Re: [cas-user] Re: Issues getting LDAP going - CAS 4.2.5

2016-10-17 Thread Brandon Martin
Fantastic! Than you much Dan! > On Oct 15, 2016, at 9:58 AM, Dan Roque wrote: > > Hi Brandon, > >Here is a repost of both files you requested. They shouldn't expire now. > > deployerConfigContext.xml - http://pastebin.com/m9JypyUB > cas.properties - http://pastebin.com/DvvA08Yi > > Dan

Re: [cas-user] Server load w/ 4.2.6

2016-10-17 Thread Tom Poage
Looks like we found the source of the load issue. Best we can tell, somewhere about 4.2.5 the RegistryCleaner embedded in the DefaultTicketRegistry was refactored into a TicketRegistryCleaner that’s now automatically picked up and started for all registry types (*). This cleaner walks the entir

Re: [cas-user] Server load w/ 4.2.6

2016-10-17 Thread Tom Poage
Disabling the registry cleaner brought load average on our (4) servers down to 0.01-0.20 (from 4.0-15.0). cas.properties: ticket.registry.cleaner.startdelay=-1 (value could have been zero, but -1 seemed more mnemonic of the intent) Tom. On Oct 14, 2016, at 1:28 PM, Tom Poage mailto:tfpo...@u

Re: [cas-user] OpenID Connect server

2016-10-17 Thread Jérôme LELEU
Hi, 1) like other CAS services in JSON: in the src/main/resources/services directory 2) 3) It's not possible via the REST API 4) Tools available to generate JWKS are at the end of the doc: https://apereo.github.io/cas/development/installation/OIDC-Authentication.html#keystores Thanks. Best rega

Re: [cas-user] Server load w/ 4.2.6

2016-10-17 Thread dkopylenko
+1 And IMHO, the explicit cleaner is not such a good idea for distributed reg. impls that employ their own strategies for cache invalidation. D. On Oct 17, 2016, 04:12 -0400, Tom Poage , wrote: > Disabling the registry cleaner brought load average on our (4) servers down > to 0.01-0.20 (from 4

Re: [cas-user] Re: Issue with json service registry between CASv5 RC3-SNAP and RC4-SNAP

2016-10-17 Thread Facundo Bove
Hello, I am having an issue when I add cas-server-support-json-service-registry to my cas-gradle-overlay project. It loads well: 2016-10-17 10:25:09,134 INFO [org.apereo.cas.web.CasWebApplication] - 2016-10-17 10:25:21,909 INFO [org.apereo.cas.services. AbstractResourceBasedServiceRegistryDao]

[cas-user] Building cas-server-webapp : conflict between modules nimbus version

2016-10-17 Thread Nicolas Lavoillotte
Hello With cas-server-4.2.6 When I compile case-server-webapp with supports : case-server-support-pac4j and case-server-support-token, I have the following conflict: A problem occurred Configuring project ': case-server-webapp'. > Could not resolve all dependencies for configuration ': case-

Re: [cas-user] Server load w/ 4.2.6

2016-10-17 Thread Tom Poage
> On Oct 15, 2016, at 11:23 AM, Tom Poage wrote: > > This email I sent looks like it got stuck in Google yesterday for nearly > 2-1/2 hours before delivery (cf. Received lines in mail header). List > maintainers: Two followup emails I sent yesterday mid-day on this topic still > have not been

Re: [cas-user] AcceptUsersAuthenticationHandler#0 class not found error

2016-10-17 Thread Dmitriy Kopylenko
Put the people.txt file into WEB-INF/classes directory. Best. D. > On Oct 17, 2016, at 11:56 AM, Xin Gong wrote: > > Sorry it was not clear in previous post, I have this section in > cas.properties: > > file.authn.filename=classpath:people.txt > file.authn.separator=:: > > I added in > dep

[cas-user] Using CAS with Apache or Nginx with SSL

2016-10-17 Thread Alexandre Arcanjo de Queiroz
Can I use CAS with this architecture?: A HTTP server with SSL certificate (like Nginx or Apache) acting as proxy of a CAS deployed in a Web Container (like Jetty) without SSL certificate? The Services (using reverse proxy too) only communicate with CAS through HTTP Server. -- CAS gitter chatr

