Re: [cas-user] Is it possible in my app to allow only authorized user to use pac4j delegation to login

2017-08-15 Thread Misagh Moayyed
So you're saying: allow Peter to authenticate via Facebook, then come back to CAS, authenticate and verify credentials and then possibly reject Peter because he's not allowed? You cannot do this without changing source code, but it's strange that you present an option first only to possibly

Re: [cas-user] CAS 5.1.2 step by step documentation

2017-08-15 Thread Bob Dill
Uxio, Thank you for the suggested links. I will read through them shortly. We actually have a previous version of CAS installed. Unfortunately, the person that installed it left, and I cannot continue where he left off, so I am reinstalling and configuring everything from scratch. I

RE: [cas-user] throttling cas 5.1.3

2017-08-15 Thread Nancy Snoke
It works. Thank you Misagh. From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Misagh Moayyed Sent: Tuesday, August 15, 2017 9:38 AM To: cas-user@apereo.org Subject: Re: [cas-user] throttling cas 5.1.3 Blank out the setting for usernameParameter. --Misagh

Re: [cas-user] Having issues w/ trustedDevice in 5.1.2

2017-08-15 Thread Matt Elson
> In any case, any help would be appreciated! Just noting for future people potentially stumbling on this that this got fixed up in 5.1.3 (commit 29d4fd6388969820e4631b2a2693cb8116a36f98 would be my guess). The flow is going to the right place and the in memory storage is working fine.

[cas-user] CAS 5.1.x, Docker, github & tags

2017-08-15 Thread Chris Peck
Hi all, I've created a small docker setup that builds and runs CAS in docker using a multi-stage build, resulting image is about 173MB. We're planning on using this to build & run our production CAS servers when we update to 5.1.x. Does this seem reasonable? The github repo is at:

Re: [cas-user] Is it possible in my app to allow only authorized user to use pac4j delegation to login

2017-08-15 Thread Ng Sek Long
Thanks for your suggestion! I don't mind editing cas source code if my use case is specific for me. Because of my use case, I think I will use the less elegant approach for now until I get time to implement the better approach. -Andy On Wednesday, 16 August 2017 00:53:59 UTC+8, Misagh Moayyed

[cas-user] throttling cas 5.1.3

2017-08-15 Thread Nancy Snoke
Hello Everyone, I am setting up a CAS 5.1.3 and I am currently enabling throttling. In the past (on 4.2 and below) I've always done by ip address and allowed 1 attempt every 3 seconds. There are several setting that I am not sure about that do not seem to be defined in the documentation. I

Re: [cas-user] throttling cas 5.1.3

2017-08-15 Thread Misagh Moayyed
Blank out the setting for usernameParameter. --Misagh From: "Nancy Snoke" To: cas-user@apereo.org Sent: Tuesday, August 15, 2017 7:17:14 AM Subject: [cas-user] throttling cas 5.1.3 Hello Everyone, I am setting up a CAS 5.1.3 and I am currently enabling

Re: [cas-user] Spring profiles

2017-08-15 Thread David Rodriguez Gonzalez
Ok, looks like it's solved. The problem was the standalone profile. We have to specify the native one Thanks a lot!! On Mon, 14 Aug 2017 at 14:58 David Rodriguez Gonzalez < davidrg131...@gmail.com> wrote: > Giving you a bit more of information, having a look into >

Re: [cas-user] CAS 5.1.2 step by step documentation

2017-08-15 Thread David Rodriguez Gonzalez
+1 How to set up Spring profiles? On Mon, 14 Aug 2017 at 11:26 satheesh k wrote: > HI All, > > We are implementing CAS 5.1.2 in our projct. I need to set up SSO with our > application using CAS. I have read the documentation at >

Re: [cas-user] Spring profiles

2017-08-15 Thread David Rodriguez Gonzalez
Giving you a bit more of information, having a look into https://apereo.github.io/cas/5.1.x/installation/Configuration-Properties.html looks like what I want is "native" but, where should I place my config files? under cas/src/main/resources or in the standalone directory? On Mon, 14 Aug 2017

Re: [cas-user] Spring profiles

2017-08-15 Thread David Rodriguez Gonzalez
yeah, but why if I pass the first one, instead of the last one, through command line args? I have it working in a different project, so I was wondering if there is something going on with CAS On Mon, 14 Aug 2017 at 12:21 wrote: > According to >

[cas-user] RE: pac4j delegate authentication on cas 4.2.7

2017-08-15 Thread Nancy Snoke
An update on my issue: I found where there was a facebook update in March that is what makes the 4.2.7 facebook login not work anymore. So I tried the latest version of the social sign on casa demo project https://github.com/casinthecloud/cas-pac4j-oauth-demo/tree/master and that does not

Re: [cas-user] CAS 5.0 & Resource Owner Grant

2017-08-15 Thread Tom Andersson
Hi, Thanks for the tips! I saw you already implementing something for this on the master branch :) Related to this - is there currently no way to control which oAuth grant types are allowed per service? Running CAS 5.0.3 that is. That is, we'd like to enable Resource Owner Password grant for a

Re: [cas-user] CAS 5.0 & Resource Owner Grant

2017-08-15 Thread Misagh Moayyed
At this point, no there isn't but speaking for myself, it is something that will likely get done prior to 5.3. It's not exactly high on my list. It's not that difficult to do, and an OAuth service definition already has the placeholder to carry grant types it supports. The remaining work is to