CAS 1 « Security « Spring Q&A





1. Spring Security & CAS - Viewing secured page without login in    stackoverflow.com

I have a webapp that uses Spring Security and SSO with CAS. There's also another webapp (in Classic ASP) that connect to CAS. And this situation happens sometimes: Logged in to Java ...

2. How to access/use custom attribute in spring security based CAS client    stackoverflow.com

I need send certain attributes(say, human readable user name) from server to client after a successful authentication. Server part was done. Now attribute was sent to client. From log, I can ...

3. Implement SSO using CAS + Spring Security    stackoverflow.com

I'm trying to implement SSO across several web applications using CAS and Spring Security. Expected case:
CAS - http:// localhost:8080/cas/
App A protected content - http: //localhost:8081/cas-client1/secure/index.html
App B protected content - http: //localhost:8081/cas-client2/secure/index.html
1) ...

4. how to create spring cas login link    stackoverflow.com

I have Spring Security 3.0.3 with CAS. Some of my conf follows:

<security:http entry-point-ref="casAuthenticationEntryPoint" auto-config="true" >
    <security:intercept-url pattern="/*/secure/**" access="ROLE_USER" />
    <security:custom-filter position="CAS_FILTER" ref="casAuthenticationFilter" />
   ...

5. Cas authentication and database authorizing    stackoverflow.com

I've googled around to get started from stracht in this new thing to me.Is it possible to authenticate user with cas and then give roles from own database? I'm using Spring ...

6. Spring security not correctly redirecting to CAS login when CAS session times out    stackoverflow.com

We have an issue when a user's CAS session times out on our spring java web application. Instead of actually redirecting to the CAS server login screen, it stays on whatever ...

7. How to correctly set the service URL in Spring's CAS service properties    stackoverflow.com

When working with Spring Security + CAS I keep hitting a small road block with the callback URL that is sent to CAS, ie the service property. I've looked at a ...

8. Spring Security and CAS logout redirecting problem    stackoverflow.com

I need to implement Sign Sign Out in Java using Spring Security. What CAS needs from my application is to access https://www.home.com/cas/logout.cfm?service=myService&redirect=http://encoded.url.of.my.site I put this URL to LogoutFilter's constructor ...

9. Integration testing of a CAS secured web service    stackoverflow.com

I have a web service that accepts CAS proxy tickets over HTTP Basic authentication headers via Spring Security. How do I perform integration testing with my client since there seems to ...





10. TGT expiring if we are using app1 and not using other    stackoverflow.com

we have a question about ticket-granting tickets expiration policy. We are using cas authentication. The TGT expires after 2 hours whereas java session exiperes after 30 minutes.Our problem is that if ...

11. Tomcat weird behaviour with Spring security CAS client    stackoverflow.com

I have have been developing a Spring web application with Single Sign On enabled through Spring Security and Ja-sig CAS Client. We already have a CAS portal that authenticates users, What ...

12. Spring Security CAS Client login through URL    stackoverflow.com

Is there a way to be authenticated in a Spring Security application(with Spring MVC) that uses CAS client by only passing credentials through url? I have a working Spring MVC application ...

13. CAS Auto login after signup, with Spring security    stackoverflow.com

I have an application that uses Spring Security and CAS authentication. How do I enable auto-login after signup, This provides the information I need but I am confused as to ...

14. Spring Security Authenticate multiple apps with an external one    stackoverflow.com

I'm trying to make a central point of authentication. The goal is to have N spring security apps that use the same external application to login/logout. Now I managed to do that, using ...

15. Restore original POST req, after CAS authentication?    stackoverflow.com

I have json-rpc service acceptint http POST-req only and would like it to use CAS SSO auth. The current request flow looks roughly like this:

POST host/service/  -> 302 redirect 
GET host/cas/login?service=https%3A%2F%2Fhost%2Fservice%2F ...

16. Spring3 with Security and CAS    stackoverflow.com

I am trying to use Spring3 with Security and CAS. I am getting the following error. Reason: No AuthenticationProvider found for org.springframework.security.authentication.UsernamePasswordAuthenticationToken Can someone please tell me why? below is ...





