RE: [cas-user] RE: CAS+Oauth

2016-04-13 Thread Mahantesh Prasad Katti
Just so I get this right. Does this mean [in the oauth scenario] I will have to get an access token for each request that I make in my application? Regards Prasad From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Jérôme LELEU Sent: Wednesday, April 13, 2016 2:24 PM To:

[cas-user] Re: Proxy Granting Tickets

2016-04-13 Thread David Lee
One more thing is...when I try to check whether the ticket is valid on the URL /cas/serviceValidate it always returns INVALID_TICKET. But the ticket is same to the one returned to the CAS client app and so is the service URL. I guess it's because the ticket returned from CAS is just for one

RE: [cas-user] RE: CAS+Oauth

2016-04-13 Thread Mahantesh Prasad Katti
Yes. jwt can carry lot of information that can lead to federated authorization. BTW, I did see that JWT is supported [at least that is what I inferred.] based on the link http://jasig.github.io/cas/4.2.x/installation/JWT-Authentication.html. Please correct me if I am wrong. I have another

Re: [cas-user] RE: CAS+Oauth

2016-04-13 Thread Jérôme LELEU
Hi, In fact, JWT is supported but not in OAuth support: JWT can be passed as token request parameter on the /login endpoint, assuming you have the appropriate configuration. Before CAS 4.2, the access token was the TGT so it didn't take into account the service. Since CAS 4.2, the service is

Re: [cas-user] RE: CAS+Oauth

2016-04-13 Thread Jérôme LELEU
Hi, No, you'll get an access token once you access your application, though the value of the access token will be the TGT value and it will be the same for all OAuth clients. For CAS server < v4.2 only. Best regards, Jérôme 2016-04-13 11:32 GMT+02:00 Mahantesh Prasad Katti <

Re: [cas-user] Ticket Granting Ticket ID Null in Logout Flow

2016-04-13 Thread robert . pepersack
I tried moving my code from the web flow listener to my own action, which I made the first action to execute before terminateSessionAction, I got the same result as with the listener: the ticket granting ticket ID is null in my Eclipse debugger. Here is what my action does: public Event

Re: [cas-user] Ticket Granting Ticket ID Null in Logout Flow

2016-04-13 Thread robert . pepersack
I also debugged TerminateSessionAction and the ticket granting ticket it retrieves is also null. On Tuesday, April 12, 2016 at 8:06:06 AM UTC-4, Robert wrote: > > Hi, > > I'm trying to get the CAS Principal (the authenticated user) from the TGT > in the logout web flow. So, I tried to get the

[cas-user] 4.1.8 snapshot error, but works in 4.1.5 release

2016-04-13 Thread Yan Zhou
Hi, I am using 4.1.8 snapshot CAS, because that is the only version that has fixed the "Identifier too long" bug in JPA Service Registry for Oracle. But I run into this error when login to CAS, did anyone have the same problem?When I switch back to 4.1.5 release of CAS, it works fine (but

[cas-user] pac4j oauth examples - getting error while accessing /accessToken api

2016-04-13 Thread Mahantesh Prasad Katti
Hi All, I am playing around with the pac4j examples for oauth. I know that with oauth we can run the following apis. 1./oauth2.0/authorize 2. /oauth2.0/accessToken 3. /oauth2.0/profile I am able to see the authorize call going through in the firebug. When I try to access /oauth2.0/accessToken

[cas-user] mod_auth_cas

2016-04-13 Thread Chris Cheltenham
Hello, We are using mod_auth_cas. We used to use this location syntax for 1.0.9.x Authtype CAS require valid-user CASAuthNHeader CAS_USER I upgraded to mod_auth_cas 1.1RC1 but apache doesn't like "CAS_USER" mod_auth_cas 1.1rc1 is giving me the error AUTHORIZATION REQUIED Thank You;

[cas-user] Limiting mapped Response results

2016-04-13 Thread Dale
Hello, Is it possible to limit the responses a mapped result returns? To clarify my intention I have setup deployerConfigContext.xml with the following mappings.. ==Truncated==

RE: [cas-user] RE: CAS+Oauth

2016-04-13 Thread Mahantesh Prasad Katti
Thanks Jerome. Is it possible to have Classic CAS and Oauth CAS working at the same time? It’s possible that there are already some applications that are using CAS the conventional way. While newer applications may be working with Oauth based CAS. Is it possible for both to co-exist? Regards,

[cas-user] question ldap auth ssl config upgrade 4.0.4 to 4.2

2016-04-13 Thread Nancy Snoke
We had breaking changes on the upgrade and I was going through each feature one at a time for the upgrade. Looking at the new ldap documentation I do not see how to add in ssl configuration (keystore, keystoreType, keystorePassword). Do I need to continue to use the dozen beans I had

RE: [cas-user] question ldap auth ssl config upgrade 4.0.4 to 4.2

2016-04-13 Thread Misagh Moayyed
You add those as: trustCertificates="" trustStore="" trustStorePassword="changeit" trustStoreType="JKS" along with other attributes. From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Nancy Snoke Sent: Wednesday, April 13, 2016 12:29 PM To: cas-user@apereo.org

[cas-user] Re: create a class in Cas server 4.0.1, receive credentials for authentication

2016-04-13 Thread iris mc
El miércoles, 13 de abril de 2016, 17:50:10 (UTC-5), iris mc escribió: > > > Hello, I have a question, I need to add a Java class to cas version 4.0.1 > project, I add a "java" folder inside the "main" folder, also I added a > class within the "java" folder. > That class must extend and that

[cas-user] create a class in Cas server 4.0.1, receive credentials for authentication

2016-04-13 Thread iris mc
Hello, I have a question, I need to add a Java class to cas version 4.0.1 project, I add a "java" folder inside the "main" folder, also I added a class within the "java" folder. That class must extend and that method should I use to receive the credentials (username and password)? I need to

[cas-user] Proxy callback URL Exception

2016-04-13 Thread David Lee
Hi All, Hope you all are doing great. I'm using CAS 4.2.x and trying to set the proxy callback URL on my client application. First of all, I got an exception error message as below when trying to authenticate my sample web app. HTTP Status 500 -