Re: [cas-user] Extending CAS 5 Webflows - build instructions?

2018-01-12 Thread dkopylenko
Correct. D. On Fri, Jan 12, 2018 at 1:10 AM -0500, "Pablo Vidaurri" wrote: Just to confirm, in CAS 5.1.x and 5.2.x there is no absolute requirement t

Re: [cas-user] CAS 5 loading ALL spring boot profiles

2017-10-04 Thread dkopylenko
spring.profiles.active=ldap D. On Wed, Oct 4, 2017 at 5:04 AM -0400, "Charl Thiem" wrote: Hi I'm having a hard time getting CAS (5.1.4 using overlay)

Re: [cas-user] JVM Heap Kept Growing every day

2017-08-19 Thread dkopylenko
OK, there is a significant memory leak in the version of Thymeleaf layout dialect used by versions of CAS prior to 5.0.7. Since 5.0.7 it's been updated to the layout dialect version containing the memory leak fix. This is mos

Re: [cas-user] Spring profiles

2017-08-14 Thread dkopylenko
According to https://docs.spring.io/spring-boot/docs/current/reference/html/howto-properties-and-configuration.html#howto-change-configuration-depending-on-the-environment last active profile in a yaml document always wins. D.

Re: [cas-user] No ConditionalOnMissingBean for argumentExtractor

2017-06-23 Thread dkopylenko
I'll just add my 2c. here. The "CAS5 overlay is the hell for deployers..." is of course a highly subjective statement. First and foremost, CAS5 generation was designed with ease of deployment and "intention-driven configuration" model in mind, and NOT as a software "leaking" its internals to ev

Re: [cas-user] CAS itself doing AuthZ (deny users)

2017-06-23 Thread dkopylenko
https://apereo.github.io/cas/5.1.x/installation/Configuring-Service-Access-Strategy.html D. On Jun 23, 2017, 15:59 -0400, Bryan Wooten , wrote: > I just got this request from one our developers: > > "The QA-team has an app called “QA Dashboard”.  They have asked us to CASify > it, we’re assignin

Re: [cas-user] CAS 3.5.3 not releasing AD attributes to version 3 WordPress CAS plugin

2017-06-19 Thread dkopylenko
The confusion here is "version of what" is being talked about. The version 3 there refers to "CAS protocol" version, which has been only available since "CAS server" version 4. You have CAS server version 3, which is a) "end of life" and b) does not have CAS protocol version 3 implemented. HTH,

Re: [cas-user] Re: CAS 5 behind haproxy shows "Non-secure Connection"

2017-03-01 Thread dkopylenko
You can do so programmatically. Set secure to true on the Connector object. Here's an example: https://github.com/spring-projects/spring-boot/blob/v1.5.1.RELEASE/spring-boot-samples/spring-boot-sample-tomcat-multi-connectors/src/main/java/sample/tomcat/multiconnector/SampleTomcatTwoConnectorsAppl

Re: [cas-user] run CAS 5.0.x with spring boot

2017-02-16 Thread dkopylenko
This is a known issue with Spring Boot Maven and Gradle plugins where it fails to run with a gigantic classpath size is generated. At this time the best way to run CAS in a embedded mode is to build and 'java -jar target/cas.war' Best, D. On Feb 15, 2017, 21:34 -0500, Chris , wrote: > Dear all,

Re: [cas-user] Failing authentication after applying Database Authentication configuration

2017-02-03 Thread dkopylenko
Have you included CAS' JDBC authentication module dependency in your overlay's build config (Maven or Gradle)? Best, D. On Feb 3, 2017, 03:04 -0500, Jihad Talic , wrote: > Hello, > > I am experiencing issues regarding my Database authentication configuration > in my CAS 5.0.1 server. The databa

Re: [cas-user] Not able to return user_roles from CAS Server to the Client.

2017-01-31 Thread dkopylenko
https://apereo.github.io/cas/5.0.x/integration/Attribute-Release.html Best, D. On Jan 31, 2017, 12:28 -0500, Suman , wrote: > Hi All, > I am using CAS Overlay project version 5.0.0.RC1. > > I am not able to send user attributes other than name from the CAS Server to > the client. > I am storing

Re: [cas-user] CAS 5.0.2 compilation and deployment

2017-01-30 Thread dkopylenko
Please share what areas are confusing and where you are finding the difficulties in getting CAS5 overlay to run. Best, D. On Jan 30, 2017, 08:46 -0500, Alberto Cabello Sánchez , wrote: > On Thu, 26 Jan 2017 06:03:46 -0500 > dkopyle...@unicon.net wrote: > > > > On Jan 26, 2017, 05:57 -0500, Jean-

Re: [cas-user] CASifying Peoplesoft

2017-01-27 Thread dkopylenko
For completeness - here's the Apereo session that Bryan was referring to (although the slides are not visible) https://youtu.be/NsVVvxW7pBw Best, D. On Jan 27, 2017, 17:38 -0500, Bryan Wooten , wrote: > > I did it myself a few years ago and actually gave a presentation at an Apereo > conferenc

Re: [cas-user] CAS 5.0.2 compilation and deployment

2017-01-26 Thread dkopylenko
https://apereo.github.io/cas/5.0.x/installation/Maven-Overlay-Installation.html https://apereo.github.io/cas/5.0.x/installation/LDAP-Authentication.html https://apereo.github.io/cas/5.0.x/installation/Configuration-Properties.html#ldap-authentication Best, D. On Jan 26, 2017, 05:57 -0500, Jean-

Re: [cas-user] Beginner help for CAS

2017-01-19 Thread dkopylenko
You are following the wrong guide. Use this one: https://apereo.github.io/cas/development/installation/Maven-Overlay-Installation.html Cheers, D. From: Bryan Wooten Reply: Bryan Wooten On Jan 18, 2017, 20:43 -0500, Tsogbadrakh Chinzorig , wrote: > Hello CASers > > I'm newbie for CAS and SSO se

Re: [cas-user] Cas 5 : How can I modify default flow

2016-12-23 Thread dkopylenko
Just FYI, the 'org.apereo.cas.*' package scanning for configuration classes won't be a requirement any more starting from 5.1 as the mechanism has been refactored to use Boot's META-INF/spring.factories discovery facility. Happy Holidays, D. On Dec 23, 2016, 06:55 -0500, Yauheni Sidarenka , wr

Re: [cas-user] Commercial companies using CAS?

