RE: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-20 Thread Cheltenham, Chris
Man,



I don’t know what that means.



===

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Man H
Sent: Tuesday, February 20, 2018 11:36 AM
To: cas-user@apereo.org
Subject: Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use 
CAS



This should be another thread since dashboard is not the same as 
cas-management.

Make it a service

El martes, 20 de febrero de 2018, Cheltenham, Chris 
<ccheltenham-...@philasd.org <mailto:ccheltenham-...@philasd.org> > 
escribió:

Hello Everyone,



I am getting access denied on the /cas-management

It appears CAS 5 is a bit different from 4



Does anyone know why I am getting access denied to the management stuff?







===

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

From: cas-user@apereo.org <mailto:cas-user@apereo.org> 
[mailto:cas-user@apereo.org <mailto:cas-user@apereo.org> ] On Behalf Of 
David Curry
Sent: Tuesday, February 20, 2018 8:48 AM
To: cas-user@apereo.org <mailto:cas-user@apereo.org>
Subject: Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use 
CAS



Assuming "the services directory" means you're trying to use an external 
directory full of JSON service definitions, do you have





org.apereo.cas

cas-server-support-json-service-registry

${cas.version}





in your pom.xml and



cas.serviceRegistry.json.location:file:/etc/cas/services



(whatever directory path you want) in cas.properties?



--Dave






--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 
<https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
+1 212 229-5300 x4728 •  <mailto:david.cu...@newschool.edu> 
david.cu...@newschool.edu

  <http://www.newschool.edu/marketing-communication/img/tns-sig-logo.jpg>



On Tue, Feb 20, 2018 at 8:41 AM, Kevin Liu <annihil8...@gmail.com 
<mailto:annihil8...@gmail.com> > wrote:

I've added and it looks like CAS is just not picking up on any of the 
services directory. It doesn't show as registering the service.



On Monday, February 19, 2018 at 12:55:18 PM UTC-6, rbon wrote:

Put these into the log config to verify that the services you want are 
correct:





















Ray



On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote:

I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard

On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:

Kevin,



What is the URL that you are trying to access?



Ray



On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:

This is my current entry in service registry



{

  "@class" : "org.apereo.cas.services.RegexRegisteredService",

  "serviceId" : "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.* 
 )",

  "name" : "CAS Admin Dashboard",

  "id" : 1509646291,

  "description" : "CAS dashboard and administrative endpoints",

  "evaluationOrder" : 5000

}




On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:

Do you have an entry in the service registry that matches the service?



{

  "@class" : "org.apereo.cas.services.RegexRegisteredService",

  "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*) 
<https://xxx.xxx.xxx.xxx/cas1/status/dashboard(%5C%5Cz%7C/.*)> ",

  "name" : "CAS Admin Dashboard",

  "id" : 123456789,

  "description" : "CAS dashboard and administrative endpoints",

  "evaluationOrder" : 12345

}



Or something like that.


--Dave






--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 
<https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
+1 212 229-5300 x4728 • david.cu...@newschool.edu 
<mailto:david.cu...@newschool.edu>

  <http://www.newschool.edu/marketing-communication/img/tns-sig-logo.jpg>



On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu <annih...@gmail.com 
<mailto:annih...@gmail.com> > wrote:

Hello,



I'm trying to enable access to the Dashboard with the default casuser:Mellon 
account but I'm running into an Application Not Authorized to Use CAS. This 
is my cas.properties file. I can't figure out what I'm missing? Looking 
online, it seems I need a registry of some sort but I can't find additional 
documentation on it.





cas.server.name <http://cas.server.name> : https://xxx.xxx.xxx.xxx

cas.serv

Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-20 Thread Man H
This should be another thread since dashboard is not the same as
cas-management.
Make it a service

El martes, 20 de febrero de 2018, Cheltenham, Chris <
ccheltenham-...@philasd.org> escribió:

