Questions tagged [cas]
Central Authentication Service, a trusted system to authenticate a user. For Code Access Security (Microsoft .NET) use the [code-access-security] tag
1,693
questions
0
votes
0
answers
9
views
Cas Authentication Filter redirects response with Http instead of Https
We are working on an application which has CAS implemented. The application works with https protocol and authenticates successfully. But when browser sends the request to backend with CAS ticket, ...
0
votes
2
answers
18
views
Get my own properties in cas client and Liferay
I have a project with Liferay 5.
The basic cas client used is old, and I needed to update it to cas client v3.2.1
So I update the jar on the server, and modify the web.xml of Liferay :
<filter>
...
0
votes
1
answer
22
views
CAS 6.6.6 and 6.6.7 Embedded Tomcat Container - cas.tgc.domain
The servers starts normally with the following parameters:
_ ____ _____ ____ _____ ___ ____ _ ____
/ \ | _ \| ____| _ \| ____/ _ \ / ___| / \ / ___|
/ _ \ | |_) | ...
0
votes
0
answers
13
views
How do you upgrade a CAS war deployment to the latest?
We have an old CAS deployment that is used to allow database and DUO authentication. It needs to be upgraded but I'm unsure how to upgrade the CAS parts.
Built CAS 6.6.7 war file and tried to manually ...
-3
votes
0
answers
20
views
Need help implementing CAS/JASIG and SSO authentication in Laravel
I'm currently implementing CAS authentication in my Laravel 9 project. I've followed the available guides and tutorials, but I'm still having trouble. I would like to get in touch with someone who ...
1
vote
0
answers
36
views
CAS Spnego Authentication issue || "Clock Skew Too Great (37)"
We have internal application using CAS for SSO login into LDAP server.
Users can login via SSO to the application as usual just that when the number of active users go beyond certain number (100), CAS ...
-1
votes
1
answer
30
views
Running Apereo CAS on win 10
I've just built and ran CAS init. According to below guide and I can see UI at localhost:8080/ui. But now I don't know what should I do for next steps to implement a SSO server. I am new to this ...
0
votes
0
answers
36
views
CAS 6.6.6 customize login webflow to open custom dashboard view
I am using CAS-6.6.6 by using maven and I am trying to change landing page (if no service found) to my customized JSP view. I can't use same location for custom page hence, need to update webflow to ...
0
votes
1
answer
72
views
Apereo CAS - login through REST call
I have a cas server running localy (https://localhost:8443) and a default user.
Username: casuser
Password: Mellon
I want to use another java based application to login a user by using Apero CAS.
Is ...
0
votes
1
answer
98
views
Authentication attempt has failed when login Cas-server
I am using the documentation from the website https://www.baeldung.com/spring-security-cas-sso#cas-server-setup-user-config to set up Cas-server for my Spring Boot application. However, when I reached ...
0
votes
0
answers
13
views
Skip Associate your account authentication page in. net core 7 and CAS
I have a .net core 7 web app with external login with CAS. I need to skip the page which asks for email after successful login. I have set up the
builder.Services.AddDefaultIdentity<IdentityUser>...
1
vote
1
answer
109
views
Creating users in CAS server
I created a new CAS server in ubuntu 20.04, and logged in with the default username and password.
I followed this link to create the setup.
Now I need to create users and admin users in the setup for ...
0
votes
0
answers
20
views
is cas-discovery-server-overlay a must
cas-discovery-server-overlay is a WAR Overlay for the Service Discovery Server.
Can spring-cloud-starter-netflix-eureka-server instead of cas-discovery-server-overlay as registration center?
cas-...
0
votes
1
answer
58
views
How integrating CAS Protocol with Microsoft .NET6 APIs c#
I have some APIs written with .NET6.
I want that only some of my APIs are authorized with the CAS protocol.
I am looking for documentation or examples but I found only very old examples with old ...
0
votes
0
answers
31
views
How to call a POST request with curl for Spring Boot CAS/SSO secured URLs?
following this tutorial I have created a Spring Boot service which uses a CAS server to login with SSO: https://www.baeldung.com/spring-security-cas-sso
I have added some GET and POST paths to my ...
0
votes
0
answers
49
views
CAS could not starting from cas-overlay-template
I am trying to install apereo CAS 7 from cas-overlay-template on my localhost I already install jdk 17 and already follow instructions there and generating thekeystores and cert files but no file ...
0
votes
0
answers
16
views
Is it secure to use a wildcard for subdomains of a domain I own when creating a CAS service?
