Questions tagged [cas]

Central Authentication Service, a trusted system to authenticate a user. For Code Access Security (Microsoft .NET) use the [code-access-security] tag

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

Cas Authentication Filter redirects response with Http instead of Https

We are working on an application which has CAS implemented. The application works with https protocol and authenticates successfully. But when browser sends the request to backend with CAS ticket, ...
coder12349's user avatar
0 votes
2 answers
18 views

Get my own properties in cas client and Liferay

I have a project with Liferay 5. The basic cas client used is old, and I needed to update it to cas client v3.2.1 So I update the jar on the server, and modify the web.xml of Liferay : <filter> ...
user2178964's user avatar
0 votes
1 answer
22 views

CAS 6.6.6 and 6.6.7 Embedded Tomcat Container - cas.tgc.domain

The servers starts normally with the following parameters: _ ____ _____ ____ _____ ___ ____ _ ____ / \ | _ \| ____| _ \| ____/ _ \ / ___| / \ / ___| / _ \ | |_) | ...
Daniel Maldonado's user avatar
0 votes
0 answers
13 views

How do you upgrade a CAS war deployment to the latest?

We have an old CAS deployment that is used to allow database and DUO authentication. It needs to be upgraded but I'm unsure how to upgrade the CAS parts. Built CAS 6.6.7 war file and tried to manually ...
M Davie's user avatar
  • 31
-3 votes
0 answers
20 views

Need help implementing CAS/JASIG and SSO authentication in Laravel

I'm currently implementing CAS authentication in my Laravel 9 project. I've followed the available guides and tutorials, but I'm still having trouble. I would like to get in touch with someone who ...
Adam Amrid's user avatar
1 vote
0 answers
36 views

CAS Spnego Authentication issue || "Clock Skew Too Great (37)"

We have internal application using CAS for SSO login into LDAP server. Users can login via SSO to the application as usual just that when the number of active users go beyond certain number (100), CAS ...
rohit0025's user avatar
-1 votes
1 answer
30 views

Running Apereo CAS on win 10

I've just built and ran CAS init. According to below guide and I can see UI at localhost:8080/ui. But now I don't know what should I do for next steps to implement a SSO server. I am new to this ...
Magasvazn's user avatar
0 votes
0 answers
36 views

CAS 6.6.6 customize login webflow to open custom dashboard view

I am using CAS-6.6.6 by using maven and I am trying to change landing page (if no service found) to my customized JSP view. I can't use same location for custom page hence, need to update webflow to ...
user1471322's user avatar
0 votes
1 answer
72 views

Apereo CAS - login through REST call

I have a cas server running localy (https://localhost:8443) and a default user. Username: casuser Password: Mellon I want to use another java based application to login a user by using Apero CAS. Is ...
justAUser's user avatar
0 votes
1 answer
98 views

Authentication attempt has failed when login Cas-server

I am using the documentation from the website https://www.baeldung.com/spring-security-cas-sso#cas-server-setup-user-config to set up Cas-server for my Spring Boot application. However, when I reached ...
quocanhcute's user avatar
0 votes
0 answers
13 views

Skip Associate your account authentication page in. net core 7 and CAS

I have a .net core 7 web app with external login with CAS. I need to skip the page which asks for email after successful login. I have set up the builder.Services.AddDefaultIdentity<IdentityUser>...
touinta's user avatar
  • 971
1 vote
1 answer
109 views

Creating users in CAS server

I created a new CAS server in ubuntu 20.04, and logged in with the default username and password. I followed this link to create the setup. Now I need to create users and admin users in the setup for ...
ganesh tirumani's user avatar
0 votes
0 answers
20 views

is cas-discovery-server-overlay a must

cas-discovery-server-overlay is a WAR Overlay for the Service Discovery Server. Can spring-cloud-starter-netflix-eureka-server instead of cas-discovery-server-overlay as registration center? cas-...
zhouyw's user avatar
  • 1
0 votes
1 answer
58 views

How integrating CAS Protocol with Microsoft .NET6 APIs c#

I have some APIs written with .NET6. I want that only some of my APIs are authorized with the CAS protocol. I am looking for documentation or examples but I found only very old examples with old ...
SauroDino's user avatar
0 votes
0 answers
31 views

How to call a POST request with curl for Spring Boot CAS/SSO secured URLs?

following this tutorial I have created a Spring Boot service which uses a CAS server to login with SSO: https://www.baeldung.com/spring-security-cas-sso I have added some GET and POST paths to my ...
Baradé's user avatar
  • 1,238
0 votes
0 answers
49 views

CAS could not starting from cas-overlay-template

I am trying to install apereo CAS 7 from cas-overlay-template on my localhost I already install jdk 17 and already follow instructions there and generating thekeystores and cert files but no file ...
ooo3's user avatar
  • 3
0 votes
0 answers
16 views

Is it secure to use a wildcard for subdomains of a domain I own when creating a CAS service?