17. How to lockdown grails spring security / cas application?    stackoverflow.com

I've tried the standard Config setting

grails.plugins.springsecurity.rejectIfNoRule = true
but this results in a redirect loop. I've also tried
grails.plugins.springsecurity.interceptUrlMap = [
        '**':   ...

18. How to show logged in user details on non-secured JSP page after login via Spring Security and CAS?    stackoverflow.com

I have a simple web app example. Some unsecured pages and some secured pages. Login is via Spring Security and CAS. Application is mostly working OK - users get ...

19. CAS and Spring-ws security    forum.springsource.org

20. cas, spring security, proxy authentication    forum.springsource.org

Feb 1st, 2011, 08:15 PM #1 bolin View Profile View Forum Posts Private Message Junior Member Join Date Feb 2011 Posts 3 cas, spring security, proxy authentication Hello, I am trying ...

21. Allow access to anonymous page with CAS authentication first in spring CAS sample app    forum.springsource.org

Allow access to anonymous page with CAS authentication first in spring CAS sample app In the sample app here: http://static.springsource.org/sprin...tml#cas-sample the role based access is configured using the following bean: Code: ...

22. spring security, spring remoting, cas proxy authentication    forum.springsource.org

Feb 28th, 2011, 02:02 AM #1 piotrj View Profile View Forum Posts Private Message Junior Member Join Date Feb 2011 Posts 11 spring security, spring remoting, cas proxy authentication Hello all, ...

23. How to integrate CAS + Spring Security + Spring Integration    forum.springsource.org

How to integrate CAS + Spring Security + Spring Integration Hello, I consider following architecture: web application running on Tomcat 6, users are authenticated and authorized through Spring Security 3 and ...

24. How to integrate CAS + Spring Security + Spring Integration    forum.springsource.org

How to integrate CAS + Spring Security + Spring Integration [This thread was moved from Spring Security Forum] Hello, I consider following architecture: web application running on Tomcat 6, users are ...

25. How to query LDAP to get user's LDAP profile after CAS+LDAP authentication?    forum.springsource.org

How to query LDAP to get user's LDAP profile after CAS+LDAP authentication? I am very much new to spring and spring-security. I am modifying an existing application which uses form based ...

26. How to secure web services using cas?    forum.springsource.org

Hi, I would like to use Cjasig CAS to secure webservices. I have done cas configuration. I can secure web application, but I don't know how to secure web services. Can ...

27. Access web services using Spring protected by jasig CAS    forum.springsource.org

I have a web service that is protected by jasig CAS. I need to pass a ticket as a parameter along with the execution of the web service. Is there an ...

28. How to handle Authorization when Authentication is performed by CAS?    forum.springsource.org

Hi, I am trying to have spring security 3.0.5 to handle authorization in a set of web applications in a SSO. Authentication is performed by CAS 3.4.8 using a JDBC AuthenticationHandler. ...

29. Spring Security + CAS get attributes from CAS.    forum.springsource.org

All the examples of CAS and spring security I have found so far show using CAS for authentication only. I need to use CAS for authentication and authorization via the attribute ...

30. About Spring Security 3.0.5 CAS Client    forum.springsource.org

31. Dynamic Service URL with spring-security-cas    forum.springsource.org

Any suggestions on how to dynamically create the serviceUrl (set in ServiceProperties) when using spring-security-cas? The application I'm working on has multiple localized domains (www.domain.ca, www.domain.co.uk) so hardcoding the service url ...

32. New authentication to existing CAS    forum.springsource.org

New authentication to existing CAS Currently I have the http's entry-point-ref pointing to a CAS entry point. I want add a separate login page which authenticates against a local db authentication ...

33. Setting up Acegi + CAS + Kerberos    forum.springsource.org

Setting up Acegi + CAS + Kerberos My company uses Kerberos servers for Unix and Windows authentication. I want to set up CAS using Acegi and Spring for a single sign ...