> Hello Everyone,
>
>
>
> I am getting access denied on the /cas-management
>
> It appears CAS 5 is a bit different from 4
>
>
>
> Does anyone know why I am getting access denied to the management stuff?
>
>
>
>
>
>
>
> ===
>
> Thank You;
>
> Chris Cheltenham
> Technology Services
> The School District of Philadelphia
>
> Work # 215-400-5025
> Cell # 215-301-6571
>
> *From:* cas-user@apereo.org [mailto:cas-user@apereo.org] *On Behalf Of *David
> Curry
> *Sent:* Tuesday, February 20, 2018 8:48 AM
> *To:* cas-user@apereo.org
> *Subject:* Re: [cas-user] [5.2] Dashboard - Application Not Authorized to
> Use CAS
>
>
>
> Assuming "the services directory" means you're trying to use an external
> directory full of JSON service definitions, do you have
>
>
>
> 
>
> org.apereo.cas
>
> cas-server-support-json-service-registry
>
> ${cas.version}
>
> 
>
>
>
> in your pom.xml and
>
>
>
> cas.serviceRegistry.json.location:file:/etc/cas/services
>
>
>
> (whatever directory path you want) in cas.properties?
>
>
>
> --Dave
>
>
>
>
> --
>
> *DAVID A. CURRY, CISSP*
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> <https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
>
>
> On Tue, Feb 20, 2018 at 8:41 AM, Kevin Liu <annihil8...@gmail.com> wrote:
>
> I've added and it looks like CAS is just not picking up on any of the
> services directory. It doesn't show as registering the service.
>
>
>
> On Monday, February 19, 2018 at 12:55:18 PM UTC-6, rbon wrote:
>
> Put these into the log config to verify that the services you want are
> correct:
>
>
>
> 
>
>  level="debug" />
>
>
>
> 
>
>  level="debug"/>
>
>
>
> 
>
>  level="debug" />
>
>
>
> Ray
>
>
>
> On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote:
>
> I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard
>
> On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:
>
> Kevin,
>
>
>
> What is the URL that you are trying to access?
>
>
>
> Ray
>
>
>
> On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
>
> This is my current entry in service registry
>
>
>
> {
>
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>
>   "serviceId" : "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(
> \\z|/.*)",
>
>   "name" : "CAS Admin Dashboard",
>
>   "id" : 1509646291,
>
>   "description" : "CAS dashboard and administrative endpoints",
>
>   "evaluationOrder" : 5000
>
> }
>
>
>
>
> On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:
>
> Do you have an entry in the service registry that matches the service?
>
>
>
> {
>
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>
>   "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
>
>   "name" : "CAS Admin Dashboard",
>
>   "id" : 123456789,
>
>   "description" : "CAS dashboard and administrative endpoints",
>
>   "evaluationOrder" : 12345
>
> }
>
>
>
> Or something like that.
>
>
> --Dave
>
>
>
>
> --
>
> *DAVID A. CURRY, CISSP*
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> <https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
>
>
> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu <annih...@gmail.com> wrote:
>
> Hello,
>
>
>
> I'm trying to enable access to the Dashboard with the default
> casuser:Mellon account but I'm running into an Application Not Authorized
> to Use CAS. This is my cas.properties file. I can't figure out what I'm
> missing? Looking online, it seems I need a registry of some 

RE: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-20 Thread Cheltenham, Chris
Yes, Cas works properly.





===

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of Kevin 
Liu
Sent: Tuesday, February 20, 2018 11:24 AM
To: CAS Community <cas-user@apereo.org>
Subject: Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use 
CAS



I'm not familiar with cas 4 but do you have a cas.properties file?

On Tuesday, February 20, 2018 at 10:16:01 AM UTC-6, Chris Cheltenham wrote:

Hello Everyone,



I am getting access denied on the /cas-management

It appears CAS 5 is a bit different from 4



Does anyone know why I am getting access denied to the management stuff?







===

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

From: cas-...@apereo.org   [mailto:cas-...@apereo.org 
 ] On Behalf Of David Curry
Sent: Tuesday, February 20, 2018 8:48 AM
To: cas-...@apereo.org 
Subject: Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use 
CAS



Assuming "the services directory" means you're trying to use an external 
directory full of JSON service definitions, do you have





org.apereo.cas

cas-server-support-json-service-registry

${cas.version}





in your pom.xml and



cas.serviceRegistry.json.location:file:/etc/cas/services



(whatever directory path you want) in cas.properties?



--Dave






--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 •   david.cu...@newschool.edu

  
<https://lh4.googleusercontent.com/proxy/kBxyNqPE_dwGnQ5_31vxODZ361V2PjQdxLgStd_Hjq6qhsUZ5Ls9wt8E7q_K2I1IH9Gl9beQOC7lRFhDZ6YS4RBwSzHk1J04dgKAuT9_k0gSpkU-gvRxyA=w5000-h5000>



On Tue, Feb 20, 2018 at 8:41 AM, Kevin Liu <annih...@gmail.com  
 > wrote:

I've added and it looks like CAS is just not picking up on any of the 
services directory. It doesn't show as registering the service.



On Monday, February 19, 2018 at 12:55:18 PM UTC-6, rbon wrote:

Put these into the log config to verify that the services you want are 
correct:





















Ray



On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote:

I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard

On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:

Kevin,



What is the URL that you are trying to access?



Ray



On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:

This is my current entry in service registry



{

  "@class" : "org.apereo.cas.services.RegexRegisteredService",

  "serviceId" : "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.* 
 )",

  "name" : "CAS Admin Dashboard",

  "id" : 1509646291,

  "description" : "CAS dashboard and administrative endpoints",

  "evaluationOrder" : 5000

}




On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:

Do you have an entry in the service registry that matches the service?



{

  "@class" : "org.apereo.cas.services.RegexRegisteredService",

  "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*) 
<https://xxx.xxx.xxx.xxx/cas1/status/dashboard(%5C%5Cz%7C/.*)> ",

  "name" : "CAS Admin Dashboard",

  "id" : 123456789,

  "description" : "CAS dashboard and administrative endpoints",

  "evaluationOrder" : 12345

}



Or something like that.


--Dave






--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 
<https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
+1 212 229-5300 x4728 • david...@newschool.edu 

  
<https://lh4.googleusercontent.com/proxy/kBxyNqPE_dwGnQ5_31vxODZ361V2PjQdxLgStd_Hjq6qhsUZ5Ls9wt8E7q_K2I1IH9Gl9beQOC7lRFhDZ6YS4RBwSzHk1J04dgKAuT9_k0gSpkU-gvRxyA=w5000-h5000>



On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu <annih...@gmail.com 
<mailto:annih...@gmail.com> > wrote:

Hello,



I'm trying to enable access to the Dashboard with the default casuser:Mellon 
account but I'm running into an Application Not Authorized to Use CAS. This 
is my cas.properties file. I can't figure out what I'm missing? Looking 
online, it seems I need a registry of some sort but I can't find additional 
documentation on it.





cas.server.name <http://cas.server.name> : https://xxx.xxx.xxx.xxx

cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1



logging.config: file:/etc/cas1/config/log4j2.xml



endpoints.enabled=true

endpoints.sensitive=false

cas.adminPagesSecurity.ip=192.168.x.xx

cas.monitor.endpoints.enab

Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-20 Thread Kevin Liu
I'm not familiar with cas 4 but do you have a cas.properties file? 

