[cas-user] Customizing webflows in cass5
I was trying to customize web-flows in cas5 using xml/annotation based configurations, i was facing issue (NoSuchWebflowFoundException) while registering new web-flows.As I was looking at the documentation of apereo found the below link to customize web-flows but couldn't get a clear understanding on registering the flows,could you please give an example or reference for customizing web-flows. Link: https://apereo.github.io/cas/5.1.x/installation/Webflow-Customization-Extensions.html -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/2f1f0e27-2268-4edf-9b05-e2bcfeabd7b8%40apereo.org.
Re: [cas-user] Cas5 Ldap Authentication
Dave can you give a ref for writing our own customization handlers and
configuration classes for Ldap
On Thursday, March 8, 2018 at 6:42:04 PM UTC+5:30, David Curry wrote:
>
> It looks right, but I have never used that particular property, so I'm
> just guessing.
>
> In our environment we have to merge attributes from two different
> directories, so I have the authentication and attribute resolution
> configured separately and list the attributes out individually.
>
> Someone else can probably weigh in on whether that's correct, though. I'm
> pretty sure others are using that property.
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
> On Thu, Mar 8, 2018 at 7:52 AM, yashwanth chowdary <
> ryashwanthk...@gmail.com > wrote:
>
>> Hi David ,
>>
>> Is this the correct way to initialize my principalAttributeList?
>>
>> By the way , I am using 5.3.0RC2 version
>>
>> On Wednesday, March 7, 2018 at 6:23:27 PM UTC+5:30, David Curry wrote:
>>>
>>> You don't say what version you're using, but the userFilter property
>>> was renamed to searchFilter between 5.2 and 5.3 as part of the property
>>> documentation cleanup.
>>>
>>> (Documented here:
>>> https://apereo.github.io/2017/12/29/530rc1-release/#documentation-cleanup
>>> )
>>>
>>> --Dave
>>>
>>>
>>>
>>>
>>> --
>>>
>>> DAVID A. CURRY, CISSP
>>> *DIRECTOR OF INFORMATION SECURITY*
>>> INFORMATION TECHNOLOGY
>>>
>>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>>> <https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
>>> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>>>
>>> [image: The New School]
>>>
>>> On Wed, Mar 7, 2018 at 7:16 AM, yashwanth chowdary <
>>> ryashwanthk...@gmail.com> wrote:
>>>
>>>> I was trying to connect ldap using below properties.Getting an errror
>>>> that failed to bind authn.ldap[0].userFilter .you can observe the error
>>>> in
>>>> the attched file.
>>>>
>>>>
>>>> cas.authn.ldap[0].order=0
>>>> cas.authn.ldap[0].name=AD
>>>> cas.authn.ldap[0].type=AUTHENTICATED
>>>> cas.authn.ldap[0].ldapUrl=ldaps://***.net
>>>> cas.authn.ldap[0].useSsl=true
>>>> cas.authn.ldap[0].connectTimeout=5000
>>>> cas.authn.ldap[0].baseDn=DC=,DC=**
>>>> cas.authn.ldap[0].userFilter=(sAMAccountName={user})
>>>> cas.authn.ldap[0].subtreeSearch=true
>>>> cas.authn.ldap[0].principalAttributeList=sn,givenName,memberOf,cn
>>>> cas.authn.ldap[0].bindDn=CN=wls,CN=users,DC=***,DC=**
>>>> cas.authn.ldap[0].bindCredential=*
>>>>
>>>> --
>>>> - Website: https://apereo.github.io/cas
>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>> - Contributions: https://goo.gl/mh7qDG
>>>> ---
>>>> You received this message because you are subscribed to the Google
>>>> Groups "CAS Community" group.
>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>> an email to cas-user+u...@apereo.org.
>>>> To view this discussion on the web visit
>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f038471-77d5-4465-af36-a30fbad54426%40apereo.org
>>>>
>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f038471-77d5-4465-af36-a30fbad54426%40apereo.org?utm_medium=email_source=footer>
>>>> .