I work at a university and have recently started managing our CAS(SSO) server. Many applications we own use the CAS protocol and are at subdomains we own (app1.univerity.edu, app2.univerity.edu). CAS ...
0
votes
0
answers
51
views
CAS Google OAuth MFA activation flow does not work as expected
I am working on a project that uses Apereo CAS 5.x.x to handle user authentication and users can activate MFA. When logging in, the user can use their Active Directory credentials or log in via Google ...
0
votes
0
answers
103
views
Cas server and cas management
I am trying to integrate apereo CAS management with CAS server and the only tutorial that I found is this for a passwordless authentication(More precisely QR code authentication) and I am finding ...
0
votes
0
answers
51
views
Apache mod_auth_cas cas-attribute differents location
I need to CASsify an application that is not intended to use CAS.
So I installed the Apache mod-auth_cas module and try to "filter" by cas-attribute based on various URLs.
Example:
<...
0
votes
0
answers
28
views
is there a way to change the CAS APEREO collection structure?
I am planning to implement CAS with MongoDB authentication and also planning to use existing MongoDB collection which is not following the expected Document scheme as mentioned in apreo documentation.
...
0
votes
0
answers
48
views
Gateway Feature of CAS
I understand that CAS has a "gateway" feature for /login which I understand that
it redirects a user browser to a CAS server to be authenticated
using a initial ticket-granting cookie that ...
0
votes
0
answers
41
views
How to configure CAS to allow post from SAML2 delegated identity provider callback
I am using CAS 5.2.6 with a SAML2 delegated identity provider. When I go to my login page, it redirects me to the SAML2 identity provider login page. But, when it comes back, it does a post to the ...
0
votes
0
answers
25
views
CAS login option not showing in SuiteCRM 8.2
After Implementation CAS in SuiteCRM 8.2
There is no option to login with CAS
I have follow the doc https://community.suitecrm.com/t/cas-implementation-in-suitecrm-7-10-27/76610/5
Thank You
I Have ...
0
votes
1
answer
109
views
Apereo CAS two-factor authentication with REST
I have enabled two-factor authentication in Apereo CAS 6.5 and it works well using CAS UI page available on /login endpoint. I use CAS simple provider.
If I provide username and password then I am ...
0
votes
1
answer
87
views
Ticket validated but no PGT in the ticket validation response (CAS 6.5.9)
I have successfully configured CAS 6.5.9 with Proxy Authentication. As mentioned in the documentation, my use case does not support the invoking of a callback url so I have requested that the PGT be ...
0
votes
0
answers
51
views
How to set cas sso tgt token in session storage while redirect
Is there a way for storing the tgt token in session storage while redirection to client browser?
Is there any config using which we can achieve this?
0
votes
1
answer
120
views
CAS upgrade from 6.3.5 to 6.5.9 java.lang.IllegalArgumentException: Unable to locate authentication profile
We are getting the following error after upgrading CAS from 6.3.5 to 6.5.9. Appreciate any help here, thank you.
2022-10-25 15:52:56,702 ERROR [https-jsse-nio-443-exec-6] o.s.b.w.s.s.ErrorPageFilter: ...
0
votes
0
answers
23
views
where does spring-security-cas source code live?
I am looking for the spring-security-cas source code, but for the life of me can't locate it. I dug through the Spring projects github page (https://github.com/spring-projects), but for the life of ...
1
vote
2
answers
339
views
Apereo CAS Login Error about java.security.InvalidAlgorithmParameterException
I follow the step in the link(https://github.com/apereo/cas-overlay-template) to deploy Apereo CAS.
Test Environment:
CAS Version: 7.0.0-SNAPSHOT
CAS Branch: master
CAS Build Date/Time: 2022-10-05T13:...
0
votes
0
answers
96
views
Apereo CAS does not lock user account after X failed attempts
I am trying to set up Apereo CAS with Throttling Authentication Attempts but I run into the problem that after the account lockout message appears, if I reload the login page or open a new tab and try ...
0
votes
1
answer
149
views
CAS 6.5.7 - h2 and spring-security-core vulnerabilities
We are upgrading the CAS version to 6.5.7 from 6.3.5. But found that 2 dependencies have critical vulnerabilities.
h2Version=1.4.197, this version reported vulnerabilities CVE-2021-23463, CVE-2022-...
2
votes
3
answers
522
views
cannot start cas-overlay-template on windows - missing \etc\cas\thekeystore
I am trying to run https://github.com/apereo/cas-overlay-template on Windows 11 and JDK 11 (Eclipse Adoptium 11.0.16.1), using the 6.5 branch. I have ran the "createKeystore" and "...
