[cas-user] Re: cas-management question

2018-05-18 Thread Jennifer LaVoie
ANd it works! You guys are awesome... Pizza all round! On Thursday, May 17, 2018 at 3:18:42 PM UTC-4, Jennifer LaVoie wrote: > > So I have followed all the steps here > > > https://dacurry-tns.github.io/deploying-apereo-cas/building_svcmgmt_configure-webapp-properties.html > > (awesome site) > >

Re: [cas-user] Re: cas-management question

2018-05-18 Thread Jennifer LaVoie
I UNDERSTAND. Ok...trying that now...thanks! Jen On Fri, May 18, 2018 at 11:48 AM, Ray Bon wrote: > Jen, > > You will need to install custom certs on both sides (CAS and > cas-management). The jvm is responsible for certificate processing, tomcat > only needs to know where it is to send it to

Re: [cas-user] Re: cas-management question

2018-05-18 Thread Ray Bon
Jen, You will need to install custom certs on both sides (CAS and cas-management). The jvm is responsible for certificate processing, tomcat only needs to know where it is to send it to the browser. sudo keytool -import -file ${certName} -alias ${aliasName} -keystore $JAVA_HOME/jre/lib/securit

Re: [cas-user] Re: cas-management question

2018-05-18 Thread Jennifer LaVoie
Yes. I understand the distinction...I was typing quickly :) I do get an error in my cas-management log about ssl - but my regular /cas/login link loads just fine (self signed cert on this particular server) Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.s

Re: [cas-user] Re: cas-management question

2018-05-17 Thread Ray Bon
Jen, I think you mean a cas-management error and not 'CAS error'. Are CAS and cas-management running on the same tomcat? Logging config for cas-management is in log4j2-management.xml which also introduces cas-management.log. Ray On Thu, 2018-05-17 at 12:55 -0700, Jennifer LaVoie wrote: nothing

Re: [cas-user] Re: cas-management question

2018-05-17 Thread David Curry
Sorry, not cas.log cas-management.log. If still nothing, try setting cas.log.level to debug in log4j2-management.xml. -- DAVID A. CURRY, CISSP *DIRECTOR OF INFORMATION SECURITY* INFORMATION TECHNOLOGY 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 +1 212 229-5300 x4728 • david.cu...@news

Re: [cas-user] Re: cas-management question

2018-05-17 Thread Jennifer LaVoie
nothing helpful in cas.log or catalina.out that I can see it seems to be CAS error because the leaf is on the tab and above the error that I posted it says Cas Service Management Jen On Thursday, May 17, 2018 at 3:44:27 PM UTC-4, David Curry wrote: > > Haven't seen that one, that I can recall

Re: [cas-user] Re: cas-management question

2018-05-17 Thread David Curry
Haven't seen that one, that I can recall. Is that a CAS error (shows in a CAS-branded web page) or a Tomcat error? Do the logs (cas.log and/or catalina.out) say anything helpful? -- DAVID A. CURRY, CISSP *DIRECTOR OF INFORMATION SECURITY* INFORMATION TECHNOLOGY 71 FIFTH AVE., 9TH FL., NEW YO

[cas-user] Re: cas-management question

2018-05-17 Thread Jennifer LaVoie
I updated the management.properties file with some ports specifically defined. And that is now working as expected... However, I get this The CAS management webapp is unavailable. There was an error trying to complete your request. Please notify your support desk or try again. On Thursda

Re: [cas-user] Re: cas-management question

2018-05-17 Thread David Curry
You have "server.name" instead of "cas.server.name" (oops) -- DAVID A. CURRY, CISSP *DIRECTOR OF INFORMATION SECURITY* INFORMATION TECHNOLOGY 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 +1 212 229-5300 x4728 • david.cu...@newschool.edu [image: The New School] On Thu, May 17, 2018 at 3:23 PM,

[cas-user] Re: cas-management question

2018-05-17 Thread Jennifer LaVoie
Here is my management.properties file # CAS server that management app will authenticate with # This server will authenticate for any app (service) and you can login as casuser/Mellon server.name: https://cashost cas.server.prefix: ${cas.server.name}/cas cas.mgmt.adminRoles[0]=ROLE_ADMIN cas.m