>>>>
>>>
>>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+u...@apereo.org .
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/0e00fd5f-9590-44be-9ab0-cf3ccd5f84bb%40apereo.org
>>
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/0e00fd5f-9590-44be-9ab0-cf3ccd5f84bb%40apereo.org?utm_medium=email_source=footer>
>> .
>>
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/7d07d053-7bf9-454b-bb02-0b4c56d3806f%40apereo.org.
Re: [cas-user] Cas5 Ldap Authentication
Hi David ,
Is this the correct way to initialize my principalAttributeList?
By the way , I am using 5.3.0RC2 version
On Wednesday, March 7, 2018 at 6:23:27 PM UTC+5:30, David Curry wrote:
>
> You don't say what version you're using, but the userFilter property was
> renamed to searchFilter between 5.2 and 5.3 as part of the property
> documentation cleanup.
>
> (Documented here:
> https://apereo.github.io/2017/12/29/530rc1-release/#documentation-cleanup)
>
> --Dave
>
>
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
> On Wed, Mar 7, 2018 at 7:16 AM, yashwanth chowdary <
> ryashwanthk...@gmail.com > wrote:
>
>> I was trying to connect ldap using below properties.Getting an errror
>> that failed to bind authn.ldap[0].userFilter .you can observe the error in
>> the attched file.
>>
>>
>> cas.authn.ldap[0].order=0
>> cas.authn.ldap[0].name=AD
>> cas.authn.ldap[0].type=AUTHENTICATED
>> cas.authn.ldap[0].ldapUrl=ldaps://***.net
>> cas.authn.ldap[0].useSsl=true
>> cas.authn.ldap[0].connectTimeout=5000
>> cas.authn.ldap[0].baseDn=DC=,DC=**
>> cas.authn.ldap[0].userFilter=(sAMAccountName={user})
>> cas.authn.ldap[0].subtreeSearch=true
>> cas.authn.ldap[0].principalAttributeList=sn,givenName,memberOf,cn
>> cas.authn.ldap[0].bindDn=CN=wls,CN=users,DC=***,DC=**
>> cas.authn.ldap[0].bindCredential=*
>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+u...@apereo.org .
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f038471-77d5-4465-af36-a30fbad54426%40apereo.org
>>
>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f038471-77d5-4465-af36-a30fbad54426%40apereo.org?utm_medium=email_source=footer>
>> .
>>
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/0e00fd5f-9590-44be-9ab0-cf3ccd5f84bb%40apereo.org.
Re: [cas-user] Cas5 Ldap Authentication
>
> Dave I have written my .own classes handler,configuration(please refer to
> the attached files).What i observe is My handler is getting registered
> properly but when i give the credentials the method "
> authenticateUsernamePasswordInternal" is not getting called. properties
> are same as above .
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/8179af60-49fd-44fc-bcb4-6bd00adae092%40apereo.org.
package org.apereo.cas.config;
import com.google.common.collect.Multimap;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.apereo.cas.authentication.AuthenticationEventExecutionPlanConfigurer;
import org.apereo.cas.authentication.AuthenticationHandler;
import org.apereo.cas.authentication.CoreAuthenticationUtils;
import org.apereo.cas.authentication.LdapAuthenticationHandler;
import org.apereo.cas.authentication.principal.DefaultPrincipalFactory;
import org.apereo.cas.authentication.principal.PrincipalFactory;
import org.apereo.cas.authentication.principal.PrincipalNameTransformerUtils;
import org.apereo.cas.authentication.principal.PrincipalResolver;
import org.apereo.cas.authentication.support.DefaultLdapLdapAccountStateHandler;
import org.apereo.cas.authentication.support.DefaultLdapPasswordPolicyHandlingStrategy;
import org.apereo.cas.authentication.support.GroovyLdapPasswordPolicyHandlingStrategy;
import org.apereo.cas.authentication.support.LdapPasswordPolicyConfiguration;
import org.apereo.cas.authentication.support.LdapPasswordPolicyHandlingStrategy;
import org.apereo.cas.authentication.support.OptionalWarningLdapLdapAccountStateHandler;
import org.apereo.cas.authentication.support.RejectResultCodeLdapPasswordPolicyHandlingStrategy;
import org.apereo.cas.authentication.support.password.PasswordEncoderUtils;
import org.apereo.cas.configuration.CasConfigurationProperties;
import org.apereo.cas.configuration.model.core.authentication.PasswordPolicyProperties;
import org.apereo.cas.configuration.model.support.ldap.LdapAuthenticationProperties;
import org.apereo.cas.services.ServicesManager;
import org.apereo.cas.util.CollectionUtils;
import org.apereo.cas.util.LdapUtils;
import org.ldaptive.auth.AuthenticationResponseHandler;
import org.ldaptive.auth.Authenticator;
import org.ldaptive.auth.ext.ActiveDirectoryAuthenticationResponseHandler;
import org.ldaptive.auth.ext.EDirectoryAuthenticationResponseHandler;
import org.ldaptive.auth.ext.FreeIPAAuthenticationResponseHandler;
import org.ldaptive.auth.ext.PasswordExpirationAuthenticationResponseHandler;
import org.ldaptive.auth.ext.PasswordPolicyAuthenticationResponseHandler;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.boot.autoconfigure.condition.ConditionalOnMissingBean;
import org.springframework.boot.context.properties.EnableConfigurationProperties;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.cloud.context.config.annotation.RefreshScope;
import org.springframework.core.io.Resource;
import java.time.Period;
import java.util.Arrays;
import java.util.Collection;
import java.util.HashSet;
import java.util.List;
import java.util.Map;
import java.util.Set;
import java.util.function.Predicate;
/**
* This is {@link LdapAuthenticationConfiguration} that attempts to create
* relevant authentication handlers for LDAP.
*
* @author Misagh Moayyed
* @author Dmitriy Kopylenko
* @since 5.0.0
*/
@Configuration("lTldapAuthenticationConfiguration")
@EnableConfigurationProperties(CasConfigurationProperties.class)
@Slf4j
public class LTLdapAuthenticationConfiguration {
@Autowired
private CasConfigurationProperties casProperties;
@Autowired
@Qualifier("personDirectoryPrincipalResolver")
private PrincipalResolver personDirectoryPrincipalResolver;
@Autowired
@Qualifier("servicesManager")
private ServicesManager servicesManager;
@ConditionalOnMissingBean(name = "ldapPrincipalFactory")
@Bean
public PrincipalFactory ldapPrincipalFactory() {
return new DefaultPrincipalFactory();
}
@ConditionalOnMissingBean(name = "ldapAuthenticationHandlers")
@Bean
@RefreshScope
public Collection ldapAuthenticationHandlers() {
final Collection handlers = new HashSet<>();
System.out.println("");
System.out.println("In Collection Handlers");
[cas-user] Cas5 Ldap Authentication
I was trying to connect ldap using below properties.Getting an errror that
failed to bind authn.ldap[0].userFilter .you can observe the error in the
attched file.
cas.authn.ldap[0].order=0
cas.authn.ldap[0].name=AD
cas.authn.ldap[0].type=AUTHENTICATED
cas.authn.ldap[0].ldapUrl=ldaps://***.net
cas.authn.ldap[0].useSsl=true
cas.authn.ldap[0].connectTimeout=5000
cas.authn.ldap[0].baseDn=DC=,DC=**
cas.authn.ldap[0].userFilter=(sAMAccountName={user})
cas.authn.ldap[0].subtreeSearch=true
cas.authn.ldap[0].principalAttributeList=sn,givenName,memberOf,cn
cas.authn.ldap[0].bindDn=CN=wls,CN=users,DC=***,DC=**
cas.authn.ldap[0].bindCredential=*
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f038471-77d5-4465-af36-a30fbad54426%40apereo.org.
Re: [cas-user] Cas5 Ldap Authentication
Hi Manfredo Hopp, How to send authorities to an application On Thursday, March 8, 2018 at 11:09:54 AM UTC-6, Manfredo Hopp wrote: > > see > > > https://apereo.github.io/cas/development/installation/Configuring-Custom-Authentication.html > > 2018-03-08 11:32 GMT-03:00 yashwanth chowdary <ryashwanthk...@gmail.com > >: > >> Dave I have written my .own classes handler,configuration(please refer to >>> the attached files).What i observe is My handler is getting registered >>> properly but when i give the credentials the method " >>> authenticateUsernamePasswordInternal" is not getting called. properties >>> are same as above . >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to cas-user+u...@apereo.org . >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/8179af60-49fd-44fc-bcb4-6bd00adae092%40apereo.org >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/8179af60-49fd-44fc-bcb4-6bd00adae092%40apereo.org?utm_medium=email_source=footer> >> . >> > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/263e1b32-85e8-4bb2-9abd-81d2b569cafb%40apereo.org.
Re: [cas-user] Sending pricipal and principal attributes
Thanks Misagh. I was able to acheive things with what you have mentioned. can you please help me out with statsD thing. Post: https://groups.google.com/a/apereo.org/d/msgid/cas-user/c75e153f-8c4d-434e-8bb9-883ca00728f0%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/c75e153f-8c4d-434e-8bb9-883ca00728f0%40apereo.org?utm_medium=email_source=footer> On Tuesday, April 17, 2018 at 7:35:38 AM UTC-5, Misagh Moayyed wrote: > > From your logs: > > Preparing to validate ticket [/serviceValidate] for service > [ST-1-Kt3tSwNS7-WALoEctIOCQu1GD68EDWTS017] via > [AbstractWebApplicationService(id= > http://localhost:3001/login?destination=%2F, originalUrl= > http://localhost:3001/login?destination=%2F, > artifactId=ST-1-Kt3tSwNS7-WALoEctIOCQu1GD68EDWTS017, principal=null, > loggedOutAlready=false, format=XML)]. Do note that this validation request > is not equipped to release principal attributes to applications. To access > the authenticated principal along with attributes, invoke the > [/p3/serviceValidate] endpoint instead.> > > > --Misagh > > -- > > *From: *"yashwanth chowdary" <ryashwanthk...@gmail.com > > *To: *"CAS Community" <cas-...@apereo.org > > *Sent: *Tuesday, April 17, 2018 5:11:50 AM > *Subject: *[cas-user] Sending pricipal and principal attributes > > Hi Team, > CasVersion: 5.3.0-RC2 > > we use ldap for authentication.We need to send a set of attributes to the > application where use cas for authentication.I am able to authenticate > successfully.But the info that is send to the application contains only > principal not the attributes.How do i send the attributes.You can find the > logs,registered service(Json file),customized handler in attached files. > > These are the list of properties: > > ## > #Jdbc Authentication Details > # > cas.authn.jdbc.encode[0].url=** > cas.authn.jdbc.encode[0].user=* > cas.authn.jdbc.encode[0].password=* > cas.authn.jdbc.encode[0].driverClass=oracle.jdbc.driver.OracleDriver > cas.authn.jdbc.encode[0].algorithmName=SHA-256 > cas.authn.jdbc.encode[0].staticSalt=* > cas.adminPagesSecurity.jdbc.query=select first_name from > gump_own.team_member where first_name = ? > > ## > #Ldap Authentication Details > # > cas.authn.ldap[0].type=AUTHENTICATED > cas.authn.ldap[0].ldapUrl=*** > cas.authn.ldap[0].baseDn=*** > cas.authn.ldap[0].searchFilter=** > cas.authn.ldap[0].bindDn= > cas.authn.ldap[0].bindCredential= > > cas.authn.ldap[0].principalAttributeId=objectGUID > cas.authn.ldap[0].principalAttributeList > =memberOf:authorities,userPrincipalName:EmailAddress,employeeID:lawsonId,sAMAccountName:username,name > > #Ticket Registry > > cas.ticket.registry.jpa.dialect=org.hibernate.dialect.Oracle10gDialect > cas.ticket.registry.jpa.url=*** > cas.ticket.registry.jpa.driverClass=oracle.jdbc.driver.OracleDriver > cas.ticket.registry.jpa.user=*** > cas.ticket.registry.jpa.password= > cas.ticket.registry.jpa.ddlAuto=update > cas.ticket.registry.jpa.defaultSchema=** > > cas.serviceRegistry.initFromJson=true > cas.serviceRegistry.json.location=classpath:/services > > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+u...@apereo.org . > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/66da726d-be04-46b3-9a46-b9eb34a17863%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/66da726d-be04-46b3-9a46-b9eb34a17863%40apereo.org?utm_medium=email_source=footer> > . > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/33f4bb6d-fe89-4695-9a03-3aa16ca34167%40apereo.org.
