Re: [cas-user] CAS Management Service Showing 'localhost:8080' on Redirection to Login Page

Maybe grepping the CAS itself (not the overlay) helps..? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and

Re: [cas-user] InvalidTicketException while searching for Service ticket

Is it possible the ticket doesn't exist once you try to reach it? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business par

Re: [cas-user] Re: InvalidTicketException while searching for Service ticket

Why would you want not to iterate TGTs? Aren't you using the default ticket registry? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically track

Re: [cas-user] Issue handling Browser Back button in CAS UI flow

Yeah take control of the browser back button and send the user to wherever you find appropriate: https://stackoverflow.com/questions/25806608/. Regards, Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The

Re: [cas-user] CAS PostgreSql Connection Problem

I don't know. In Maven environments I would expect the declaration of a postgresql artifact from the org.postgresql group ID. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email in

Re: [cas-user] CAS PostgreSql Connection Problem

ogging configuration and lower org.hibernate level to DEBUG if you find it. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, busin

Re: [cas-user] CAS PostgreSql Connection Problem

Can you confirm psql connectivity between the data base and the Java application server (i.e. CAS)? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically

Re: [cas-user] CAS incorrect redirection behind reverse proxy

x27;s structure. In other words; if you can not fix it in time, roll forward that way without fixing anything. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematic

Re: [cas-user] JPA Ticket Registry

In line with the error message, it can hopefully be tackled by rewriting the schema LOCKS.LOCKVER as integer. I would issue ALTER TABLE .LOCKS MODIFY LOCKVER NUMBER(19, 0); Best, Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94

Re: [cas-user] [cas 5.1.8] Issue encountered with the customization of the theme

a trusted proxy where HTTPS is handled. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off

Re: [cas-user] CAS problem with abnormal memory increase

Apart from the virtual memory increase, which is the profile of actual memory use increase and (if applicable) swap space use increase? In other words, are you really sure a virtual memory use increase is a problem? Which is the operating system where you are running that? Uxío Prego Madiva

Re: [cas-user] JPA Ticket Registry

g. Good luck with the migration, Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off automatic

Re: [cas-user] JPA Ticket Registry

Do you need to support CAS 3 and 5 at the same time for a while, or can you afford a *migration*? Can you afford CAS downtime when migrating the users to CAS 5? Have you tried to add LOCKVER to CAS_OWN.LOCKS? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033

Re: [cas-user] CAS 3.5.2 returning mail as user name

I don't know. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off automatic loadi

Re: [cas-user] CAS 3.5.2 returning mail as user name

I don't know. Does your CAS 3 deployment provide a custom class extending AbstractUsernamePasswordAuthenticationHandler? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes c

Re: [cas-user] CAS 3.5.2 returning mail as user name

I still operate version 3 of CAS using relational as service registry, yet I don't understand what you ask. I can't grep the sources anyhow, today. I hope you find whatever you are looking for. > On 16 Feb 2018, at 18:53, Toby Archer wrote: > > We have an application from the library that the

Re: [cas-user] Failed To Add TGT Ticket - MongoDB Ticket Registry CAS 45.2.

Do you mean it is buggy because Redis was refusing to write -1 for expiration times? If you have a lot of time I guess you could write your test case and request pull. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com

Re: [cas-user] Failed To Add TGT Ticket - MongoDB Ticket Registry CAS 45.2.

I’m a little lost now. Are you sure you need to waste that much energy investigating so many ticket registry alternatives? Shouldn’t you be trying to just assess the feasibility of using that data base with which you feel more comfortable? To be more clear, let’s say it works better using Mongo

Re: [cas-user] CAS 5.2.x

t of that. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off automatic loading of images to

Re: [cas-user] Failed To Add TGT Ticket - MongoDB Ticket Registry CAS 45.2.

Oh... Goodness. I was hoping the ORM software to be at last using BYTEA instead of LO/OID. Thank you, you are very much kind. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes

Re: [cas-user] Failed To Add TGT Ticket - MongoDB Ticket Registry CAS 45.2.

I'm sorry I can't help you, but it would be very sweet if you could share your effective serviceticket or ticketgrantingticket table schema from the times when you were using PostgrelSQL as ticket registry for CAS 5... Regards, Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE

Re: [cas-user] Integrating CAS SSO with Office 365

nicon..? Regards, Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off automatic loading of i

Re: [cas-user] Best Practice for protecting external applications - REST API or CAS Proxy Authentication or something else?

