[cas-user] Inspektr audit says AUTHENTICATION_SUCCESS on authentication failures

There is a bug in the module inspektr-audit-1.7.1.GA when an Exception is thrown on an authentication process that ends logging the authentication as successfully: Logs: 2018-01-23 11:18:18,583 ERROR > [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - > has failed.

Re: [cas-user] Inspektr audit says AUTHENTICATION_SUCCESS on authentication failures

Thanks! El martes, 23 de enero de 2018, 12:50:29 (UTC+1), Dmitriy Kopylenko escribió: > > https://github.com/apereo/inspektr > > D. > > > > > On Tue, Jan 23, 2018 at 5:38 AM -0500, "Oscar del Pozo" < > oscard...@gmail.com > wrote: > > There

[cas-user] CAS 5.2.1 - Error loading ShibbolethAttributeResolverConfiguration

Hi! I'm trying to configure CAS to act as an identity provider. I have configured my service, metadata, etc... but I'm having troubles with my attribute-resolver.xml and it seems to be a problem with the bean initialization order. The problem is creating the bean attributeRepository at

[cas-user] Re: CAS 5.2.1 - Error loading ShibbolethAttributeResolverConfiguration

, I think that the ShibbolethAttributeResolverConfiguration should include the dependency with the samlConfigBean, shouldn't it? El viernes, 26 de enero de 2018, 14:14:47 (UTC+1), Oscar del Pozo escribió: > > Hi! > > I'm trying to configure CAS to act as an identity provider. I have > configured my service, metadata, etc...

[cas-user] Re: pac4j Google2Client auth delegation: How to unauthorize a profile?

eo/cas/pull/3138 > <https://github.com/apereo/cas/pull/3138> that shows how the webflow can be > modify in the case of pac4j* > > On Tuesday, January 23, 2018 at 4:10:34 PM UTC+1, Oscar del Pozo wrote: >> >> Hi! >> >> I'm migrating from CAS 4.0.5 to 5.2.1 and

[cas-user] Re: customize LdapAuthenticationHandler in 5.2.0

Hi! You have a NullPointerException creating your new Bean org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'PostLdapAuthenticationHandler': Invocation of init method failed; nested exception is java.lang.NullPointerException Caused by:

Re: [cas-user] CAS 5.2.1 report failed authentications as AUTHENTICATION_SUCCESS

I have tested right now the new version and it seems to fail. This issue should be re-opened at the github project El lunes, 29 de enero de 2018, 15:34:54 (UTC+1), Ben Howell-Thomas escribió: > > Thankyou :) > > On 23 January 2018 at 16:27, Oscar del Pozo <oscard...@gmail.com >

[cas-user] Re: Overriding Problems with cas.properties

Notice that the cas.properties used is the one that it's located at /etc/cas/config (c:/etc/cas/config at windows environments). The script copies your project configuration to that folder before building the web app (target generation). El jueves, 15 de febrero de 2018, 16:05:28 (UTC+1),

[cas-user] Re: pac4j Google2Client auth delegation: How to unauthorize a profile?

va#L121 > > one could do the type of filtering you want: > a) hardcode it there > b) externalize the email validation/check regexp into some > properties/config file so > c) fast/phugly/hack do the filtering in your LDAP, SQL query, > etc. > > regards, > > martin > >

[cas-user] pac4j Google2Client auth delegation: How to unauthorize a profile?

XXX-XXX / class java.lang.String> > 2018-01-23 15:58:48,581 DEBUG [org.pac4j.oauth.client.Google2Client] - > {name.familyName=del Pozo, > emails=[org.pac4j.oauth.profile.google2.Google2Email@64f6a901], > access_token=..., gender=MALE, displayName=Oscar del Pozo, > name.givenName

Re: [cas-user] CAS 5.2.1 report failed authentications as AUTHENTICATION_SUCCESS

Hi, I've made a pull request solving this issue: https://github.com/apereo/inspektr/pull/10. It has been already approved. El viernes, 19 de enero de 2018, 16:47:02 (UTC+1), Ben Howell-Thomas escribió: > > Might have solved it. > > To confirm what Mohsen said, seems fine in 5.2.0. > >

[cas-user] CAS 5.2.1 login-webflow and exceptionHandlers

Hi again... Debugging the default CAS login flow when an AuthenticationHandler throws an Exception (i.e. UnauthorizedSsoServiceException) I see that the PolicyBasedAuthenticationManager handles that exception adding it to the failures list and finally throws an AuthenticationException. It