Anthony, Catching up on old email - been trying to get a thread on this topic (CAS Clearpass) going on cas-user (primarily) & cas-dev that Jonathan, Dan B, have chimed in on if you're interested.
Jason On 5/21/09 7:27 PM, "Anthony Colebourne" <[email protected]> wrote: Hi, +1 support for this. While at the conference in Dallas, I discussed with many people about the CAS ClearPass code. I spoke mainly about the longevity of this codebase, many people were in support of getting this code to a level where it would be maintained across such changes. Would such a change impact on this code? A feature where password were encrypted at the CAS end before being transfered into the portal session as pre-encrypted could benefit this code. http://www.ja-sig.org/wiki/display/CAS/Proxying+clear-text+credentials Thanks, Anthony. Jen Bourey wrote: > Hi all, > > I wanted to propose contributing some uPortal enhancements on behalf of > the University of Chicago. The enhancements improve the existing > CachePasswordSecurityContext to encrypt the password with a > Spring-configurable encryption service before storing it in the > session. We've also updated the CachedPasswordUserInfoService to > configurably either decrypt the cached password before adding it to a > portlet's UserInfoMap, or to pass it through in its encrypted form. > These changes are intended to preserve the ability of uPortal to > potentially cache user passwords, while ensuring that any passwords > present in the user session are encrypted. > > Is this a change that we could contribute to the uPortal 3.2-oriented trunk? > > - Jen > > > -- > Jen Bourey > > -- > > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/uportal-dev -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev -- Jason Shao Director of Product Development CampusEAI Consortium 1940 East 6th Street, 11th Floor Cleveland, OH 44114 Tel: 216.589.9626x249 Fax: 216.589.9639 ________________________________ Your input is important to improve upon our continuous efforts to service you better. Please e-mail my manager at [email protected] with any feedback. CONFIDENTIALITY NOTICE: This e-mail together with any attachments is proprietary and confidential; intended for only the recipient(s) named above and may contain information that is privileged. You should not retain, copy or use this e-mail or any attachments for any purpose, or disclose all or any part of the contents to any person. Any views or opinions expressed in this e-mail are those of the author and do not represent those of CampusEAI Consortium or the Open Student Television Network. If you have received this e-mail in error, or are not the named recipient(s), you are hereby notified that any review, dissemination, distribution or copying of this communication is prohibited by the sender and to do so might constitute a violation of the Electronic Communications Privacy Act, 18 U.S.C. section 2510-2521. Please immediately notify the sender and delete this e-mail and any attachments from your computer. Warning: Although precautions have been taken to make sure no viruses are present in this e-mail, the companies cannot accept responsibility for any loss or damage that arise from the use of this e-mail or attachments. -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/uportal-dev