Can't you do this just by using the CAS client from the java application like you would do by using the CAS client from the web java (CASified) application? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbv

Re: [cas-user] CASv5.1.x embedded Tomcat - Extended access log valve - Log rotation?

Move the rotate responsibility to logrotate out of Tomcat and CAS. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business

Re: [cas-user] CAS 5.1.6 - throttling and jdbc audit bug

I noticed days ago the GitHub issues system seems disabled there. Because that GitHub central mirror is heavily customized with a lot of goodies, the message is clear, and it is _bug tracking is no longer there_. I assume you are reporting the problem and if there is no answer is because no one

Re: [cas-user] Re: Recommendations for CATALINA_OPTS for cas 5.x with tomcat 8.5.x

ing a deployment problem (maybe not). I think 8G should be enough for your case, but I don't really know. While you keep investigating, maybe adding swap and more memory can help you... maybe not! Good luck with it, Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28

Re: [cas-user] CAS 3 to 5 migration - properties

Are any of these blocking your CAS 5 test/dev deployment? Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 <+34%20917%2056%2084%2094> www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by coll

Re: [cas-user] Looking for french consulting

luck with your migrations, regards, Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off auto

Re: [cas-user] Is the CAS sever and client both two side need same java version?

You have to stop using the obsolete Java 6 in the client, or explicitly enable the insecure Diffie Helman 1024 configuration in the server. Uxío Prego Madiva Soluciones CL / SERRANO GALVACHE 56 BLOQUE ABEDUL PLANTA 4 28033 MADRID +34 917 56 84 94 www.madiva.com www.bbva.com The activity of

Re: [cas-user] cas.js javascript error in certain browser

gt; email to cas-user+unsubscr...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/e96c32d0-54b4-48de-8903-0e8ebcfed924%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/e96c32d0-54b4-48de-89

Re: [cas-user] CAS 5.0.5 password warning login?execution= too long for Windows IE/Edge browsers

So lengthy HTTP GET URLs are anti pattern. I guess this advice will not be useful to you, but for other people could do. If you absolutely are to stick with those huge URLs and GET methods, and you have access to the source code of both software ends, you can easily do by creating an informal GUI

Re: [cas-user] Re: CAS 4.2.7 ticket validating failed

Make sure service ticket not expiring by time , service ticket not expiring by max number of uses reached , service ticket not expiring because ticket granting ticket is expired (happens). Logging out parent ticket granting ticket clears all children service tickets that is a possible cause of no

Re: [cas-user] JVM Heap Kept Growing every day

I would reboot CAS servers nightly, if you can afford that. Try a TGT lifetime of several hours and an ST lifetime of some minutes. But I can't tell the rationale. > On 16 Aug 2017, at 19:54, Uxío Prego wrote: > > Never used hazelcast ticket registry nor 5.0.x, still thos

Re: [cas-user] JVM Heap Kept Growing every day

Never used hazelcast ticket registry nor 5.0.x, still those figures seem normal to me. If you just can't kill the curiosity, I recommend you saving a snapshot of your Debian GNU/Linux CAS server, then installing xorg, xserver, lightdm, and a lightweight desktop environment of your choice, and v

Re: [cas-user] CAS 5.1.2 step by step documentation

Make sure you already read and understood these articles from the maintainer. https://apereo.github.io/2016/10/04/casbootoverlay/ https://apereo.github.io/2017/02/21/cas-autocfg-strategy/ https://apereo.github.io/2017/03/28/cas5-gettingstarted-overlay/ Uxío Prego Madiva Soluciones CL

Re: [cas-user] Tomcat and CAS Newbie Need Help with Google SSO Overlay

Not able to help. Make sure you already read these articles from the maintainer. https://apereo.github.io/2016/10/04/casbootoverlay/ https://apereo.github.io/2017/02/21/cas-autocfg-strategy/ https://apereo.github.io/2017/03/28/cas5-gettingstarted-overlay/ Regards, > On 11 Aug 2017, at 19:15, Bo

Re: [cas-user] Setting up SSL

You should not be running Java with super user privileges, ever. Specially in production environments. When on Linux additional configuration is necessary to allow an operating system level user account access to well known ports in the first 1K range. OP likely to have had indeed the port held b

