org/apereo/cas/adaptors/jdbc/config/CasJdbcAuthenticationConfiguration.java Cheers, D. From: 'Adalbert Schwafel' via CAS Community

Re: [cas-user] Release Attributes from LDAP Authentication

2017-06-30 Thread Dmitriy Kopylenko
If your client is using CAS protocol version 2 for service ticket validation, they will not receive any attributes as protocol v2 does not support it. Switch to protocol version 3 in order to receive principal attributes. https://apereo.github.io/cas/5.1.x/protocol/CAS-Protocol.html Cheers, D.

Re: [cas-user] Release Attributes from LDAP Authentication

2017-06-30 Thread Dmitriy Kopylenko
Correct - i.e. CAS server implementation of CAS protocol v2 does not provide support for principal attributes. Cheers, D. From: David Huebner <d.huebne...@gmail.com> Reply: David Huebner <d.huebne...@gmail.com> Date: June 30, 2017 at 8:40:05 AM To: Dmitriy Kopylenko <dkopyl

Re: [cas-user] Managing access to which services/websites users have access to when using SSO

2017-07-06 Thread Dmitriy Kopylenko
https://apereo.github.io/cas/development/installation/Configuring-Service-Access-Strategy.html D. From: Roy Langa Reply: cas-user@apereo.org Date: July 6, 2017 at 10:06:26 AM To: CAS Community Subject:  [cas-user] Managing access

Re: [cas-user] custome passwordEncoder in CAS 5.1

2017-05-17 Thread Dmitriy Kopylenko
Wrong link. Use this one:  https://apereo.github.io/cas/development/installation/Configuration-Properties.html#database-authentication From: Dmitriy Kopylenko <dkopyle...@unicon.net> Reply: Dmitriy Kopylenko <dkopyle...@unicon.net> Date: May 17, 2017 at 9:07:24 AM To: cas-user@ape

Re: [cas-user] custome passwordEncoder in CAS 5.1

2017-05-17 Thread Dmitriy Kopylenko
gs Le mercredi 17 mai 2017 15:08:23 UTC+2, Dmitriy Kopylenko a écrit : Wrong link. Use this one:  https://apereo.github.io/cas/development/installation/Configuration-Properties.html#database-authentication From: Dmitriy Kopylenko <dkop...@unicon.net> Reply: Dmitriy Kopylenko <dkop...@u

Re: [cas-user] Extending CAS 5 Webflows - build instructions?

2017-05-12 Thread Dmitriy Kopylenko
Try this one for the info on configuration mechanism:  https://apereo.github.io/2017/02/21/cas-autocfg-strategy/ Note, this applies to CAS 5.1. In CAS 5.0.x line, the configuration classes are contributed to Spring app ctx. by means of component scanning, so in order for CAS to pick ‘em up in

Re: [cas-user] externalize bootstrap.properties config

2017-05-15 Thread Dmitriy Kopylenko
http://cloud.spring.io/spring-cloud-static/spring-cloud.html#customizing-bootstrap-properties D. From: Nader Karimi Reply: cas-user@apereo.org Date: May 15, 2017 at 11:26:11 AM To: CAS Community Subject:  [cas-user]

Re: [cas-user] [CAS 5.0.1] Unable to browse any link of my CAS Client web application after successful user authentication through CAS Server

2017-06-20 Thread Dmitriy Kopylenko
Hi there. For a simpler CASification of Spring Boot apps via CAS Java client (without much configuration ceremony), you might want to try this ->  https://github.com/Unicon/cas-client-autoconfig-support And here’s a sample Boot app demonstrating the use of this library -> 

Re: [cas-user] Overloading Bean Configuration does not work in 5.0.4

2017-05-04 Thread Dmitriy Kopylenko
Subject:  Re: [cas-user] Overloading Bean Configuration does not work in 5.0.4 :-( This means I need to overlay the whole CasValidationConfiguration bean. Am 04.05.2017 um 17:46 schrieb Dmitriy Kopylenko <dkopyle...@unicon.net>: The reason is that currently serviceValida

  1   2   >