Hi, I just want to follow up with the following items: > > > browser.mappings: > > > - What is the final decision on whether or not to set a default > profile id or continue to allow user to select their browser profile? > I believe we had decided on adding a catch-all mapping at the end of > the file. Did that get missed? I thought so too that we had decided on adding a catch-all mapping at the end of the file, but it's not there. Do you need a jira for this one?
> > > > Cache security context: >> CacheSecurityContextFactory is only applicable for chaining with >> SimpleSecurityContextFactory. Do we have any available >> implementation for caching the password with >> CasFilteredSecurityContext? > I don't think the portal can cache the CAS password since it never > sees the password. > > > > Yes, it's true that there's no way to cache the password since the > portal never sees it. We have however added a CAS proxy UserInfo > service that allows portlets to get proxy tickets from the portal. > They can then use these tickets to request proxy tickets for other > CAS-protected services. We need to cache the password for authentication with services that have not yet CAS-protected. Currently, in cas-client 2.2.0-M*, the CASReceipt is stored in the session which I don't think it's necessary. Instead, I think the CasFilteredSecurityContext should provide a method to access its private CASReceipt. I've created http://www.ja-sig.org/issues/browse/UP-2004 with the following requests so we can extend the CasFilteredSecurityContext class for our caching credentials implementation: - change CasFilteredSecurityContext() contructor from private to protected - provide getReceipt() method. This is needed to avoid changing uPortal code and maintaining it locally. Is it reasonable to be included in this release? Thanks, Tuy. -- Join your friends and colleagues at JA-SIG 2008 - "Higher Education Solutions: The Community Source Way!" April 27th - 30th, 2008 in St. Paul, Minnesota USA Featuring CAS, DSpace, Fedora, Fluid, Internet2, Kuali, Sakai, uPortal, and more! Information/Registration at: http://www.ja-sig.org/conferences/08spring/index.html Subscribe to the conference blog, The Community Source Way http://jasig2008.blogspot.com, for news and updates about the event. Join the Conference networking site at http://ja-sigspring08.crowdvine.com/ You are currently subscribed to [email protected] as: [EMAIL PROTECTED] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev
