apereo/cas

Apereo CAS - Single Sign On for All

eike

@eike:matrix.elwms.org

i scrolled now for 3 hours to understand the basics, but i don't get it, and it seems i need this project to use another usefull project named unitime, for production use... i know SAML/OAuth and LDAP a bit... but CAS seems to be a bit horrible, because there is no concrete how to path for it in the web?! Anyone can help by this?

and please dont mind the official documentation, as i explained i read it know for 3 hours and dont get anything to work, when possible i want to work with docker

mijutu

@mijutu:ellipsis.fi

[m]

I have been using cas for a while and tried shibboleth for the first time. It felt like saml+shibboleth was horrible and cas was nice and easy :-)

I suggest you create cas.war with the overlay method and add the thing that verifies users's passwords, for example add
implementation "org.apereo.cas:cas-server-support-ldap:${project.'cas.version'}"
to dependencies section of build.gradle

And also
implementation "org.apereo.cas:cas-server-support-json-service-registry:${casServerVersion}"
that makes setting up services easy.

Hmm, I'm not sure which is the correct way to set the version.

mijutu

@mijutu:ellipsis.fi

[m]

Then ./gradlew build and run build/libs/cas.war in jetty or tomcat.

Then you can add configuration in /etc/cas/config/cas.properties to connect to ldap. After that you should be able to log in to cas. Then add service registry jsons to /etc/cas/services/ to allow web apps to use cas for logging in users.

eike

@eike:matrix.elwms.org

[m]

yeah thanks as i played now with MS Ubuntu wsl, installed all tools, like sdk, gradle (Ubuntu have Not the right Version, all of this is completly undocumented on github), right jdk Version and so on. i know build the war sucessful myself and deploy it within an own scripted dockercontainer with tomcat. hopefully the documentation for configuration is better, because i will use a office365 saml with cas

thank your for now mijutu, i was a Little Bit outrage to come Hefe, Not fair, but the Plattform has to work After werkend for test/demo

mijutu

@mijutu:ellipsis.fi

[m]

So are you using cas as saml client that connects to office365?

eike

@eike:matrix.elwms.org

[m]

ich hasse autokorrektur am Handy ^^

mijutu

@mijutu:ellipsis.fi

[m]

saml sp, I meant

eike

@eike:matrix.elwms.org

[m]

ähm No, i thought the other way round, UniTime <- CAS <- office365 Logins... we have manly a azure/ad infrastructure for the Moment here

sorry for my german, but now i can write a little bit better, i was on my smartphone for a moment.. now i'm back on my pc

eike

@eike:matrix.elwms.org

[m]

thank you very much for your support mijutu i will promise to check your tips out

eike

@eike:matrix.elwms.org

[m]

hm, i complle now everything and no errors occured, but there are no *.war archiv in the bunch of jars, how do i get one?

why is there are in the documentation a reference to an war-overlay-mode but in the milestones it is not completed or no reference, but you told me that it is possible? how?

mijutu

@mijutu:ellipsis.fi

[m]

I took a git clone of the reference overlay project and ran ./gradlew build there

eike

@eike:matrix.elwms.org

[m]

so where is it?

yeah, i do the same.. https://github.com/apereo/cas but the template dir is empty (unless the readme.md) https://github.com/apereo/cas-overlay-template

ah sorry... i see, i have to choose the branche

eike

@eike:matrix.elwms.org

[m]

okay, next try, damn it, but the documentation and links can absolutly be better... i compiled a bunch of open source project in my life time, but this is realy not a good documentation

eike

@eike:matrix.elwms.org

[m]

hey people... thats not true... is anything working on this project or is everything fake?? realy, thats not nice:
Starting a Gradle Daemon, 3 incompatible and 1 stopped Daemons could not be reused, use --status for details

Task :bootWar FAILED

FAILURE: Build failed with an exception.

What went wrong:
Execution failed for task ':bootWar'.

Error while evaluating property 'mainClass' of task ':bootWar'
Failed to calculate the value of task ':bootWar' property 'mainClass'.
Main class name has not been configured and it could not be resolved
Try:
Run with --stacktrace option to get the stack trace. Run with --info or --debug option to get more log output. Run with --scan to get full insights.
Get more help at https://help.gradle.org

Deprecated Gradle features were used in this build, making it incompatible with Gradle 8.0.

You can use '--warning-mode all' to show the individual deprecation warnings and determine if they come from your own scripts or plugins.

See https://docs.gradle.org/7.2/userguide/command_line_interface.html#sec:command_line_warnings

BUILD FAILED in 2m 23s
9 actionable tasks: 9 executed

can anyone, please give a simple (as many many other projects do) a sequence of commands to compile this project for a demo?

configuration is the second step, first to run it and check if everything work as needed

eike

@eike:matrix.elwms.org

[m]

version 6.1 of the wrapper is working, but 6.4 failed, because of the error above... also in the documentation does not written down that the .war archiv of cas is in /build/libs but certanly "find ./ -name "*.war"" helps.

some day just to nag all users i also will try to create a project that needs ant, maven, jboss, jfaces, different libs from different jdks a litle bit kotlin and groove to make al mini-devs complete confused and no one will ever get the project compiled... *weia - really people, i learned java 12 years ago, but i realy want to learn and switch to rust or go... thats no more fun in the java community

mijutu

@mijutu:ellipsis.fi

[m]

