Re: [uportal-dev] issues with latest uP3 from trunk

[Eric Dalquist]

Tuyhang Ly wrote:

Hi,

I just want to follow up with the following items:

          browser.mappings:

- What is the final decision on whether or not to set a default profile id or continue to allow user to select their browser profile? I believe we had decided on adding a catch-all mapping at the end of the file. Did that get missed?

I thought so too that we had decided on adding a catch-all mapping at the end of the file, but it's not there. Do you need a jira for this one?

I can dig through jira and find the relevant issue.

    Cache security context:

    CacheSecurityContextFactory is only applicable for chaining with
    SimpleSecurityContextFactory.  Do we have any available
    implementation for caching the password with
    CasFilteredSecurityContext?

    I don't think the portal can cache the CAS password since it
    never sees the password.

Yes, it's true that there's no way to cache the password since the portal never sees it. We have however added a CAS proxy UserInfo service that allows portlets to get proxy tickets from the portal. They can then use these tickets to request proxy tickets for other CAS-protected services.

We need to cache the password for authentication with services that have not yet CAS-protected. Currently, in cas-client 2.2.0-M*, the CASReceipt is stored in the session which I don't think it's necessary. Instead, I think the CasFilteredSecurityContext should provide a method to access its private CASReceipt. I've created http://www.ja-sig.org/issues/browse/UP-2004 with the following requests so we can extend the CasFilteredSecurityContext class for our caching credentials implementation:

- change CasFilteredSecurityContext() contructor from private to protected

- provide getReceipt() method. This is needed to avoid changing uPortal code and maintaining it locally. Is it reasonable to be included in this release?

This seems like a reasonable change to me, other folks have any thoughts?

-Eric

Thanks,
Tuy.

--

Join your friends and colleagues at JA-SIG 2008 - "Higher Education Solutions: The Community Source Way!" April 27th - 30th, 2008 in St. Paul, Minnesota USA Featuring CAS, DSpace, Fedora, Fluid, Internet2, Kuali, Sakai, uPortal, and more! Information/Registration at: http://www.ja-sig.org/conferences/08spring/index.html

Subscribe to the conference blog, The Community Source Way http://jasig2008.blogspot.com <http://jasig2008.blogspot.com/>, for news and updates about the event.

Join the Conference networking site at http://ja-sigspring08.crowdvine.com/

You are currently subscribed to uportal-dev@lists.ja-sig.org as: [EMAIL 
PROTECTED]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/uportal-dev

smime.p7s
Description: S/MIME Cryptographic Signature