Re: [cas-user] CAS ADFS Integration

Let us hope am wrong, but reminds me vaguely of https://groups.google.com/a/apereo.org/d/msg/cas-user/BwnFLyc8TnY/6NjFsnIEAQAJ Best of luck, > On 17 Jul 2017, at 09:23, Антон Шихмат wrote: > > Hello everyone, > > On my current project we use CAS with configured custom database > authenticatio

Re: [cas-user] serviceValidate content-type

According http://www.ietf.org/rfc/rfc2376.txt via https://stackoverflow.com/a/2965701/1737973 probably either 'text/xml' or 'application/xml'. Does transmitting 'text/html' cause a problem? > On 29 Jun 2017, at 19:57, Tom Poage wrote: > > Ping. > > We found where to set in the code. Question is

Re: [cas-user] JPA Service Registry Persistence (CAS 5.0.6)

There are some or at least one configuration keys named $BLAH.jpa.ddlAuto or $BLAH.jpa.ddl.auto that if are set to (or defaulting to) 'create-drop' might be causing those table dropping. > On 15 Jun 2017, at 23:32, 'Iain Workman' via CAS Community > wrote: > > I am currently trying to configure

[cas-user] Re: What's cooking in unaffiliated@cas-user

Have not figured yet how to work it out as a small change without breaking the tests. And I have learned to simulate `vacuumlo` in RDS using SQL, plpgsql, and shell; in the meanwhile. So it's very likely will stick in vanilla 'cas-server-core' until we phase out to CAS 5 endlich, instead. And give

Re: [cas-user] Encrypted database password in jdbc authn

Did not cas.authn.jdbc.query[0].passwordEncoder.type=com.example.CustomPasswordEncoder (https://apereo.github.io/cas/5.1.x/installation/Configuration-Properties.html#query-database-authentication) suit your mileage? > On 6 Jun 2017, at 19:58, Soumya Tripathy wrote: > > Hi, > Can we configure cas

Re: [cas-user] wbr...@gmail.com

Yeh, go google, paste there 'apereo server and client version mapping' if you are lucky you should jump to another topic where past myself was asking similarly. Or you hit this ' https://groups.google.com/a/apereo.org/d/topic/cas-user/mLFbdpnaipY/discussion' link that I now am betting 5 dollah to i

Re: [cas-user] Need CAS 3.4.10 deployed file

Clone the git repository at GitHub/apereo/cas, then switch rev with git as `git checkout 09ead33` as seen in https://github.com/apereo/cas/commit/09ead33abdf5124c351ce37c147bb4457307ec7f which as you can see is tag 'v3.4.10'. Descend into artifact cas-server-webapp, execute (with 7>=java) `mvn

Re: [cas-user] Supporting SAML 2.0 using CAS 3.4

you might be able to upgrade your production system to CAS 5 without impacting the existing applications that are currently integrated. I would encourage you to give some more details about your platform architecture. Uxío Prego The activity of email inboxes can be systematically tracked by

Re: [cas-user] Re: CAS 3.5 Service Registry Exception How-To

I assumed your CASified application was Java-like, and meant the CASified application web.xml. But this can make the example. There are some and tags. CASified Java web applications work using a web.xml file alike. If you are using your CASified application as such, it should have several CAS

Re: [cas-user] Infinite loop problem between Cas Server and Cas Services Management

Bonsoir, bienvenue á la liste. > No one has a solution for my problem? Probably someone has a solution for your problem. That does not necessarily mean s/he is going to share a solution soon, even ever. Keep working on your own while you wait for answers and feel free to answer yourself to help o

Re: [cas-user] CAS 5.0.2 Jpa ticket and service register on postgres error Catalina.out.

The query is reading 'SELECT ... FOR UPDATE', then hibernate fails reading the 'FOR UPDATE' clause is not allowed for the current transaction. I guess it could be a bug in hibernate or CAS, but I can't tell. > On 23 Jan 2017, at 15:46, kjlorenzo wrote: > > Hello. > > My config is: > > CA

Re: [cas-user] Unfortunate question - but I need table schema for 3.4.2.1

500 errors with what message? 'I need to drop the 3.5.2.1 schema and bring it back to 3.4.2.1' - No you probably not. What have you tried? Upgrading from 3.4.10 to 3.6.0 just asks for a few more columns and views. Those kind of changes can be applied in a way backwards compatibility is held (th

Re: [cas-user] Internally hosted applications under load balancer issue

You can try to find the way of applying sticky (https://en.wikipedia.org/wiki/Load_balancing_(computing)#Persistence) to your casified applications' load balancer, and see if that solves, but I am afraid you could be alone on that. CAS itself supports being behind a load balancer since a partic

Re: [cas-user] Need help CAS5 + LDAP Maven overlay misses few libraries needed for LDAP unbound Id

Are you sure the cause is a problem with libraries? Why not LDAP misconfiguration? 2017-01-08 15:49 GMT+01:00 sravani patla : > Hello Team, > > I tried to deploy CAS with LDAP server and i ended up with few > errors.Please just check the errors. I have attached the document and > Please let me Kn

Re: [cas-user] CAS 4.2.6 oracle invalid data type

S 4 being asking for registeredserviceimpl. We were at 3.4.10 using registeredserviceimpl but had to create an abstractregisteredservice view for it in order to upgrade to 3.6.0. At that moment I thought abstractregisteredservice was actually supposed to be a renaming of registeredserviceimpl.

Re: [cas-user] mod_auth_cas 1.1

software: > > * CAS Proxy Validation is not implemented in this version. > > From: Uxío Prego [mailto:upr...@madiva.com] > Sent: Saturday, December 10, 2016 1:02 PM > To: CAS Community > Cc: David Lawson; Pathe Sow; Chris Cheltenham > Subject: Re: [cas-user] mod_auth_cas 1.1 &

Re: [cas-user] mod_auth_cas 1.1

g and increasing the verbosity of the CAS runtime logs if at first sight you see nothing interesting. If you can not repackage the web application archive, this should be feasible with package manipulation techniques too. Regards, Uxío Prego Madiva Soluciones Cl / Serrano Galvache 56 E Abedul 4 28033 M

Re: [cas-user] Cas 5.x Target Application Selection

We do that too, since quite a time (so not 5 though) and are mostly happy C: with the results so far. Regards, > On 7 Dec 2016, at 17:59, Andrew Morgan wrote: > > On Wed, 7 Dec 2016, Gokhan Mansuroglu wrote: > >> Hi, >> >> I have the following scenario : >> >> 1. In the login page, user ent

Re: [cas-user] Disable Multiple logins

pment costs and effort. Hope that helped. Uxío Prego Madiva Soluciones Cl / Serrano Galvache 56 E Abedul 4 28033 Madrid 917 56 84 94 www.madiva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and third parties. Turn off automatic loading of imag

[cas-user] Problems completing our own roadmap

re we will step in 4.1 because we link an in house support module from the webapp and the integration restlet and I am not sure how to drop this, so the question really might be "Is anybody really sure we should step to 4.0 before 4.1 instead of try upgrading directly to 4.1?" Thanks,

Re: [cas-user] CAS 3.4.3 - Delete session ticket

you solved the issue please reply how you did, me at least. Regards y le dejo mis dies. Uxío Prego Madiva Soluciones Cl / Serrano Galvache 56 E Abedul 4 28033 Madrid 917 56 84 94 www.madiva.com The activity of email inboxes can be systematically tracked by colleagues, business partners and thi

Re: [cas-user] Re: java.lang.ClassNotFoundException: org.jasig.cas.adaptors.jdbc.QueryAndEncodeDatabaseAuthenticationHandler

.w.x.y.z compile ... and we do not use any scope tag in the DBCP artifact. The DBCP artifact versioned at 1.2.1 seems anomalous too, to me. Hope that helps. Uxío Prego Madiva Soluciones Cl / Serrano Galvache 56 E Abedul 4 28033 Madrid 917 56 84 94 www.madiva.com The activity of email

[cas-user] Server and client version mapping

Hi, am in the process of upgrading CAS 3.4.10, mainly using the Java client 3.2.1, into 5.0.0.RC3, falling back to 4.2.6 in case PITA arises. IINM am seeing 3.4.1 as the last version of the Java client. This means is compatible with all CAS 3 to 5 versions right? Thanks, regards, -- CAS gitte