Re: [cas-user] Using CAS with Apache or Nginx with SSL

2016-10-17 Thread Ray Bon
That is exactly how I have my development environment configured. On one server: nginx with self signed cert and 3 tomcats (two CAS one test application(s)). Ray On 2016-10-17 09:36, Alexandre Arcanjo de Queiroz wrote: > Can I use CAS with this architecture?: A HTTP server with SSL > certificate

[cas-user] CAS 5.0.0-RC3 - AttributeDao using applications.properties

2016-10-17 Thread Erdal Gunyar
Hello all, I'm trying to implement a mergingPersonAttributeDao but CAS-5-like using applications.properties (like the default LDAP or JDBC dao) rather than describing fully the Daos. Something like: (Final goal a

[cas-user] CAS Ldaptive connectTimeout java.time.Duration

2016-10-17 Thread Brandon Martin
I am currently configuring CAS 4.2.6 with the Docker image here: https://github.com/apereo/cas/tree/dockerized-caswebapp Using the template from here: https://github.com/apereo/cas-overlay-template The template and docker container seem to work out of the box, my troubles are connecting to Activ

Re: [cas-user] Using CAS with Apache or Nginx with SSL

2016-10-17 Thread Brandon Martin
Here's the nginx config I use: server { listen 443 ssl; server_name login.domain.net; location = / { rewrite ^/(.*) https://login.domain.net/login; } location / { add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"; add_header 'A

Re: [cas-user] CAS Ldaptive connectTimeout java.time.Duration

2016-10-17 Thread Daniel Fisher
On Mon, Oct 17, 2016 at 1:19 PM, Brandon Martin wrote: > > Possibly different version of ldaptive required? > Yes. 1.2.x moved all integer based time properties to durations. So either downgrade to 1.1.x or change your properties. Note that you've got about a half dozen other properties in your

Re: [cas-user] CAS Ldaptive connectTimeout java.time.Duration

2016-10-17 Thread Daniel Fisher
On Mon, Oct 17, 2016 at 3:32 PM, Martin, Brandon wrote: > Thank you for the information. > > 3000 is an integer, so my presumption was I need to remove the quotes from > xml for the attribute to be an integer and not a string. Well this doesn't > work. > You need to convert 3000 to a duration. I

Re: [cas-user] AcceptUsersAuthenticationHandler#0 class not found error

2016-10-17 Thread Xin Gong
Sorry it was not clear in previous post, I have this section in cas.properties: file.authn.filename=classpath:people.txt file.authn.separator=:: I added in deployerConfigContext.xml and created people.txt in the same folder with deployerConfigContext.xml > cat people.txt scott::password bob::

Re: [cas-user] AcceptUsersAuthenticationHandler#0 class not found error

2016-10-17 Thread Xin Gong
Hi Dmitriy, I don't know where to put the password if I add accept."authn.users=casuser::Mellon" to cas.propreties. So I use FileAuthenticationHandler. I added in deployerConfigContext.xml and created people.txt in the same folder with deployerConfigContext.xml > cat people.txt scott::passw

Re: [cas-user] CAS Ldaptive connectTimeout java.time.Duration

2016-10-17 Thread Misagh Moayyed
4.2.x runs with ldaptive 1.x by default. I recommend you don’t change that version. You don’t need to explicitly pull in the ldaptive dependency. CAS will do that for you.  Follow the docs.  --  Misagh From: Daniel Fisher Reply: Daniel Fisher Date: October 17, 2016 at 11:08:24 PM To: cas-us

[cas-user] Regarding JWT and CAS Server

2016-10-17 Thread Ajay Madhavan
I want to use the cas server to authenticate since it gives me good integration with radius and AD. I would like to generate a JWT instead of a service ticket. Do you think that will be possible? Do you think it would be possible to just add the JSON web Token generator inside CAS to generate a tok