[cas-user] StatsD Metrics 5.3.0-RC2
Hi Team,
I need metrics for the cas app i have configured.How to check the stats
that are stored.Need more information regarding statsD Metrics in cas.
These are the props and dependency in my application.
properties:
cas.metrics.loggerName=perfStatsLogger
cas.metrics.refreshInterval=30
cas.metrics.statsd.host=***
cas.metrics.statsd.port=8125
cas.metrics.statsd.prefix=cas
Dependency:
org.apereo.cas
cas-server-support-metrics
${cas.version}
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/c75e153f-8c4d-434e-8bb9-883ca00728f0%40apereo.org.
[cas-user] Saml service provider for testing
Hi Team, We have enabled saml idp support for cas application we have customized.These are the properties we have configured. To test the functionality do you have a service provider from ur side.Can anyone share the service provider for testing purpose. serviceRegistry.initFromJson=true cas.serviceRegistry.json.location=classpath:/services cas.authn.samlIdp.entityId: $https://edwts016.lifetouch.net:8443/cas/idp cas.authn.samlIdp.scope: lifetouch.net Thanks & Regards, Yashwanth. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/67de87dd-7f7f-4e14-b78b-c1fe0a02dd7c%40apereo.org.
[cas-user] JPA Ticket Registry
My Properties: cas.ticket.registry.jpa.dialect=org.hibernate.dialect.Oracle10gDialect cas.ticket.registry.jpa.url=* cas.ticket.registry.jpa.driverClass=oracle.jdbc.driver.OracleDriver cas.ticket.registry.jpa.user=* cas.ticket.registry.jpa.password= cas.ticket.registry.jpa.ddlAuto=validate cas.ticket.registry.jpa.defaultSchema= cas.ticket.registry.jpa.batchSize=1 cas.ticket.registry.jpa.healthQuery=SELECT 1 FROM DUAL Dependency in pom: org.apereo.cas cas-server-support-jpa-ticket-registry 5.3.0-RC2 Getting an sql exception on locks table, you can find the logs in the screenshots attached. As Definitions of the tables have been changed please provide the structure or scripts for the tables -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/6223302a-d936-4058-9f3e-89bfaae39dcd%40apereo.org.
[cas-user] Connecting to Google Directory
Hi Team, I need to find user who is registered in google directory,I have the public key , private key ang google certificate.How do i connect to google ? -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/edcec61a-410b-402c-8066-d2c8a0ac5866%40apereo.org.
[cas-user] Re: Issue configuring JPA ticket registry
I am using cas 5.3.0 and i am trying to persist tickets using jpa, running
into issues can you give you share your pom.xml and properties file that
actually worked for you.