On Tuesday, February 20, 2018 at 10:16:01 AM UTC-6, Chris Cheltenham wrote:
>
> Hello Everyone,
>
>  
>
> I am getting access denied on the /cas-management
>
> It appears CAS 5 is a bit different from 4
>
>  
>
> Does anyone know why I am getting access denied to the management stuff?
>
>  
>
>  
>
>  
>
> ===
>
> Thank You;
>
> Chris Cheltenham
> Technology Services
> The School District of Philadelphia
>
> Work # 215-400-5025
> Cell # 215-301-6571 
>
> *From:* cas-...@apereo.org  [mailto:cas-...@apereo.org 
> ] *On Behalf Of *David Curry
> *Sent:* Tuesday, February 20, 2018 8:48 AM
> *To:* cas-...@apereo.org 
> *Subject:* Re: [cas-user] [5.2] Dashboard - Application Not Authorized to 
> Use CAS
>
>  
>
> Assuming "the services directory" means you're trying to use an external 
> directory full of JSON service definitions, do you have
>
>  
>
> 
>
> org.apereo.cas
>
> cas-server-support-json-service-registry
>
> ${cas.version}
>
> 
>
>  
>
> in your pom.xml and
>
>  
>
> cas.serviceRegistry.json.location:file:/etc/cas/services
>
>  
>
> (whatever directory path you want) in cas.properties?
>
>  
>
> --Dave
>
>  
>
>
> --
>
> *DAVID A. CURRY, CISSP*
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu 
>
> [image: The New School]
>
>  
>
> On Tue, Feb 20, 2018 at 8:41 AM, Kevin Liu <annih...@gmail.com 
> > wrote:
>
> I've added and it looks like CAS is just not picking up on any of the 
> services directory. It doesn't show as registering the service.
>
>
>
> On Monday, February 19, 2018 at 12:55:18 PM UTC-6, rbon wrote:
>
> Put these into the log config to verify that the services you want are 
> correct:
>
>  
>
> 
>
>  name="org.apereo.cas.services.AbstractServicesManager" level="debug" />
>
>  
>
> 
>
>  name="org.apereo.cas.services.AbstractServiceRegistryDao" level="debug"/>
>
>  
>
> 
>
>  name="org.apereo.cas.DefaultCentralAuthenticationService" level="debug" />
>
>  
>
> Ray
>
>  
>
> On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote:
>
> I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard
>
> On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote: 
>
> Kevin,
>
>  
>
> What is the URL that you are trying to access?
>
>  
>
> Ray
>
>  
>
> On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
>
> This is my current entry in service registry
>
>  
>
> {
>
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>
>   "serviceId" : "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(
> \\z|/.*)",
>
>   "name" : "CAS Admin Dashboard",
>
>   "id" : 1509646291,
>
>   "description" : "CAS dashboard and administrative endpoints",
>
>   "evaluationOrder" : 5000
>
> }
>
>  
>
>
> On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote: 
>
> Do you have an entry in the service registry that matches the service? 
>
>  
>
> {
>
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>
>   "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
>
>   "name" : "CAS Admin Dashboard",
>
>   "id" : 123456789,
>
>   "description" : "CAS dashboard and administrative endpoints",
>
>   "evaluationOrder" : 12345
>
> }
>
>  
>
> Or something like that.
>
>
> --Dave
>
>  
>
>
> --
>
> *DAVID A. CURRY, CISSP*
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 
> <https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
> +1 212 229-5300 x4728 • david...@newschool.edu 
>
> [image: The New School]
>
>  
>
> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu <annih...@gmail.com> wrote:
>
> Hello, 
>
>  
>
> I'm trying to enable access to the Dashboard with the default 
> casuser:Mellon account but I'm running into an Application Not Authorized 
> to Use CAS

RE: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-20 Thread Cheltenham, Chris
Hello Everyone,



I am getting access denied on the /cas-management

It appears CAS 5 is a bit different from 4



Does anyone know why I am getting access denied to the management stuff?







===

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

From: cas-user@apereo.org [mailto:cas-user@apereo.org] On Behalf Of David 
Curry
Sent: Tuesday, February 20, 2018 8:48 AM
To: cas-user@apereo.org
Subject: Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use 
CAS



Assuming "the services directory" means you're trying to use an external 
directory full of JSON service definitions, do you have





org.apereo.cas

cas-server-support-json-service-registry

${cas.version}





in your pom.xml and



cas.serviceRegistry.json.location:file:/etc/cas/services



(whatever directory path you want) in cas.properties?



--Dave






--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 •  <mailto:david.cu...@newschool.edu> 
david.cu...@newschool.edu

  <http://www.newschool.edu/marketing-communication/img/tns-sig-logo.jpg>



On Tue, Feb 20, 2018 at 8:41 AM, Kevin Liu <annihil8...@gmail.com 
<mailto:annihil8...@gmail.com> > wrote:

I've added and it looks like CAS is just not picking up on any of the 
services directory. It doesn't show as registering the service.



On Monday, February 19, 2018 at 12:55:18 PM UTC-6, rbon wrote:

Put these into the log config to verify that the services you want are 
correct:





















Ray



On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote:

I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard

On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:

Kevin,



What is the URL that you are trying to access?



Ray



On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:

This is my current entry in service registry



{

  "@class" : "org.apereo.cas.services.RegexRegisteredService",

  "serviceId" : "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.* 
 )",

  "name" : "CAS Admin Dashboard",

  "id" : 1509646291,

  "description" : "CAS dashboard and administrative endpoints",

  "evaluationOrder" : 5000

}




On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:

Do you have an entry in the service registry that matches the service?