34. CAS & acegi goes into infinite loop    forum.springsource.org

My request gets redirected to CAS upon accessing this page . http://localhost:8080/tash After sucessful authentication with CAS I get redirected to this page. http://localhost:8080/tash/j_acegi_c...io6wUabvAZwUT8 But if Proceed with it . I ...

35. Acegi Integration with CAS and Active Directory    forum.springsource.org

Acegi Integration with CAS and Active Directory Hi, I am trying to integrate acegi framework with CAS server. I am storing all username and passwords in the Active Directory and have ...

36. ACEGI 0.8.2 and CAS 3.0    forum.springsource.org

ACEGI 0.8.2 and CAS 3.0 Hi, I only wish to secure a webapp with ACEGI and CAS 3.0. I really need CAS 3.0 because of its fail-over capabilities. While setting up ...

37. CAS SERVER + ACEGI CAS CLIENT???? anybody has any idea?    forum.springsource.org

Jun 24th, 2005, 07:52 PM #1 lazzha View Profile View Forum Posts Private Message Member Join Date Jun 2005 Location Puebla, Mxico Posts 32 CAS SERVER + ACEGI CAS CLIENT???? anybody ...

38. ACEGI + CAS under Apache web server    forum.springsource.org

Hi, While developping a webapp, I am using ACEGI and CAS to achieve authentication. The webapp runs on Tomcat 5.5 under an Apache 1.3 web server. Due to load issues, I ...

39. ACEGI 0.8.2 + CAS 3.0: Global logout and user refresh    forum.springsource.org

ACEGI 0.8.2 + CAS 3.0: Global logout and user refresh Hi, I use ACEGI and CAS to secure several webapps Being authenticaed in webapp A, I open a browser on webapp ...

40. Apache Reverse Proxy Server with CAS SSO (Acegi)    forum.springsource.org

Apache Reverse Proxy Server with CAS SSO (Acegi) Hello, I have successfully integrated Acegi with CAS server. Now, we are deploying the system that has Apache based reverse proxy server. The ...

41. Deep linking into CAS + acegi secured application    forum.springsource.org

My application needs to properly handle deep links when the user is logged into cas but not the application, but this is not working correctly. I can see where the AbstractProcessingFilter.ACEGI_SECURITY_TARGET_URL ...

42. acegi + CAS going in loop after login    forum.springsource.org

Sep 23rd, 2005, 04:52 PM #1 mcecca View Profile View Forum Posts Private Message Junior Member Join Date Sep 2005 Posts 13 acegi + CAS going in loop after login Hello, ...

43. CAS and Authorization    forum.springsource.org

As far as i knowthe CAS server-side can not back the authority for client. So my question is whether Acegi be able to get the AUTHORITY after CAS authentication From a ...

44. Acegi + Cas at serviceTimeout send me to... ??    forum.springsource.org

Hi, I have the acegi + cas working fine, but at te serviceTimeout (300 seconds) it's redirect me to a page with full code " " Whats may be happen? when ...

45. CAS 3.0.x and Acegi    forum.springsource.org

CAS 3.0.x and Acegi I was wondering if anyone has any experiences integrating a recent version of Acegi (0.8.3) with the CAS 3.0.x? I'm working on a SSO spike solution for ...

46. Authentication timeout (especially for CAS)    forum.springsource.org

Authentication timeout (especially for CAS) Hi, I have not found a way to make authentication tokens expire after some time. I use security at web application level, and if I understand ...

47. Acegi-CAS Listener along with Spring Listener    forum.springsource.org

Acegi-CAS Listener along with Spring Listener Dear all, We are working on a project in which we integrated Acegi and CAS together so that the client application will be directed to ...

48. cas without authorization?    forum.springsource.org

Is it possible to configure Acegi CAS so that you don't have to provide a list of user names, so if a user authenticates with CAS they're authorized for everything? I ...

49. UsernamePasswordAuthenticationToken usage in Acegi Cas    forum.springsource.org

UsernamePasswordAuthenticationToken usage in Acegi Cas I'm writing some code for Acegi for our local web proxy authentication service which is sort of like Cas but with fewer features (ours is called ...

50. CAS redirect after authentication    forum.springsource.org

CAS redirect after authentication When working on my acegi code for our local CAS-alike web authentication service I thought I'd missed something because after I got it written and was testing ...