I work at a university and have recently started managing our CAS(SSO) server. Many applications we own use the CAS protocol and are at subdomains we own (app1.univerity.edu, app2.univerity.edu). CAS ...
Joshua's user avatar
  • 1
0 votes
0 answers
51 views

CAS Google OAuth MFA activation flow does not work as expected

I am working on a project that uses Apereo CAS 5.x.x to handle user authentication and users can activate MFA. When logging in, the user can use their Active Directory credentials or log in via Google ...
MinionAttack's user avatar
0 votes
0 answers
103 views

Cas server and cas management

I am trying to integrate apereo CAS management with CAS server and the only tutorial that I found is this for a passwordless authentication(More precisely QR code authentication) and I am finding ...
Salma's user avatar
  • 1
0 votes
0 answers
51 views

Apache mod_auth_cas cas-attribute differents location

I need to CASsify an application that is not intended to use CAS. So I installed the Apache mod-auth_cas module and try to "filter" by cas-attribute based on various URLs. Example: <...
Arno's user avatar
  • 1
0 votes
0 answers
28 views

is there a way to change the CAS APEREO collection structure?

I am planning to implement CAS with MongoDB authentication and also planning to use existing MongoDB collection which is not following the expected Document scheme as mentioned in apreo documentation. ...
Abdul Razak AK's user avatar
0 votes
0 answers
48 views

Gateway Feature of CAS

I understand that CAS has a "gateway" feature for /login which I understand that it redirects a user browser to a CAS server to be authenticated using a initial ticket-granting cookie that ...
areyouthem's user avatar
0 votes
0 answers
41 views

How to configure CAS to allow post from SAML2 delegated identity provider callback

I am using CAS 5.2.6 with a SAML2 delegated identity provider. When I go to my login page, it redirects me to the SAML2 identity provider login page. But, when it comes back, it does a post to the ...
Jeff Werner's user avatar
0 votes
0 answers
25 views

CAS login option not showing in SuiteCRM 8.2

After Implementation CAS in SuiteCRM 8.2 There is no option to login with CAS I have follow the doc https://community.suitecrm.com/t/cas-implementation-in-suitecrm-7-10-27/76610/5 Thank You I Have ...
Anup Singh's user avatar
0 votes
1 answer
109 views

Apereo CAS two-factor authentication with REST

I have enabled two-factor authentication in Apereo CAS 6.5 and it works well using CAS UI page available on /login endpoint. I use CAS simple provider. If I provide username and password then I am ...
user avatar
0 votes
1 answer
87 views

Ticket validated but no PGT in the ticket validation response (CAS 6.5.9)

I have successfully configured CAS 6.5.9 with Proxy Authentication. As mentioned in the documentation, my use case does not support the invoking of a callback url so I have requested that the PGT be ...
tfrancois's user avatar
  • 165
0 votes
0 answers
51 views

How to set cas sso tgt token in session storage while redirect

Is there a way for storing the tgt token in session storage while redirection to client browser? Is there any config using which we can achieve this?
Kanhaiya Choudhary's user avatar
0 votes
1 answer
120 views

CAS upgrade from 6.3.5 to 6.5.9 java.lang.IllegalArgumentException: Unable to locate authentication profile

We are getting the following error after upgrading CAS from 6.3.5 to 6.5.9. Appreciate any help here, thank you. 2022-10-25 15:52:56,702 ERROR [https-jsse-nio-443-exec-6] o.s.b.w.s.s.ErrorPageFilter: ...
Johnwin's user avatar
0 votes
0 answers
23 views

where does spring-security-cas source code live?

I am looking for the spring-security-cas source code, but for the life of me can't locate it. I dug through the Spring projects github page (https://github.com/spring-projects), but for the life of ...
Jamie's user avatar
  • 135
1 vote
2 answers
339 views

Apereo CAS Login Error about java.security.InvalidAlgorithmParameterException

I follow the step in the link(https://github.com/apereo/cas-overlay-template) to deploy Apereo CAS. Test Environment: CAS Version: 7.0.0-SNAPSHOT CAS Branch: master CAS Build Date/Time: 2022-10-05T13:...
Michael Shi's user avatar
0 votes
0 answers
96 views

Apereo CAS does not lock user account after X failed attempts

I am trying to set up Apereo CAS with Throttling Authentication Attempts but I run into the problem that after the account lockout message appears, if I reload the login page or open a new tab and try ...
MinionAttack's user avatar
0 votes
1 answer
149 views

CAS 6.5.7 - h2 and spring-security-core vulnerabilities

We are upgrading the CAS version to 6.5.7 from 6.3.5. But found that 2 dependencies have critical vulnerabilities. h2Version=1.4.197, this version reported vulnerabilities CVE-2021-23463, CVE-2022-...
Johnwin's user avatar
2 votes
3 answers
522 views

cannot start cas-overlay-template on windows - missing \etc\cas\thekeystore

I am trying to run https://github.com/apereo/cas-overlay-template on Windows 11 and JDK 11 (Eclipse Adoptium 11.0.16.1), using the 6.5 branch. I have ran the "createKeystore" and "...
bluebloodedboy's user avatar
0 votes
0 answers
117 views

