[cas-user] Unable to validate ProxyTicketValidator

2009-06-12 Thread nedim ozan tekin
Hello friends, i am so new to CAS that, i have integrated CAS server with Jboss Portal2.7.2. I configured the SSL according to http://tomcat.apache.org/tomcat-6.0-doc/ssl-howto.html. However, CAS login page comes and i login successfully and then jboss portal login page comes due to the

Re: [cas-user] Unable to validate ProxyTicketValidator

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

Re: [cas-user] user password in plalintext in cas.log

2009-06-12 Thread Kim Cary
I think in debug mode, that is useful. You may be able to tune your log4j properties file to debug some things and not others (containing the password) -- check the comments in that file. On Jun 12, 2009, at 8:59 AM, deanhe01 wrote: As I was looking at log files yesterday I came across

Re: [cas-user] user password in plalintext in cas.log

2009-06-12 Thread deanhe01
Before this starts a long thread..All I am trying to point out is that you should be aware that if you turn debug on, there is a chance that you could leave user credential information laying around in log files and that might be a less than ideal situation deanhe01 wrote: As I was looking

Re: [cas-user] user password in plalintext in cas.log

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

Re: [cas-user] How to compile in the CSUS clearpass component

2009-06-12 Thread Andrew Petro
David, I took some time today to blog some step-by-step instructions for deploying ClearPass. http://www.unicon.net/blog/3/deploying_clearpass Where the ClearPass documentation describes the CAS extensions as packaged as a Maven2 patch on top of CAS 3.2.1, what is meant is that the Maven

Re: [cas-user] How to compile in the CSUS clearpass component

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

[cas-user] How to sign out of CAS when spring security app session timeout?

2009-06-12 Thread Xuejin Ruan
I have an application implementing Spring Security. In web.xml, I set up HttpSessionEventPublisher listener, and configures session timeout as 5 minutes. When the application times out, how do I invalidate CAS single sign on session to force the user to relogin? I have tried to create a

[cas-user] how to deploy the cas.war?

2009-06-12 Thread Jeison Gutierrez
hello,,,I build the cas package and I copy the cas.war to the server/default/deploy of jboss 4 but I see that cas.properties have urls like https://localhost:8443/cas and jboss run on http://localhost:8080/ and when I put the cas.war on server/default/deploy I access to http://localhost:8080/cas

Re: [cas-user] how to deploy the cas.war?

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

Re: [cas-user] How to sign out of CAS when spring security app session timeout?

2009-06-12 Thread Xuejin Ruan
oh well, I think I get it working. I set followServiceRedirects=true in logoutController in cas-servlet.xml. And then in the custom filter I wrote, when session timeout was detected, it will be redirect to cas logout url, with current requestURL appended as service url. Xuejin Ruan wrote:

RE: [cas-user] How to sign out of CAS when spring security app session timeout?

2009-06-12 Thread Andrew R Feller
Xuejin, Whenever an application using the SSO expires a users' session, it doesn't make sense that the application forces the user to logout of the SSO. The application should either increase its session timeout to be that of the SSO timeout or store the session information in something that

Re: [cas-user] How to sign out of CAS when spring security app session timeout

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

Re: [cas-user] Unable to validate ProxyTicketValidator

2009-06-12 Thread Adam Rybicki
The Tomcat instructions tell you how to install the cert on the Tomcat server, which is running CAS, and it your browser can access that server that is a good step 1. However, the error you mention occurs in the CAS filter when accessing CAS server to validate the service ticket. Your Java

RE: [cas-user] how to deploy the cas.war?

2009-06-12 Thread Andrew R Feller
Jeison, What I would recommend: 1. Download CAS 3.3.2 2. Edit main pom.xml to include necessary modules into build 3. Edit the cas.properties within cas-server-webapp to change localhost to the name of your server 4. Build CAS 5. Enjoy For an encore, you can configure your own authentication

RE: [cas-user] How to sign out of CAS when spring security app session timeout?

2009-06-12 Thread Xuejin Ruan
Hi Andrew, Thanks so much for the reply. I know most of the cases you are right. And I do agree with you that in common sense a single app's session timeout should not forces the user to logout of SSO. In our case, we have a pretty complicated enterpise portal system which host applications

Re: [cas-user] How to sign out of CAS when spring security app session timeout

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

[cas-user] Fwd: friendly reminder

2009-06-12 Thread Scott Battaglia
A friendly reminder about out of office messages (ironically, the original title of this message triggered it to be rejected because it thought it was an out of office message) -- Forwarded message -- From: Scott Battaglia scott.battag...@gmail.com Date: Fri, Jun 12, 2009 at

Re: [cas-user] Fwd: friendly reminder

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see

[cas-user] Extending CAS to put more data into session

2009-06-12 Thread Yuriy Zubarev
Hi, Right now when my client app gets authenticated against CAS, the client's session has the following attributes populated: edu.yale.its.tp.cas.client.filter.user edu.yale.its.tp.cas.client.filter.receipt Is it possible to extend CAS to put more info into the session? If so, where do I

Re: [cas-user] Extending CAS to put more data into session

2009-06-12 Thread Brian Rich
I am out of the office until Tuesday 16th June. If your message is urgent, please contact the switchboard on 0845 1300 411. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see