On Monday, December 11, 2017 at 11:54:56 PM UTC+5:30, jquin014 wrote:
>
> Hi,
>
>
> I'm running CAS 5.1.2 using tomcat 8.5 and java 8 and trying to configure
> the Oracle JPA ticket registry but running into issues. I have been able to
> configure this with CAS 4 and CAS 3 in the past but for some reason I'm
> encountering the error below:
>
>
> 2017-12-11 13:07:04,885 WARN [com.zaxxer.hikari.util.DriverDataSource] -
> not found, trying direct instantiation.>
> 2017-12-11 13:07:05,463 ERROR [com.zaxxer.hikari.pool.PoolBase] -
> keyword not found where expected
> ).>
> 2017-12-11 13:07:05,465 ERROR [com.zaxxer.hikari.pool.HikariPool] -
>
> java.sql.SQLSyntaxErrorException: ORA-00923: FROM keyword not found where
> expected
>
> at
> oracle.jdbc.driver.T4CTTIoer11.processError(T4CTTIoer11.java:494)
> ~[ojdbc8-12.2.0.1.0.jar:12.2.0.1.0]
>
>
>
> I verified that the ojdbc8 is in both the tomcat lib folder and in the cas
> lib folder.
>
>
> I have configured my pom.xml as follows and setup the cas.properties file
> with the configuration below:
>
>
> pom.xml
>
>
> org.apereo.cas
> cas-server-support-jpa-ticket-registry
> ${cas.version}
>
>
>
> com.oracle
> ojdbc8
> 12.2.0.1.0
> runtime
>
>
> org.apereo.cas
> cas-server-support-jdbc-drivers
> ${cas.version}
>
>
>
>
> cas.properties
>
> cas.serviceRegistry.jpa.isolateInternalQueries=false
> cas.serviceRegistry.jpa.url=jdbc:oracle:thin:
> cas.serviceRegistry.jpa.failFast=true
> cas.serviceRegistry.jpa.dialect=org.hibernate.dialect.Oracle12cDialect
> cas.serviceRegistry.jpa.leakThreshold=10
> cas.serviceRegistry.jpa.batchSize=1
> cas.serviceRegistry.jpa.user=
> cas.serviceRegistry.jpa.ddlAuto=create-drop
> cas.serviceRegistry.jpa.password=
> cas.serviceRegistry.jpa.autocommit=false
> cas.serviceRegistry.jpa.driverClass=oracle.jdbc.driver.OracleDriver
> cas.serviceRegistry.jpa.idleTimeout=5000
> cas.serviceRegistry.jpa.dataSourceName=
> cas.serviceRegistry.jpa.dataSourceProxy=false
>
> cas.serviceRegistry.jpa.pool.suspension=false
> cas.serviceRegistry.jpa.pool.minSize=6
> cas.serviceRegistry.jpa.pool.maxSize=18
> cas.serviceRegistry.jpa.pool.maxWait=2000
>
>
> Just wanted to see if anyone else has run into a similar issue.
>
>
> Thanks!
>
>
> ___
> Juan Quintanilla
> jqui...@fiu.edu
>
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/fa1a7042-fc90-4b97-8735-c5b317f1f93b%40apereo.org.
Re: [cas-user] JPA Ticket Registry
Hi Prego, we are migrating from cas3.5 to cas 5.3.0 , whatever the scheema we have for cas3.5 contains locks but it doesnt contain lockver column, what i need to know is, Is structure for locks is changed in cas 5.3 version or for the other tables too.what is struture of the tables i need to maintain in my scheema. As we have to raise a request to change our db, if i have structure of the tables i can request them to change the tables at a time. I havent tried changing the db On Wednesday, March 21, 2018 at 7:17:54 PM UTC+5:30, Uxío Prego wrote: > > Do you need to support CAS 3 and 5 at the same time for a while, or can > you afford a *migration*? Can you afford CAS downtime when migrating the > users to CAS 5? Have you tried to add LOCKVER to CAS_OWN.LOCKS? > > Uxío Prego > > > > Madiva Soluciones > CL / SERRANO GALVACHE 56 > BLOQUE ABEDUL PLANTA 4 > 28033 MADRID > +34 917 56 84 94 > www.madiva.com > www.bbva.com > > The activity of email inboxes can be systematically tracked by colleagues, > business partners and third parties. Turn off automatic loading of images > to hamper it. > > 2018-03-21 13:12 GMT+00:00 yashwanth chowdary <ryashwanthk...