51. beginning with acegi and CAS    forum.springsource.org

Feb 21st, 2006, 04:26 PM #2 lumpynose View Profile View Forum Posts Private Message Senior Member Join Date May 2005 Location California, US Posts 735 I don't know if this is ...

52. CAS and applicationContext-security.xml    forum.springsource.org

Hello I'm a newbie, I have installed CAS and tried the contacts-cas sample, it works fine. i want to create my own applicationContext-security.xml with my cas server but when i launch ...

53. authentication with more than one cas server    forum.springsource.org

SecurityEnforcementFilter does not exist in 1.0.0 RC2. So my first suggestion is to upgrade to the latest release. You'll probably need some sort of custom AuthenticationEntryPoint which knows whether to redirect ...

54. CAS & user caching    forum.springsource.org

CAS & user caching Hi. I successfully configured a Cas server and two webapps using acegi with the cas adapter. What I'm now trying to achieve is: I want the user ...

55. Problems with Acegi-CAS Integration on WebSphere 5.1.2    forum.springsource.org

Apr 14th, 2006, 12:53 PM #1 KenC View Profile View Forum Posts Private Message Junior Member Join Date Apr 2006 Posts 5 Problems with Acegi-CAS Integration on WebSphere 5.1.2 Hi everyone, ...

56. CAS and certificate    forum.springsource.org

I had cas and my application on the same tomcat before , and it worked well. Now i tried to put cas on another server, generate my certificate with the right ...

57. CAS authentication not working with acegi 1.0    forum.springsource.org

CAS authentication not working with acegi 1.0 CAS authentication was working for me with Acegi 1.0-RC2. When I upgrade to 1.0 I get the following exception: Your CAS credentials were rejected. ...

58. Acegi with CAS    forum.springsource.org

Acegi with CAS Hello, I have just started using Acegi with CAS. I am not able to configure it. I am getting this exception: Login to CAS failed! Your CAS credentials ...

59. Acegi with CAS Webservice    forum.springsource.org

Hello, I have a rich client which gets a ticket from CAS Webservice after passing valid username and password credentials. Now I have a Tomcat server which exposes my application webservices. ...

60. CAS ask me for authentication every time    forum.springsource.org

Jul 4th, 2006, 04:18 AM #1 qvark View Profile View Forum Posts Private Message Member Join Date Mar 2006 Location Spain Posts 41 CAS ask me for authentication every time Hi,this ...

61. CAS + Acegi on multiple virtual hosts    forum.springsource.org

CAS + Acegi on multiple virtual hosts I'm new at this so please bare with me. I'm trying to run an application that uses CAS + Acegi which seems to require ...

62. Acegi/CAS logoutfilter and cas redirect url    forum.springsource.org

Acegi/CAS logoutfilter and cas redirect url OK I have acegi and cas working nice together but using the logoutfilter as the cas-contacts sample apps does doesn't work. The cookie from the ...

63. CAS + Acegi Demo    forum.springsource.org

I am attempting to get the acegi-security-sample-tutorial to use CAS as its authentication provider. At this point I think I am about 90% there. I have modified the CAS deployerConfigContext.xml, tutorial ...

64. acegi + cas example?    forum.springsource.org

acegi + cas example? - CAS Server - Version 3.0.5 - Acegi 1.0.1 I have a CAS server integrated with LDAP (active directory) working correctly. The sample contact app is working, ...

65. Acegi w/ Cas across servers    forum.springsource.org

Acegi w/ Cas across servers With both cas and the acegified app running on the same box everything is cool. When pulling them apart on seperate hosts it seems like the ...

66. Acegi + CAS - Login - Load Test    forum.springsource.org

Acegi + CAS - Login - Load Test Hi everybody, This is an experience we just encountered recently and we like to share it with you and also ask for some ...

67. (Newbie) Using Acegi+CAS    forum.springsource.org

(Newbie) Using Acegi+CAS Hi, I have a working web app running on Weblogic 8.1. The security model implemented is using an LDAP server. I would like to use Acegi+CAS for SSO ...

68. is it possible to use CAS without SSL    forum.springsource.org

Hi All, First of all I apologize if this is a stupid question. Can somepne please let me know whether it is possible to integrate CAS in to a spring application ...

69. Acegi+CAS+LDAP vs. Acegi+LDAP    forum.springsource.org

Acegi+CAS+LDAP vs. Acegi+LDAP Hi, I'm about to take a stab at intituting Acegi security for my app. It's a MVC running on Tomcat. It will be the only app for this ...

70. Acegi with CAS    forum.springsource.org

Thank you . I have followed the instructions as in http://forum.springframework.org/showthread.php?t=12811 when I click on the protected url , I am sent to the CAS login page . I put in ...

71. configuration acegi and cas    forum.springsource.org

configuration acegi and cas Hi! I have problems to configure acegi to work with CAS. I can run them both separately but not together. I also cant find the war-file for ...

72. CAS without SSL    forum.springsource.org

The CAS Server has no SSL requirement (though if you are using proxying you need to reconfigure the CAS server). the CAS clients currently have a requirement that all CAS server ...

73. Acegi Security and CAS problem: Circular redirect (loop) after success login    forum.springsource.org

Dec 11th, 2006, 01:51 AM #1 JohnBat26 View Profile View Forum Posts Private Message Junior Member Join Date Jun 2005 Location Russia Posts 11 Acegi Security and CAS problem: Circular redirect ...

74. Exception Integrating Cas & Acegi    forum.springsource.org

Exception Integrating Cas & Acegi Hi, I am trying to do a hello world using cas and acegi using contacts. I am following this directions: http://forum.springframework.org/arc...p/t-12811.html I think that cas woks ...

75. Acegi Cas Integration Issue    forum.springsource.org

Jan 13th, 2007, 12:59 PM #1 bouayame View Profile View Forum Posts Private Message Junior Member Join Date Sep 2006 Posts 12 Acegi Cas Integration Issue Hello, We're using Spring and ...

76. Install CAS and ACEGI    forum.springsource.org

Try following the instructions in the posts below and you'll be fine. (I had my successful installation yesterday by reading those posts) http://forum.springframework.org/arc...p/t-12811.html http://forum.springframework.org/arc...p/t-25963.html The information there should be enough to ...

77. Problems Integrating Acegi and CAS    forum.springsource.org

Problems Integrating Acegi and CAS I am trying to integrate Acegi with the JA-SIG CAS 3.0 server. I managed to get the CAS server to run off my own authenticationManager by ...

78. ACEGI-CAS Redirect    forum.springsource.org

79. anyone tried cas+spnego+acegi with cas 3.1 m1 version    forum.springsource.org

What's nice about CAS is no matter what authentication method you use on the CAS side, Acegi is still configured the same. So, you can configure Acegi using the Acegi Reference ...

80. Acegi + CAS configuration problem    forum.springsource.org

Hi, I'm configured CAS server 3.1 M1 and my web application (with acegi 1.0.3) on different hosts. After submit credentials on CAS server the result is my application don't work and ...

81. Acegi failed to work with CAS    forum.springsource.org

Mar 29th, 2007, 02:12 AM #1 00000001 View Profile View Forum Posts Private Message Junior Member Join Date Mar 2007 Posts 2 Acegi failed to work with CAS Hello everybody, I ...

82. Acegi + Cas    forum.springsource.org

Acegi + Cas Hi, I develop an application which use ACEGI and a CAS server (version 3.0.6). The server CAS is ok, my application ACEGI is ok too (it's the example ...

83. CAS/Acegi oddity    forum.springsource.org

May 16th, 2007, 02:36 PM #1 Tsu Dho Nihm View Profile View Forum Posts Private Message Junior Member Join Date May 2007 Posts 8 CAS/Acegi oddity I've set up a very ...

84. ACEGI not Accepting CAS ticket    forum.springsource.org

May 17th, 2007, 04:58 PM #1 mike.ring View Profile View Forum Posts Private Message Junior Member Join Date May 2007 Posts 4 ACEGI not Accepting CAS ticket I am trying to ...