Hmm, I just tried with plain commit fd978af1 (cas 6.4) and commit 239b30f3 (cas 6.3). Ran ./gradlew build and no errors. Debian buster.

eike

@eike:matrix.elwms.org

[m]

i used Ubuntu server 20.04, dont know its because of this

eike

@eike:matrix.elwms.org

[m]

so good night, thanks to every one who try to help, i try the next steps tomorrow, hopefully it will be a success...

does cas not produce own logfiles in tomcat?

i pushed it now up (i already get the 6.4 to work - it was my mistake, the build was successful, but the warning is irritating)

i also generate thekeystore with the url of the published tomcat container, its correct or not?

i renamed cas.war in ROOT.war for direct access to the container, as single host, but i only get a 404 error

i used tomcat 8.5 for this

apascuag

@apascuag

hi,

I'm still trying to use the functionality of cas-management 6.3.x

At the moment version 6.3.4 has errors in the "attribute release" and "access strategy" tabs. Version 6.3.5-SNAPSHOT, fixes this, but overrides the troubleshooting in the "properties" tab, Fixed error with authn policies tab # 194

Someone could help me solve or contribute to the solution of this.

Rishabh Ohri

@rohri_gitlab

In Cas version 6.4.0 RestAuthenticationHandler class is unable to deserialize the user attributes returned from a Rest Call. The rest call returns serialized SimplePrincipal in JSON format wiht id and attributes in key value pairs. When CAS tries to deserialize - Principal principalFromRest = (Principal)MAPPER.readValue(result, Principal.class); it throws exception - Could not resolve subtype of [map type; class java.util.Map, [simple type, class java.lang.String] -> [collection type; class java.util.List, contains [simple type, class java.lang.Object]]]: missing type id property '@class' (for POJO property 'attributes')

3 replies

springnirps

@springnirps

Trying to setup a webflow 1) do action classes need to be set in spring.factories or do use a package scan somehow? I tried to add to spring.factories but action is not executing. I do see my flow configuration doInit executing.

Ajtak

@Ajtak

Hi. CAS war not working on Tomcat 10.0.10, will it work later?

Michry-BBN

@BbnMichry_twitter

https://www.esup-portail.org/wiki/pages/viewpage.action?pageId=972292097

Hello
I am new to apereo I followed this tutorial (https://www.esup-portail.org/wiki/pages/viewpage.action?pageId=972292097) but when compiling it fails every time. who can share a good tutorial on CAS 6X with LDAP authentication please.

2 replies

Łukasz

@lgwozniak

Hi, do You know why url /oauth2.0/accessToken is protected with Basic auth ?

i'm using 6.3 version

Łukasz

@lgwozniak

I found a problem. We use oauth2.0 with PKCE and it requires client_secret. @mmoayyed do You know why it is required ?

Wesley Conley

@waconley

We are working on a CAS integration with a vendor that is tying the initial SAML assertion with the asynchronous account creation. The NotOnOrAfter expires before the user has time to click the "create new account" button. While the vendor states this is a feature and not a bug, we are attempting to either remove the NotOnOrAfter value from both the saml2:SubjectConfirmationData and saml2:Conditions. The skipGeneratingSubjectConfirmationNotOnOrAfter property will remove the value from the saml2:SubjectConfirmationData element, but there does not appear to be a property for removing the value from saml2:Conditions. Is there a way to remove the NotOnOrAfter from saml2:Conditions or is there a way to extend the value out further into the future?

fddev

@fddev_twitter

Hi, we are using CAS 6.4.0 with GoogleAuthenticator Multi-Factor enabled, but every time we reboot CAS the tokens provided by the GoogleAuthenticator App for the users stops working.
This seems to be related to the secret for the specific couple user/device that CAS is not able to recover after reboot (the internal service endpoint 'gauthCredentialRepository' doesn't return it in response to a GET /{username} endpoint).

To reproduce this issue:

Configure CAS for MF GoogleAuthenticator
Login with a user
Scan the code with GoogleAuthenticator App and complete the device association
Login using credential and the token provided by the app --> OK
Reboot CAS
Login using credential and the token provided by the app --> KO Token not valid

We think this is a bug, but any help to resolve this critical issue will be appreciated.

numitor73

@numitor73

Hi, I am migrating CAS 3.x to 5.3.16. In version 5.3.16 the AbstractAuthenticationManager class disappears. In my project I have a class that extends this and I would need to know if it can be replaced by another that comes in version 5.x. Thanks.

Quang Le

@quanglee

Hi guys, I am setting up the CAS version 6.3.6 via K8s . I just prepare the image in the Container Registry. The gradle.build is remain the same as I don't add any new dependencies. But I don't know why it keeps saying this error.
"WARN [org.apereo.cas.web.CasWebApplicationContext] - <Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanDefinitionStoreException: Failed to process import candidates for configuration class [org.apereo.cas.web.CasWebApplication]; nested exception is java.lang.IllegalStateException: Error processing condition on org.springframework.boot.actuate.autoconfigure.quartz.QuartzEndpointAutoConfiguration>"

Hope someone helps me! Much appreciated

Where communities thrive

People

Repo info

Activity