@gmail.com > >: > >> For Jpa ticket registry these are the properties i was using: >> >> cas.ticket.registry.jpa.dialect=org.hibernate.dialect.Oracle10gDialect >> cas.ticket.registry.jpa.url= >> cas.ticket.registry.jpa.driverClass=oracle.jdbc.driver.OracleDriver >> cas.ticket.registry.jpa.user=xx >> cas.ticket.registry.jpa.password=x >> cas.ticket.registry.jpa.ddlAuto=validate >> cas.ticket.registry.jpa.defaultSchema=x >> cas.ticket.registry.jpa.batchSize=1 >> cas.ticket.registry.jpa.healthQuery=SELECT 1 FROM DUAL >> >> My schema tables >> locks,tgt,rs_attributes,serviceticket,registeredticketimpl are structured >> in such a way that they support cas3.5 version.Is there any change in >> structure of tables >> >> Dependencies: >> >> org.apereo.cas >> cas-server-support-jpa-ticket-registry >> 5.3.0-RC2 >> >> >> com.oracle >> ojdbc6 >> 11.2.0.1.0 >> >> >> And when i try to run the cas application observing these issues >> unsatisfied dependency exception,unable to create hibernate session >> factory,.. You can observe the logs in below attached files >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to cas-user+u...@apereo.org . >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/3767a389-36b1-4fff-a502-13c3a9921451%40apereo.org >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/3767a389-36b1-4fff-a502-13c3a9921451%40apereo.org?utm_medium=email_source=footer> >> . >> > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d4c81f7b-d5a9-4858-a00d-9ab873b216b3%40apereo.org.
[cas-user] Customizing webflows
I want to use pswdreset-webflow in my cas5 overlay.I have added the dependencies and I have customized the login-webflow so that on click of changepassword button it show us the view that is configured in pswdreset webflow. I have added the the class "org.apereo.cas.pm.config.PasswordManagementWebflowConfiguration" in spring.factories file. I am facing an issue the below issue."NoSuchFlowFoundException" Please refer to the attached files for the dependencies, customized login flow and html files . Error log: org.springframework.webflow.execution.FlowExecutionException: Exception thrown in state 'forceChangePassword' of flow 'login' at org.springframework.webflow.engine.impl.FlowExecutionImpl.wrap(FlowExecutionImpl.java:573) at org.springframework.webflow.engine.impl.FlowExecutionImpl.resume(FlowExecutionImpl.java:263) at org.springframework.webflow.executor.FlowExecutorImpl.resumeExecution(FlowExecutorImpl.java:169) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:483) at org.springframework.util.ReflectionUtils.invokeMethod(ReflectionUtils.java:216) at org.springframework.cloud.context.scope.GenericScope$LockedScopedProxyFactoryBean.invoke(GenericScope.java:470) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213) at com.sun.proxy.$Proxy125.resumeExecution(Unknown Source) at org.springframework.webflow.mvc.servlet.FlowHandlerAdapter.handle(FlowHandlerAdapter.java:253) at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:967) at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:901) at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970) at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:872) at javax.servlet.http.HttpServlet.service(HttpServlet.java:648) at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846) at javax.servlet.http.HttpServlet.service(HttpServlet.java:729) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:292) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207) at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207) at org.apereo.cas.web.support.AuthenticationCredentialsLocalBinderClearingFilter.doFilter(AuthenticationCredentialsLocalBinderClearingFilter.java:30) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207) at org.apereo.cas.security.RequestParameterPolicyEnforcementFilter.doFilter(RequestParameterPolicyEnforcementFilter.java:261) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207) at org.apereo.cas.security.ResponseHeadersEnforcementFilter.doFilter(ResponseHeadersEnforcementFilter.java:237) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207) at org.apereo.cas.security.AddResponseHeadersFilter.doFilter(AddResponseHeadersFilter.java:94) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207) at org.springframework.boot.actuate.trace.WebRequestTraceFilter.doFilterInternal(WebRequestTraceFilter.java:110) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:240) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:207) at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99) at