0
votes
0
answers
117
views
CAS 6.6 How to authenticate user/password with Azure
I have been unsuccessful in getting my CAS to use username/password of my Azure AD
Here is a snippet from cas.properties
cas.authn.attribute-repository.azure-active-directory[0].client-id= <id of ...
0
votes
0
answers
56
views
CAS custom theme not taken in logout
I am currently working on providing a customized logout view for CAS. I am following this tutorial:
https://dacurry-tns.github.io/deploying-apereo-cas/ui_how-cas-themes-work.html
I have the custom-...
0
votes
1
answer
752
views
CAS 6.5 not able to use jose4J package to validate JWT
I am upgrading from 5.3 to 6.5 and getting errors using the Jose4J package to validate the JWTs CAS is generating. From what I can tell after jose4j's JWE decrypts the JWT the content type header “...
0
votes
0
answers
158
views
how to fix cross domain problem with cas 6.5
I have a front-end and back-end separation project I want to redirect to cas from backend, But I got the cross domain problem like this enter image description here.
And I have try fixed it by the ...
0
votes
0
answers
133
views
Apereo CAS is ignoring OIDC parameter prompt and max_age
Im very familiar and happy using CAS. But now i maybe located a "hole" using CAS 6.3.7:
The OpenID Connect parameter "prompt" and "max_age" seams to be ignored.
(For more ...
0
votes
1
answer
113
views
Silent authentification with cas oidc (prompt=none)
I have a cas server work with oidc; I want to login without approve page. So I hava get the url like this
https://xxx:9443/cas/oidc/authorize?response_type=code&redirect_uri=http://localhost:8080/...
0
votes
1
answer
62
views
Using CAS with redirect Failed asserting that the Response status code is 200
There is an application that worked before including CAS, but now that the CAS performs the redirection, the smoke test does not find where to do the test
we expect a return code of 200 to process, ...
0
votes
1
answer
143
views
Cross browser SSO with CAS
Is there a way to implement a cross browser single sing on using CAS? I'm aware that this isn't a standard workflow and that SSO workflows work on a single browser using session cookies, but we have a ...
0
votes
1
answer
145
views
Configuration of OpenId Connect token expiration in CAS
I'm looking for properties to set expiration time of OpenId Connect token. Default is 8 hours, but I want to change it. How can I do that?
I'm using CAS 6.5.4
0
votes
0
answers
178
views
CAS Actuator Health Endpoints Return 403 Intermittently
I recently upgraded CAS to 6.4.6.x and noticed that the liveness/readiness probes will intermittently throw 403 error codes. It appears to be a threading issue in the Spring Security Filter Chain. I ...
0
votes
1
answer
183
views
CAS singleSignOutFilter not Catching User Logout
I've been working on a Spring Boot app that uses CAS for SSO for days now. Single sign on works great! And I have a logout button within the app that works as well. The problem I'm running in to is ...
0
votes
0
answers
33
views
Trying to introduce CAS in a website uploaded to a shared host
I'm trying to make my Laravel project work on a shared host as well as it does in localhost but I don't get how to do that... I uploaded my project following the steps of this tutorial: https://www....
0
votes
0
answers
287
views
CAS server for laravel
I've implemented CAS Auth using subfission/cas package, but I couldn't manage to find proper instructions for building a CAS server.
after some digging, I've found this reply from subfission: 'yes, ...
0
votes
0
answers
128
views
CAS integration with node js using passport-cas
I am using passport-cas to implement CAS 2.0 on my web server. I am trying to create a dummy environment where I just implement login functionality. It seems that the CAS login implementation is ...
0
votes
0
answers
46
views
CAS Server 5.3 configuration with SAML 1.1
I am very new in this IAM and SSO area. I am trying to setup CAS server which support SAML1.1, I have gone through cas v5.3 documentation and followed the instruction there but still I am not able to ...
0
votes
0
answers
56
views
node-cas-client to retrieve user attributes from SAML server
We have integrated a ReactUI / Express based app with CAS (which inturn uses SAML Idp connector). Our Java based apps also uses similar approach and uses the CAS Java client to integrate with CAS+SAML ...
1
vote
0
answers
1k
views
WebServerException: Unable to start embedded Tomcat server
I am trying to run a docker image of CASdockerscreenshot, now I am facing a issues that indicating these errors:
2022-05-27 08:05:17,985 WARN [org.springframework.boot.web.servlet.context....