85. Calling getPrincipal() with CAS    forum.springsource.org

Calling getPrincipal() with CAS I've been playing with CAS and ACEGI today. I've managed to set things up so that CAS performs authentication (via the dao implementation I had been using ...

86. Acegi, CAS, and Websphere - Certificate not trusted exception    forum.springsource.org

Does anyone know how to configure Acegi and CAS to work with Websphere 6.0.1? I continue to get Certificate not trusted exception. I have spent quite some time searching documentation on ...

87. ACEGI CAS example.    forum.springsource.org

ACEGI CAS example. Hi All, I am trying out a simple use case which demonstrates integration between CAS 3.0 and ACEGI 1.0.4. Here is a brief overview of the setup: 1) ...

88. Roller Blog + Acegi + CAS    forum.springsource.org

Jun 3rd, 2007, 07:12 AM #1 anp View Profile View Forum Posts Private Message Junior Member Join Date Jun 2007 Posts 1 Roller Blog + Acegi + CAS Hi, I configured ...

89. Here is an example of Tapestry 5 + Acegi + CAS    forum.springsource.org

Here is an example of Tapestry 5 + Acegi + CAS Hello, I just did a toy application to see how Acegi Security works with CAS, and since Tapestry 5 is ...

90. Acegi Contacts example using CAS    forum.springsource.org

Jul 12th, 2007, 06:02 AM #1 Christiaan View Profile View Forum Posts Private Message Junior Member Join Date May 2006 Posts 13 Acegi Contacts example using CAS I am trying to ...

91. ACEGI, CAS, Spring-WS Integration    forum.springsource.org

ACEGI, CAS, Spring-WS Integration Hello, I am trying to integrate Spring web services, ACEGI, and CAS and I am looking for input on the different approaches available to me. For now, ...

92. ACEGI, CAS, Spring-WS Integration    forum.springsource.org

ACEGI, CAS, Spring-WS Integration I am posting this to both the ACEGI and Spring-WS forums since it wasn't clear to me which would be the better place to have the question ...

93. Acegi and CAS    forum.springsource.org

We currently have two applications that are secured using Acegi and CAS. After logging into Application A, it calls Application B as a service using Apache Commons HttpClient. How can we ...

94. acegi cas proxyticket problem    forum.springsource.org

acegi cas proxyticket problem I am trying to acquire a pgtIou and pgt pair for my application to achieve SSO for all of my applications using ACEGI and CAS. I first ...

95. Cas Acegi endless loops authentication.    forum.springsource.org

Aug 31st, 2007, 01:02 AM #1 Giang View Profile View Forum Posts Private Message Junior Member Join Date Aug 2007 Posts 6 Cas Acegi endless loops authentication. I've already spent a ...

96. Can't Get CAS to work with Acegi    forum.springsource.org

Sep 12th, 2007, 01:20 PM #1 cbryant View Profile View Forum Posts Private Message Junior Member Join Date Sep 2007 Posts 4 Can't Get CAS to work with Acegi Hello, I ...

97. Spring-acegi with CAS integration! Expert advice    forum.springsource.org

Sep 27th, 2007, 10:45 PM #1 gopu View Profile View Forum Posts Private Message Member Join Date Jul 2007 Posts 48 Spring-acegi with CAS integration! Expert advice I am facing the ...

98. Problem with multiple providers and ticket expiration on an ACEGI/CAS config    forum.springsource.org

Oct 29th, 2007, 07:35 AM #1 Aguillem View Profile View Forum Posts Private Message Junior Member Join Date Oct 2007 Posts 3 Problem with multiple providers and ticket expiration on an ...

99. ACEGI and CAS configuration    forum.springsource.org

Nov 6th, 2007, 02:18 AM #1 martique View Profile View Forum Posts Private Message Junior Member Join Date Jun 2007 Posts 25 ACEGI and CAS configuration Hi, I have problem with ...

100. wsse authentication by CAS Ticket    forum.springsource.org

I need to authenticate ws clients by a given users name and his current CAS ticket in the wsse header. I read some info in the spring guide that there is ...