2016-12-13 Thread dkopylenko
The statements like "It's pretty raw for commercial use" and "not mature ticket registry architecture" are vague and speculative. There are plenty of big commercial CAS deployments that scale to millions of authentication transactions (I am not going to name them here). So, as CAS software is f

Re: [cas-user] CAS 5.0.0 with Active Directory Authentication

2016-12-13 Thread dkopylenko
Basically different ldaptive Authenticator implementation is instantiated under the hood, based on the value. If you want to learn the details there are two options: a) Dive deep into the CAS server code and learn yourself b) higher some CAS experts to do the training and explain all of this to

Re: [cas-user] CAS 5.0.0 with Active Directory Authentication

2016-12-13 Thread dkopylenko
You want to make sure that the following property is set: cas.authn.ldap[0].type with either one of these values: AD, AUTHENTICATED, DIRECT, ANONYMOUS, SASL Best, D. On Dec 13, 2016, 04:20 -0500, mohammad almodallal , wrote: > Hello Philippe, > > the cas.properties was containing cas.authn.attrib

Fwd: Re: [cas-user] SSO LTPA cookie

2016-11-26 Thread dkopylenko
To the list... -- Forwarded message -- From: dkopyle...@unicon.net Date: Nov 26, 2016, 08:54 -0500 To: Joseph Pine Subject: Re: [cas-user] SSO LTPA cookie > The idea here is that you protect this LTPA generator REST resource by CAS, > so then CAS client in front of it delegates

Re: [cas-user] Re: Cas 5 - Management Webapp - Couchbase service registry

2016-11-25 Thread dkopylenko
Sounds like this needs to be fixed in the CAS core repo... Would you like to contribute the fix in the form of a pull request? D. On Nov 25, 2016, 05:35 -0500, Elendrys Yagami , wrote: > I reply to myself as I couldn't get any answer. > > The couchbase registry is working fine and the casted err

Re: [cas-user] After a month, no tickets created in 4.2.2?

2016-11-02 Thread dkopylenko
4.2.2, right? One other suggestion would be to get on the latest release in the 4.2.x series, that is 4.2.6 ... or even get on the v5 bandwagon Cheers, D. On Nov 1, 2016, 21:24 -0400, Jeffrey Wong , wrote: > This issue occurred again tonight. Nothing of note in the logs again, with > plenty of

Re: [cas-user] Does it exist a way to access the Principal inside the flowscope ?

2016-10-18 Thread dkopylenko
Not directly - i.e. neither Authentication nor Principal objects are stored in the flow scope. However you could use this API to access objects associated with TGT (via the TGT id, which is available in the flow scope): https://github.com/apereo/cas/blob/v4.2.6/cas-server-core-api-ticket/src/ma

Re: [cas-user] Server load w/ 4.2.6

2016-10-17 Thread dkopylenko
+1 And IMHO, the explicit cleaner is not such a good idea for distributed reg. impls that employ their own strategies for cache invalidation. D. On Oct 17, 2016, 04:12 -0400, Tom Poage , wrote: > Disabling the registry cleaner brought load average on our (4) servers down > to 0.01-0.20 (from 4

[cas-user] Fwd: Re: [cas-dev] CAS 5 Gradle Overlay

2016-10-11 Thread dkopylenko
For the benefit of others... -- Forwarded message -- From: David Rodriguez Gonzalez Date: Oct 11, 2016, 07:29 -0400 To: dkopyle...@unicon.net Subject: Re: [cas-dev] CAS 5 Gradle Overlay > working > Thanks a lot!! > > > > On Tue, 11 Oct 2016 at 13:00 (mailto:dkopyle...@unicon.net

Re: [cas-user] Request a feature

2016-10-10 Thread dkopylenko
https://github.com/apereo/cas/issues D. On Oct 7, 2016, 17:35 -0400, pouria Mahmoudi , wrote: > Hi, > Do you guys know where can I ask to add a feature? I am expecting a JIRA-ish > website so that I can explain what is needed and follow up with it. > > Thanks > > > > -- > CAS gitter chatroom: ht

Re: [cas-user] CAS 4.2.6 REST API NOT RETURN TGT

2016-10-03 Thread dkopylenko
That's a know issue and will be fixed in the master (if not already). Cheers, D. On Oct 3, 2016, 04:11 -0400, Luo , wrote: > using CAS 4.2.6, i test REST API > > curl -i -k -X POST -d "username=casuser&password=Mellon" > https://demo.ssoserver.com:8443/cas/v1/tickets > > > HTTP/1.1 302 > Locatio

Re: [cas-user] Tomcat 7 to Tomcat 8 doesn't work

2016-09-27 Thread dkopylenko
Just an aside note - Java7 is well end of life and Java8 has been here for several years. Anyone still running Java7, I'd recommend to seriously consider getting current on Java8. Cheers, D. On Sep 27, 2016, 05:50 -0400, Toni McWild , wrote: > It seems to work now (I have done several restarts