{

  "@class" : "org.apereo.cas.services.RegexRegisteredService",

  "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*) 
<https://xxx.xxx.xxx.xxx/cas1/status/dashboard(%5C%5Cz%7C/.*)> ",

  "name" : "CAS Admin Dashboard",

  "id" : 123456789,

  "description" : "CAS dashboard and administrative endpoints",

  "evaluationOrder" : 12345

}



Or something like that.


--Dave






--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003 
<https://maps.google.com/?q=71+FIFTH+AVE.,+9TH+FL.,+NEW+YORK,+NY+10003=gmail=g>
+1 212 229-5300 x4728 • david.cu...@newschool.edu 
<mailto:david.cu...@newschool.edu>

  <http://www.newschool.edu/marketing-communication/img/tns-sig-logo.jpg>



On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu <annih...@gmail.com 
<mailto:annih...@gmail.com> > wrote:



Hello,



I'm trying to enable access to the Dashboard with the default casuser:Mellon 
account but I'm running into an Application Not Authorized to Use CAS. This 
is my cas.properties file. I can't figure out what I'm missing? Looking 
online, it seems I need a registry of some sort but I can't find additional 
documentation on it.





cas.server.name <http://cas.server.name> : https://xxx.xxx.xxx.xxx

cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1



logging.config: file:/etc/cas1/config/log4j2.xml



endpoints.enabled=true

endpoints.sensitive=false

cas.adminPagesSecurity.ip=192.168.x.xx

cas.monitor.endpoints.enable=true

cas.monitor.endpoints.sensitive=false

cas.adminPagesSecurity.actuatorEndpointsEnabled=true





cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login

cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard

cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties

cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN



Am I missing anything?

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups 
"CAS Community" 

Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-20 Thread David Curry
Assuming "the services directory" means you're trying to use an external
directory full of JSON service definitions, do you have


org.apereo.cas
cas-server-support-json-service-registry
${cas.version}


in your pom.xml and

cas.serviceRegistry.json.location:file:/etc/cas/services


(whatever directory path you want) in cas.properties?

--Dave


--

DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

[image: The New School]

On Tue, Feb 20, 2018 at 8:41 AM, Kevin Liu  wrote:

> I've added and it looks like CAS is just not picking up on any of the
> services directory. It doesn't show as registering the service.
>
>
> On Monday, February 19, 2018 at 12:55:18 PM UTC-6, rbon wrote:
>
>> Put these into the log config to verify that the services you want are
>> correct:
>>
>> 
>> > level="debug" />
>>
>> 
>> > name="org.apereo.cas.services.AbstractServiceRegistryDao"
>> level="debug"/>
>>
>> 
>> > name="org.apereo.cas.DefaultCentralAuthenticationService"
>> level="debug" />
>>
>> Ray
>>
>> On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote:
>>
>> I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard
>>
>> On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:
>>
>> Kevin,
>>
>> What is the URL that you are trying to access?
>>
>> Ray
>>
>> On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
>>
>> This is my current entry in service registry
>>
>> {
>>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>>   "serviceId" : "^https://xxx.xxx.xxx.xxx:
>> /cas1/status/dashboard(\\z|/.*)",
>>   "name" : "CAS Admin Dashboard",
>>   "id" : 1509646291,
>>   "description" : "CAS dashboard and administrative endpoints",
>>   "evaluationOrder" : 5000
>> }
>>
>>
>> On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:
>>
>> Do you have an entry in the service registry that matches the service?
>>
>> {
>>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>>   "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)
>> ",
>>   "name" : "CAS Admin Dashboard",
>>   "id" : 123456789,
>>   "description" : "CAS dashboard and administrative endpoints",
>>   "evaluationOrder" : 12345
>> }
>>
>> Or something like that.
>>
>> --Dave
>>
>>
>> --
>>
>> DAVID A. CURRY, CISSP
>> *DIRECTOR OF INFORMATION SECURITY*
>> INFORMATION TECHNOLOGY
>>
>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>> 
>> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>>
>> [image: The New School]
>>
>> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  wrote:
>>
>> Hello,
>>
>> I'm trying to enable access to the Dashboard with the default
>> casuser:Mellon account but I'm running into an Application Not Authorized
>> to Use CAS. This is my cas.properties file. I can't figure out what I'm
>> missing? Looking online, it seems I need a registry of some sort but I
>> can't find additional documentation on it.
>>
>>
>> cas.server.name: https://xxx.xxx.xxx.xxx
>> cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1
>>
>> logging.config: file:/etc/cas1/config/log4j2.xml
>>
>> endpoints.enabled=true
>> endpoints.sensitive=false
>> cas.adminPagesSecurity.ip=192.168.x.xx
>> cas.monitor.endpoints.enable=true
>> cas.monitor.endpoints.sensitive=false
>> cas.adminPagesSecurity.actuatorEndpointsEnabled=true
>>
>>
>> cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
>> cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
>> cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
>> cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN
>>
>> Am I missing anything?
>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+u...@apereo.org.
>> To view this discussion on the web visit https://groups.google.com/a/ap
>> ereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a3063513
>> 83%40apereo.org
>> 
>> .
>>
>>
>>
>> --
>> Ray Bon
>> Programmer analyst
>> Development Services, University Systems
>> 2507218831 | CLE 019 | rb...@uvic.ca
>>
>>
>> --
>> Ray Bon
>> Programmer analyst
>> Development Services, University Systems
>> 2507218831 | CLE 019 | rb...@uvic.ca
>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: 

Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-19 Thread Ray Bon
Put these into the log config to verify that the services you want are correct:










Ray

On Mon, 2018-02-19 at 09:24 -0800, Kevin Liu wrote:
I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard

On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:
Kevin,

What is the URL that you are trying to access?

Ray

On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
This is my current entry in service registry

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 1509646291,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 5000
}


On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:
Do you have an entry in the service registry that matches the service?

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : 
"^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 123456789,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 12345
}

Or something like that.

--Dave



--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

[The New School]

On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  wrote:
Hello,

I'm trying to enable access to the Dashboard with the default casuser:Mellon 
account but I'm running into an Application Not Authorized to Use CAS. This is 
my cas.properties file. I can't figure out what I'm missing? Looking online, it 
seems I need a registry of some sort but I can't find additional documentation 
on it.


cas.server.name: https://xxx.xxx.xxx.xxx
cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1

logging.config: file:/etc/cas1/config/log4j2.xml

endpoints.enabled=true
endpoints.sensitive=false
cas.adminPagesSecurity.ip=192.168.x.xx
cas.monitor.endpoints.enable=true
cas.monitor.endpoints.sensitive=false
cas.adminPagesSecurity.actuatorEndpointsEnabled=true


cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN

Am I missing anything?

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+u...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org.




--
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | rb...@uvic.ca


--
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1519066505.1765.11.camel%40uvic.ca.


Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-19 Thread Kevin Liu
I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard

On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:
>
> Kevin,
>
> What is the URL that you are trying to access?
>
> Ray
>
> On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
>
> This is my current entry in service registry
>
> {
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>   "serviceId" : 
> "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.*)",
>   "name" : "CAS Admin Dashboard",
>   "id" : 1509646291,
>   "description" : "CAS dashboard and administrative endpoints",
>   "evaluationOrder" : 5000
> }
>
>
> On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote: 
>
> Do you have an entry in the service registry that matches the service? 
>
> {
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>   "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
>   "name" : "CAS Admin Dashboard",
>   "id" : 123456789,
>   "description" : "CAS dashboard and administrative endpoints",
>   "evaluationOrder" : 12345
> }
>
> Or something like that.
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  wrote:
>
> Hello, 
>
> I'm trying to enable access to the Dashboard with the default 
> casuser:Mellon account but I'm running into an Application Not Authorized 
> to Use CAS. This is my cas.properties file. I can't figure out what I'm 
> missing? Looking online, it seems I need a registry of some sort but I 
> can't find additional documentation on it.
>
>
> cas.server.name: https://xxx.xxx.xxx.xxx
> cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1
>
> logging.config: file:/etc/cas1/config/log4j2.xml
>
> endpoints.enabled=true
> endpoints.sensitive=false
> cas.adminPagesSecurity.ip=192.168.x.xx
> cas.monitor.endpoints.enable=true
> cas.monitor.endpoints.sensitive=false
> cas.adminPagesSecurity.actuatorEndpointsEnabled=true
>
>
> cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
> cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
> cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
> cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN
>
> Am I missing anything?
>
> -- 
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> --- 
> You received this message because you are subscribed to the Google Groups 
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to cas-user+u...@apereo.org.
> To view this discussion on the web visit 
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org
>  
> 
> .
>
>
>
> -- 
> Ray Bon
> Programmer analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | rb...@uvic.ca 
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/a0a7b8de-7fbb-4d2f-9d17-0bc5a5ee19db%40apereo.org.


Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-19 Thread Kevin Liu
I'm trying to access https://xxx.xxx.xxx.xxx:/cas1/status/dashboard

On Monday, February 19, 2018 at 11:01:33 AM UTC-6, rbon wrote:
>
> Kevin,
>
> What is the URL that you are trying to access?
>
> Ray
>
> On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
>
> This is my current entry in service registry
>
> {
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>   "serviceId" : 
> "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.*)",
>   "name" : "CAS Admin Dashboard",
>   "id" : 1509646291,
>   "description" : "CAS dashboard and administrative endpoints",
>   "evaluationOrder" : 5000
> }
>
>
> On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote: 
>
> Do you have an entry in the service registry that matches the service? 
>
> {
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>   "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
>   "name" : "CAS Admin Dashboard",
>   "id" : 123456789,
>   "description" : "CAS dashboard and administrative endpoints",
>   "evaluationOrder" : 12345
> }
>
> Or something like that.
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  wrote:
>
> Hello, 
>
> I'm trying to enable access to the Dashboard with the default 
> casuser:Mellon account but I'm running into an Application Not Authorized 
> to Use CAS. This is my cas.properties file. I can't figure out what I'm 
> missing? Looking online, it seems I need a registry of some sort but I 
> can't find additional documentation on it.
>
>
> cas.server.name: https://xxx.xxx.xxx.xxx
> cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1
>
> logging.config: file:/etc/cas1/config/log4j2.xml
>
> endpoints.enabled=true
> endpoints.sensitive=false
> cas.adminPagesSecurity.ip=192.168.x.xx
> cas.monitor.endpoints.enable=true
> cas.monitor.endpoints.sensitive=false
> cas.adminPagesSecurity.actuatorEndpointsEnabled=true
>
>
> cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
> cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
> cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
> cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN
>
> Am I missing anything?
>
> -- 
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> --- 
> You received this message because you are subscribed to the Google Groups 
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to cas-user+u...@apereo.org.
> To view this discussion on the web visit 
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org
>  
> 
> .
>
>
>
> -- 
> Ray Bon
> Programmer analyst
> Development Services, University Systems
> 2507218831 | CLE 019 | rb...@uvic.ca 
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1b9edf64-1aa6-4411-8d4a-5be2ffc37b95%40apereo.org.


Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-19 Thread Ray Bon
Kevin,

What is the URL that you are trying to access?

Ray

On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
This is my current entry in service registry

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : "^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 1509646291,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 5000
}


On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:
Do you have an entry in the service registry that matches the service?

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : 
"^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 123456789,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 12345
}

Or something like that.

--Dave



--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

[The New School]

On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  
wrote:
Hello,

I'm trying to enable access to the Dashboard with the default casuser:Mellon 
account but I'm running into an Application Not Authorized to Use CAS. This is 
my cas.properties file. I can't figure out what I'm missing? Looking online, it 
seems I need a registry of some sort but I can't find additional documentation 
on it.


cas.server.name: https://xxx.xxx.xxx.xxx
cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1

logging.config: file:/etc/cas1/config/log4j2.xml

endpoints.enabled=true
endpoints.sensitive=false
cas.adminPagesSecurity.ip=192.168.x.xx
cas.monitor.endpoints.enable=true
cas.monitor.endpoints.sensitive=false
cas.adminPagesSecurity.actuatorEndpointsEnabled=true


cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN

Am I missing anything?

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+u...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org.




--
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1519059678.1765.2.camel%40uvic.ca.


Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-19 Thread Kevin Liu
This is my current entry in service registry

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : 
"^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 1509646291,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 5000
}


On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:
>
> Do you have an entry in the service registry that matches the service?
>
> {
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>   "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
>   "name" : "CAS Admin Dashboard",
>   "id" : 123456789,
>   "description" : "CAS dashboard and administrative endpoints",
>   "evaluationOrder" : 12345
> }
>
> Or something like that.
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu 
>
> [image: The New School]
>
> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  > wrote:
>
>> Hello,
>>
>> I'm trying to enable access to the Dashboard with the default 
>> casuser:Mellon account but I'm running into an Application Not Authorized 
>> to Use CAS. This is my cas.properties file. I can't figure out what I'm 
>> missing? Looking online, it seems I need a registry of some sort but I 
>> can't find additional documentation on it.
>>
>>
>> cas.server.name: https://xxx.xxx.xxx.xxx
>> cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1
>>
>> logging.config: file:/etc/cas1/config/log4j2.xml
>>
>> endpoints.enabled=true
>> endpoints.sensitive=false
>> cas.adminPagesSecurity.ip=192.168.x.xx
>> cas.monitor.endpoints.enable=true
>> cas.monitor.endpoints.sensitive=false
>> cas.adminPagesSecurity.actuatorEndpointsEnabled=true
>>
>>
>> cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
>> cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
>> cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
>> cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN
>>
>> Am I missing anything?
>>
>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-user+u...@apereo.org .
>> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org
>>  
>> 
>> .
>>
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/7f2527be-1873-4ec6-971d-7f9db848ee7b%40apereo.org.


Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-19 Thread Kevin Liu
This is my current entry in service registry

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : 
"^https://xxx.xxx.xxx.xxx:/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 1509646291,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 5000
}


On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:
>
> Do you have an entry in the service registry that matches the service?
>
> {
>   "@class" : "org.apereo.cas.services.RegexRegisteredService",
>   "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
>   "name" : "CAS Admin Dashboard",
>   "id" : 123456789,
>   "description" : "CAS dashboard and administrative endpoints",
>   "evaluationOrder" : 12345
> }
>
> Or something like that.
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu 
>
> [image: The New School]
>
> On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  > wrote:
>
>> Hello,
>>
>> I'm trying to enable access to the Dashboard with the default 
>> casuser:Mellon account but I'm running into an Application Not Authorized 
>> to Use CAS. This is my cas.properties file. I can't figure out what I'm 
>> missing? Looking online, it seems I need a registry of some sort but I 
>> can't find additional documentation on it.
>>
>>
>> cas.server.name: https://xxx.xxx.xxx.xxx
>> cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1
>>
>> logging.config: file:/etc/cas1/config/log4j2.xml
>>
>> endpoints.enabled=true
>> endpoints.sensitive=false
>> cas.adminPagesSecurity.ip=192.168.x.xx
>> cas.monitor.endpoints.enable=true
>> cas.monitor.endpoints.sensitive=false
>> cas.adminPagesSecurity.actuatorEndpointsEnabled=true
>>
>>
>> cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
>> cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
>> cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
>> cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN
>>
>> Am I missing anything?
>>
>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-user+u...@apereo.org .
>> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org
>>  
>> 
>> .
>>
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/0ab85859-d439-4f3a-ae7e-489ffd4212dd%40apereo.org.


Re: [cas-user] [5.2] Dashboard - Application Not Authorized to Use CAS

2018-02-19 Thread David Curry
Do you have an entry in the service registry that matches the service?

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : "^https://xxx.xxx.xxx.xxx/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 123456789,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 12345
}

Or something like that.

--Dave


--

DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

[image: The New School]

On Mon, Feb 19, 2018 at 9:33 AM, Kevin Liu  wrote:

> Hello,
>
> I'm trying to enable access to the Dashboard with the default
> casuser:Mellon account but I'm running into an Application Not Authorized
> to Use CAS. This is my cas.properties file. I can't figure out what I'm
> missing? Looking online, it seems I need a registry of some sort but I
> can't find additional documentation on it.
>
>
> cas.server.name: https://xxx.xxx.xxx.xxx
> cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1
>
> logging.config: file:/etc/cas1/config/log4j2.xml
>
> endpoints.enabled=true
> endpoints.sensitive=false
> cas.adminPagesSecurity.ip=192.168.x.xx
> cas.monitor.endpoints.enable=true
> cas.monitor.endpoints.sensitive=false
> cas.adminPagesSecurity.actuatorEndpointsEnabled=true
>
>
> cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
> cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
> cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
> cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN
>
> Am I missing anything?
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit https://groups.google.com/a/
> apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-
> 45a306351383%40apereo.org
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XANkm74auALZ_iS9cp6aQBZ%3D3EHL0-NC62s8jfdjmj9wYQ%40mail.gmail.com.