CAS 6.6 How to authenticate user/password with Azure

I have been unsuccessful in getting my CAS to use username/password of my Azure AD Here is a snippet from cas.properties cas.authn.attribute-repository.azure-active-directory[0].client-id= <id of ...
achraf karoui's user avatar
0 votes
0 answers
56 views

CAS custom theme not taken in logout

I am currently working on providing a customized logout view for CAS. I am following this tutorial: https://dacurry-tns.github.io/deploying-apereo-cas/ui_how-cas-themes-work.html I have the custom-...
jobe's user avatar
  • 1
0 votes
1 answer
752 views

CAS 6.5 not able to use jose4J package to validate JWT

I am upgrading from 5.3 to 6.5 and getting errors using the Jose4J package to validate the JWTs CAS is generating. From what I can tell after jose4j's JWE decrypts the JWT the content type header “...
Jason's user avatar
  • 1
0 votes
0 answers
158 views

how to fix cross domain problem with cas 6.5

I have a front-end and back-end separation project I want to redirect to cas from backend, But I got the cross domain problem like this enter image description here. And I have try fixed it by the ...
Duncan Fu's user avatar
0 votes
0 answers
133 views

Apereo CAS is ignoring OIDC parameter prompt and max_age

Im very familiar and happy using CAS. But now i maybe located a "hole" using CAS 6.3.7: The OpenID Connect parameter "prompt" and "max_age" seams to be ignored. (For more ...
Pl3tx235j's user avatar
0 votes
1 answer
113 views

Silent authentification with cas oidc (prompt=none)

I have a cas server work with oidc; I want to login without approve page. So I hava get the url like this https://xxx:9443/cas/oidc/authorize?response_type=code&redirect_uri=http://localhost:8080/...
Duncan Fu's user avatar
0 votes
1 answer
62 views

Using CAS with redirect Failed asserting that the Response status code is 200

There is an application that worked before including CAS, but now that the CAS performs the redirection, the smoke test does not find where to do the test we expect a return code of 200 to process, ...
euroluar's user avatar
0 votes
1 answer
143 views

Cross browser SSO with CAS

Is there a way to implement a cross browser single sing on using CAS? I'm aware that this isn't a standard workflow and that SSO workflows work on a single browser using session cookies, but we have a ...
Igor Harackiewicz's user avatar
0 votes
1 answer
145 views

Configuration of OpenId Connect token expiration in CAS

I'm looking for properties to set expiration time of OpenId Connect token. Default is 8 hours, but I want to change it. How can I do that? I'm using CAS 6.5.4
rechandler's user avatar
0 votes
0 answers
178 views

CAS Actuator Health Endpoints Return 403 Intermittently

I recently upgraded CAS to 6.4.6.x and noticed that the liveness/readiness probes will intermittently throw 403 error codes. It appears to be a threading issue in the Spring Security Filter Chain. I ...
Creamstout10's user avatar
0 votes
1 answer
183 views

CAS singleSignOutFilter not Catching User Logout

I've been working on a Spring Boot app that uses CAS for SSO for days now. Single sign on works great! And I have a logout button within the app that works as well. The problem I'm running in to is ...
dlemp's user avatar
  • 21
0 votes
0 answers
33 views

Trying to introduce CAS in a website uploaded to a shared host

I'm trying to make my Laravel project work on a shared host as well as it does in localhost but I don't get how to do that... I uploaded my project following the steps of this tutorial: https://www....
Lucia Cristobal's user avatar
0 votes
0 answers
287 views

CAS server for laravel

I've implemented CAS Auth using subfission/cas package, but I couldn't manage to find proper instructions for building a CAS server. after some digging, I've found this reply from subfission: 'yes, ...
Mostafa Lotfi's user avatar
0 votes
0 answers
128 views

CAS integration with node js using passport-cas

I am using passport-cas to implement CAS 2.0 on my web server. I am trying to create a dummy environment where I just implement login functionality. It seems that the CAS login implementation is ...
Jackie Dong's user avatar
0 votes
0 answers
46 views

CAS Server 5.3 configuration with SAML 1.1

I am very new in this IAM and SSO area. I am trying to setup CAS server which support SAML1.1, I have gone through cas v5.3 documentation and followed the instruction there but still I am not able to ...
Maximus's user avatar
0 votes
0 answers
56 views

node-cas-client to retrieve user attributes from SAML server

We have integrated a ReactUI / Express based app with CAS (which inturn uses SAML Idp connector). Our Java based apps also uses similar approach and uses the CAS Java client to integrate with CAS+SAML ...
Raghavan's user avatar
  • 129
1 vote
0 answers
1k views

WebServerException: Unable to start embedded Tomcat server

I am trying to run a docker image of CASdockerscreenshot, now I am facing a issues that indicating these errors: 2022-05-27 08:05:17,985 WARN [org.springframework.boot.web.servlet.context....
juz410's user avatar
  • 11

1
2 3 4 5
34