[cas-user] WS-Federation - need clarification on keystores

2021-11-01 Thread Petr Fišer
Hello, I am deploying CAS 6.2.8 with WS-Federation IdP and I am kinda confused by keystores configuration. Official documentation https://apereo.github.io/cas/6.2.x/configuration/Configuration-Properties.html#ws-federation says: #

Re: [cas-user] Re: Cannot connect to mdq.incommon.org

2022-03-11 Thread Petr Fišer
meters when starting java, but, it neither doesn't work Cheers! El 02/03/2022 a las 13:18, Petr Fišer escribió: Hello, cas.* properties are meant to configure CAS, not the management app. Properties for management app start

Re: [cas-user] Re: Cannot connect to mdq.incommon.org

2022-03-11 Thread Petr Fišer
s! El 02/03/2022 a las 13:18, Petr Fišer escribió: Hello, cas.* properties are meant to configure CAS, not the management app. Properties for management app start with "mgmt." Skimming through https://github.com/apereo/cas-manageme

Re: [cas-user] Re: Cannot connect to mdq.incommon.org

2022-03-10 Thread Petr Fišer
her doesn't work Cheers! El 02/03/2022 a las 13:18, Petr Fišer escribió: Hello, cas.* properties are meant to configure CAS, not the management app. Properties for management app start with "mgmt." Skimming through https://github.com/apereo/cas-manageme

Re: [cas-user] cas.server.prefix being ignored

2022-02-16 Thread Petr Fišer
er. Should it work in this case? > Do you have any clue what else I could be missing? > > Regards, > > El mié, 16 feb 2022 a las 4:19, Petr Fišer () > escribió: > >> Hello, >> This looks like you are deploying CAS to your own app container. >> It wi

Re: [cas-user] cas.server.prefix being ignored

2022-02-15 Thread Petr Fišer
Hello, This looks like you are deploying CAS to your own app container. It will not work, because "server.xxx" properties are made for configuring a tomcat container embedded in the war. Cheers, Fiisch On 02/15/2022 05:08 PM, Agustín Ezequiel Pereyra wrote: Hello, I want to deploy cas

Re: [cas-user] Re: Cannot connect to mdq.incommon.org

2022-03-02 Thread Petr Fišer
Hello, cas.* properties are meant to configure CAS, not the management app. Properties for management app start with "mgmt." Skimming through

[cas-user] Re: SAML IdP with complex type attributes

2022-03-04 Thread Petr Fišer
mentvalue Cheers, Fiisch Dne čtvrtek 10. února 2022 v 17:14:21 UTC+1 uživatel Petr Fišer napsal: > Hello, > I am operating CAS 6.2.x as SAML2 IdP. One of our SP needs to get more > complex structure in the attribute statements, basically something like > this: > > N

Re: [cas-user] Prevent users bookmarking and sharing URLs containing CAS ticket

2022-03-04 Thread Petr Fišer
Hello, I think you should look into TGT/ST expiration and validation policies https://apereo.github.io/cas/6.4.x/ticketing/Configuring-Ticket-Expiration-Policy.html . For example, setting cas.ticket.st.number-of-uses=1 will make CAS invalidate the service ticket after one validation

[cas-user] SAML IdP with complex type attributes

2022-02-10 Thread Petr Fišer
Hello, I am operating CAS 6.2.x as SAML2 IdP. One of our SP needs to get more complex structure in the attribute statements, basically something like this: NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> ... This should be possible by

[cas-user] Re: CAS Management overlay 6.3.7 run failed due to ConnectTimeoutException: Connect to mdq.incommon.org:443

2022-02-10 Thread Petr Fišer
Hello, Some versions of the CAS Mgmt app have an if-statement in their code that disables the incommon checking when the incommon URL is empty. For example:

Re: [cas-user] Upgrade documentation

2022-04-08 Thread Petr Fišer
Hello, As for the properties, this is what you are looking for (use the branch/tag you need). https://raw.githubusercontent.com/apereo/cas-overlay-template/master/etc/cas/config/cas.properties When you start up CAS with some property it does not understand, it will tell you in the log, as you

Re: [cas-user] CAS 6.5.3 : OpenID Connect problem

2022-05-05 Thread Petr Fišer
Hello, Do you have DEBUG logging enabled? Is there anything interesting in the logs? Also, what is your setup? Are you running behind a proxy, perchance? Cheers, Fiisch On 05/05/2022 09:27 AM, wouldsmina wrote: I had no properties in cas.properties for oidc. I added

Re: [cas-user] CAS 6.5.3 : OpenID Connect problem

2022-05-05 Thread Petr Fišer
ss /cas ajp://spartana-b2.domain.fr:8010/cas <http://spartana-b2.domain.fr:8010/cas> Regards. Le jeu. 5 mai 2022 à 11:02, Petr Fišer <mailto:petr.fiser...@gmail.com>> a écrit : Hello, Do you have DEBUG logging enabled? Is there anything interesting in the logs? A

Re: [cas-user] Special Characters in cas.properties values

2022-09-06 Thread Petr Fišer
Hello, Most probably, you will have to convert them to Java properties format. Unicode stuff is written like \u where is the code. You can use this to convert stuff. But it is a website... so think twice before you put your passwords there. https://itpro.cz/juniconv/ Cheers, Fiisch

Re: [cas-user] CAS Client help

2022-11-29 Thread Petr Fišer
a Ticket Granting Ticket, then you use that to get a Service Ticket, and then after you have the Service Ticket you are able to call the service? I didn’t see any example of what to do with the Service Ticket once you have it. Thanks! *From:*Petr Fišer *Sent:* Wednesday, November 23, 2022 1:27

Re: [cas-user] CAS Client help

2022-11-23 Thread Petr Fišer
Hello, It is probably better to use this https://apereo.github.io/cas/6.6.x/protocol/REST-Protocol.html . Cheers, Fiisch On 11/22/2022 10:48 PM, Michael Remijan wrote: Hello user community, I am looking for some information on a CAS client and I haven’t been able to find it anywhere

Re: [cas-user] Replace one jar library in WAR file.

2023-05-02 Thread Petr Fišer
Hello, Not sure about the config way, sorry. But I would look into CAS bootstrap code for DUO and maybe there is a way to nudge your certificate in... provided the DUO has API for it. That way you will be patching just the CAS class that bootstraps the DUO... which you can do using src/ folder

Re: [cas-user] Potential new features

2023-05-25 Thread Petr Fišer
Hello, Feature 1 IMO, this will break a lot of things. Also, if you are logged in as one user, why would you need another login sesison as different user in another tab? Is there any specific use-case you are pursuing? BTW user can open separate (anonymous) browser window if they want. I can

Re: [cas-user] Re: Add `Scoping` key to SAML AuthnRequest

2023-06-05 Thread Petr Fišer
Hello, DefaultDelegatedClientFactory.java is the class that bootstraps delegated clients. Its configureSamlClient(...) method is probably the starting point you want. Cheers, Fiisch On 06/05/2023 08:19 AM, Juan Manuel Díaz Nevado wrote: Hello, we are facing this problem now with version

Re: [cas-user] About session expiration

2023-06-13 Thread Petr Fišer
Hello, When you change a network, your IP address usually changes as well. As per https://apereo.github.io/cas/6.5.x/authentication/Configuring-SSO.html : "The cookie value *is linked to the active ticket-granting ticket, the remote IP address that initiated the request as well as the user