[cas-user] Dynamic LDAP username & password

2016-08-20 Thread Tom Barber
Hello folks, I don't know if this is possible in 4.x without extending it but I figured I'd ask. I'm implementing LDAP based CAS on a corporate AD server I have no administrative control over (as usual). I wrote an Ldaptive class to check the idea and it seems valid: https://gist.github.c

[cas-user] Service URL appending /

2016-09-27 Thread Tom Barber
Hi folks I can't find a cause or solution to this anywhere so I figured I'd ask: I have CAS working fine with HTTPD mod_cas but when I try and hook it up to a plain java webapp I get this: Ticket 'ST-1-ABI6h1jCH7SXA2sbjU6g-my-domain.com' does not match supplied service. The original service was '

Re: [cas-user] Service URL appending /

2016-09-27 Thread Tom Barber
n.com/service// Tom On Tue, Sep 27, 2016 at 9:51 AM, Alex Olson wrote: > What cas version are you running? > > On Tue, Sep 27, 2016 at 10:35 AM Tom Barber > wrote: > >> Hi folks >> >> I can't find a cause or solution to this anywhere so I figured I'd ask: &

Re: [cas-user] Service URL appending /

2016-09-27 Thread Tom Barber
s the issue ;) Tom On Tue, Sep 27, 2016 at 9:53 AM, Tom Barber wrote: > Hey Alex > > 4.2.4 > > The webapp proxies through Apache HTTPD to Tomcat but I'm not seeing > anything obvious in the configs in Tomcat, HTTPD or CAS to see why the / is > appended. Similarly, i

[cas-user] mod_auth_cas and secure content

2016-09-29 Thread Tom Barber
Hi folks I have the following setup in a vhost: AuthType CAS AuthName "Restricted Content" Require valid-user SetEnvIf Request_URI ^/jenkins noauth=1 SetEnvIf Request_URI ^/cas noauth=1 order deny,allow d

[cas-user] Log invalid passwords

2016-10-11 Thread Tom Barber
Hello folks, I've grepped around but can't find anything so far. Can you log failed authentication attempts? Simply stuff like when a users password is incorrect. Thanks Tom -- CAS gitter chatroom: https://gitter.im/apereo/cas CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-

Re: [cas-user] Log invalid passwords

2016-10-12 Thread Tom Barber
ella < patrick.garde...@asburyseminary.edu> wrote: > Do you see successful ones? The only difference in what is logged would be > that the ACTION says "AUTHENTICATION_SUCCESS" > > Patrick > > On Wed, Oct 12, 2016 at 9:03 AM, Tom Barber > wrote: > >> Interesting Patri

Re: [cas-user] Log invalid passwords

2016-10-12 Thread Tom Barber
Supplied credentials: [johnsmith] > ACTION: AUTHENTICATION_FAILED > APPLICATION: CAS > WHEN: Wed Oct 12 00:02:04 UTC 2016 > CLIENT IP ADDRESS: 192.168.1.1. > SERVER IP ADDRESS: 192.168.25.10 > = > > Patrick+ > &g

[cas-user] NTLM Negotiation

2016-11-22 Thread Tom Barber
Hi folks, Maybe someone can shed some light on NTLM stuff here because its got me confused. I want my browsers to accept NTLM logins and I can see the browser sending a NTLM header: 2016-11-22 10:26:03,099 DEBUG [org.jasig.cas.support.spnego.web.flow.SpnegoNegociateCredentialsAction] - Authoriza

[cas-user] Re: NTLM Negotiation

2016-11-22 Thread Tom Barber
Sorry.. CAS 4.2.4 on Tomcat, no proxy etc. On Tue, Nov 22, 2016 at 10:30 AM, Tom Barber wrote: > Hi folks, > > Maybe someone can shed some light on NTLM stuff here because its got me > confused. > > I want my browsers to accept NTLM logins and I can see the browser sendi

[cas-user] mod_cas_auth and cas attribute

2017-02-02 Thread Tom Barber
Hello folks I see in the readme the cas-attribute directive is for use with SAML, it is only SAML and not serviceValidate endpoints? Thanks Tom -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentat