Questions tagged [cas]
Central Authentication Service, a trusted system to authenticate a user. For Code Access Security (Microsoft .NET) use the [code-access-security] tag
1,634
questions
187
votes
5answers
75k views
SSO with CAS or OAuth?
I wonder if I should use the CAS protocol or OAuth + some authentication provider for single sign-on.
Example Scenario:
A User tries to access a protected resource, but is not authenticated.
The ...
59
votes
5answers
26k views
CAS vs. SAML vs. OAuth2
Before you put me down for asking too basic a question without doing any homework, I'd like to say that I have been doing a lot of reading on these topics, but I'm still confused.
My needs seem ...
39
votes
2answers
14k views
To Go or Not To Go with Liferay? What's the good, bad, and ugly? [closed]
We are evaluating several solutions for a new web thing we're looking to build. There are several aspects to it, including user management, content management, campaigns, community, and financial ...
24
votes
5answers
9k views
Which CAS implementation to use in django?
Which CAS implementation should i use to enable CAS single sign on to my django app (trusing a specified CAS server, I'm not interested in creating a CAS provider) ? What I can find are the following:...
24
votes
3answers
9k views
Simple SSO - using custom authentication - CAS or some Oauth or openid server?
I'd like to know more about the
different ways of solving Single
Sign-On and their pros and cons. Have you worked with one particular solution, tell me what's good about it and tell me what the ...
22
votes
4answers
25k views
Attempt by security transparent method X to access security critical method Y failed
I have a fairly stable server application version that's been deployed for nearly a year at dozens of customers.
One new customer recently setup the application and is getting the following error:
...
21
votes
3answers
14k views
Difference between Shibboleth and CAS?
Please explain what the differences are between Shibboleth and CAS?
19
votes
4answers
4k views
What does “spurious failure” on AtomicInteger weakCompareAndSet mean?
The Java AtomicInteger class has a method -
boolean weakCompareAndSet(int expect,int update)
Its documnentation says:
May fail spuriously.
What does 'failing spuriously' here mean?
18
votes
3answers
130k views
Uri not Absolute exception getting while calling Restful Webservice
The below code snippet is using to call my web service using restful API.
ClientConfig config = new DefaultClientConfig();
Client client = Client.create(config);
String uri= "https://127.0.0....
16
votes
2answers
12k views
What is the relation between CAS vs SAML?
I understand that CAS and SAML are different protocols used for Single-sign on purposes but, what confuses me is articles that say "CAS has an SAML implementation".
Aren't CAS and SAML different ways ...
15
votes
5answers
23k views
Getting more attributes from CAS than just user id
I am using CAS with JDBC Authentication handler and was wondering is it possible to get the other attributes of principal object (for e.g. firstname, lastname) not just the username from CAS after ...
14
votes
1answer
45k views
got java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty when using cas [duplicate]
we get the following exception in our application under tomcat which is using cas.
java.security.InvalidAlgorithmParameterException:
the trustAnchors parameter must be
non-empty
when I google ...
12
votes
1answer
29k views
Single Sign On (SSO): How to use Active Directory as an authentication method for CAS service?
I am developing a portal to Liferay and want to apply there a Single Sign On mechanism (SSO). I am using Jasig CAS for centralized authentication of my multiple web applications. Until now I know that ...
12
votes
8answers
3k views
Angular PUT request is Forbidden over SSL
I am using Angular 5 as a front end with a Spring Boot REST server. Everything was working properly if not using SSL. When I switch to SSL, eventually I got everything sort of working. It works for ...
12
votes
3answers
8k views
PKIX path building failed, but the certificate is in cacerts
I have the problem that is also described here.
The thing is that I created a certificate and added it to the keystore of tomcat, and then I copied it to the cacerts truststore. However, somehow I ...
12
votes
4answers
9k views
JASIG CAS Login without CAS login screen
We are trying to use CAS server for SSO for our existing web based applications. Our goals are
Achive SSO across the various applications (including cross domain).
Have Customized login (In UI Terms) ...
11
votes
3answers
24k views
Spring Security and CAS Integration
Can anyone paste simple steps to integrate Spring security and CAS over here for single sign on and single sign out.
Note I dont want any role based access.I have a web application which is already ...
11
votes
1answer
2k views
Is there a way to conditionally apply annotations?
In my java-play application I have the annotation @RequiresAuthentication(clientName = "CasClient") inside my controller.
I only want to authenticate users in my production environment.
How can I ...
11
votes
1answer
2k views
Making SSO with django rest framework
We have two apps App1 with domain www.app1.com and App2 with domain www.app2.com. Backend of both apps is api based using django-rest-framework. On frontend side we are using Angular2. Both apps had ...
10
votes
1answer
10k views
CAS vs Okta Vs Keycloak comparisions as an SSO solution
Which is the best option for SSO implementation Keycloack Vs CAS Vs Okta? I'm specifically looking for the disadvantages of each service to identify the best suitability for my system.
10
votes
2answers
13k views
SSO and REST Api Authentication on multiple Application
at our company we have multiple web applications deployed that are secured through SSO using CAS server.
A user requests an url of an application, and if not already authenticated, gets redirected to ...
9
votes
4answers
18k views
Working Java REST Client Example to access CAS REST API
I followed this tutorial to enable REST service on my local CAS server.
However there is no Java example
"Java REST Client Example
We need a real, working, example, the previous one is useless. ...
9
votes
4answers
68k views
PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
From Pro Spring Security book by Carlo Scarioni, I'm trying to integrate Spring Application with CAS Server. I followed every step that the book instructed, still I'm stuck with this error. Please ...
8
votes
5answers
15k views
What are the default login credentials for Jasig CAS server?
I am new to SSO, I hoped to install Jasig CAS demo web app and be able to log in inside. Pure research and testing. I've disabled ssl using https://wiki.jasig.org/display/CASUM/Securing+Your+New+CAS+...
8
votes
1answer
24k views
CAS service ticket validate failed
I have followed a link http://lukesampson.com/post/315838839/cas-on-windows-localhost-setup-in-5-mins, then the cas server works correctly, the login url is http://10.1.1.26:8080/login, the validate ...
8
votes
2answers
11k views
CAS logout and cookies elimination
I just made a HelloWorld servlet and implemented CAS on it.
I'm being able to log in without problem and CAS is setting 3 cookies in my browser, the CASGT, and 2 JSESSIONID 1 for /cas and another for /...
8
votes
5answers
13k views
How to correctly set the service URL in Spring's CAS service properties
When working with Spring Security + CAS I keep hitting a small road block with the callback URL that is sent to CAS, ie the service property. I've looked at a bunch of examples such as this and this ...
8
votes
2answers
3k views
CAS Authentication Symfony2
I'm looking for a bundle to integrate CAS authentication on Symfony 2.3. I found these options and the truth is I'm not convinced any, since almost all bundles seem to be abandoned without updating.
...
8
votes
2answers
2k views
How to Overcome Cross-domain Issues for Ajax Calls to CAS-protected Resources?
What are potential solutions to a redirection problem that occurs when trying to make AJAX calls to a CAS-protected, SSL-encrypted resource located on a server different from the CAS server?
The CAS ...
8
votes
0answers
625 views
CAS Authentication - CSRF token not found
I use Apereo CAS (formerly Jasig CAS) (github here). Next, I create a very simple application in Vaadin, which connects to CAS during authentication. Everything works seamlessly until I turned on CSRF ...
8
votes
1answer
5k views
What are the differences between CAS and Keycloak?
What are the differences between CAS( Central Authentication Service) and Keycloak(Identity and Access Management )?
7
votes
4answers
3k views
How to test CAS with jmeter?
request:
I send a "get" http request, has no parameters;
path: http://192.168.22.139:8080/KSP
response:
<input id="username" type="text" name="username" required/>
<input id="password" ...
7
votes
2answers
6k views
Can i use Jasig CAS server for android mobile applications?
I know that CAS is a single sign-on protocol for the web. Its purpose is to permit a user to access multiple applications while providing their credentials (such as userid and password) only once. It ...
7
votes
2answers
15k views
CAS AD LDAP 32 error
I am seeing this when I try to login with CAS which is authenticating against AD over LDAP.
SEVERE: Servlet.service() for servlet cas threw exception
javax.naming.NameNotFoundException: [LDAP: ...
7
votes
2answers
8k views
CAS authentication of a RESTful web service
My application needs to access a RESTful web service running on a different server. This web service uses CAS authentication, and when consuming it through the browser it will redirect to CAS login if ...
7
votes
1answer
2k views
setting up single sign on with django-cas and django-mama-cas
Im looking into setting up single sign on for a django website. My search brought me to django-mama-cas and django-cas-ng but Im not sure whether I can or should use them separately or together.
The ...
7
votes
5answers
14k views
JASIG CAS: single sign out not working
I have single sign on working beautifully, but single sign-out is not working.
The scenario is like this:
Open webapp1 and get redirected to CAS login page
Enter details and login
Open webapp2 which ...
7
votes
1answer
3k views
Using Jasig's Central Authentication Service (CAS) with ASP.NET MVC 4/5
I'm starting an ASP.NET MVC 5 project in VS 2013, which will eventually need to support CAS (Central Authentication Service) for authentication. Jasig has an official .NET client, but it's somewhat ...
7
votes
1answer
1k views
Jasig CAS Authentication redirect loop
I have six applications and I am using Jasig CAS for authenticating them. Jasig CAS's Single Sign On is working really good for me.
On the other hand, Single Sign Off is not working for me. When I ...
6
votes
3answers
9k views
Is OpenDJ, OpenAM and OpenIAM free software
What has been the experience of folks who have already been using OpenDJ and OpenAM? Older versions seem free to use but the new releases don't seem to be free for use. How do they compare to the ...
6
votes
3answers
8k views
Write Access to Program Files folder
my application include a self-updater executable that is used to update the application.
One of the first steps the updater is performing is to check that it does have write permission to the ...
6
votes
3answers
4k views
loadFromRemoteSources enabled=“true” // XAML designer // VS 11 beta and 2012 RC
I get stung on a recurring basis by this, and of course always at the worst moment.
When I edit a xaml file, I receive this error
(System.NotSupportedException: An attempt was made to load an ...
6
votes
1answer
10k views
Implement SSO using CAS + Spring Security
I'm trying to implement SSO across several web applications using CAS and Spring Security. Expected case:
CAS - http:// localhost:8080/cas/
App A protected content - http: //localhost:8081/cas-client1/...
6
votes
3answers
2k views
Get current/active security zone of a .NET application?
I have an application that behaves oddly, and just to verify, I'd like to see which security zone it is currently running under.
I've found the System.Security.SecurityZone enum, but can't seem to ...
6
votes
1answer
7k views
How to use angularjs routing with CAS authentication redirect, or is angular just not usable?
My app usually uses the following for routing:
http://angularapp.com/#/page=bannanas
However, if the user is not authenticated, the user is redirected to a CAS login page, then after login, is ...
6
votes
6answers
4k views
Getting a Loop Redirect with Spring Security + CAS, but should be working
I'm trying to change a basic application from using only Spring Security to using CAS, to enable SSO. But i'm getting a redirect loop somewhere, and i can't find out what is wrong. I have made two ...
6
votes
2answers
18k views
Explain how FB connect authentication works
I am working on a site that will allow users to create an account. Then website developers will be able to integrate that authentication system into their site and allow users to login with my sites ...
6
votes
2answers
4k views
Shibboleth restful api
I am writing an android application for an University that uses Shibboleth for authenticating the students.
Since I am making a android native app (not a webview), I would like to programmatically ...
6
votes
3answers
2k views
Algorithm(s) for rearranging simple symbolic algebraic expressions
I would like to know if there is a straightforward algorithm for rearranging simple symbolic algebraic expressions. Ideally I would like to be able to rewrite any such expression with one variable ...
6
votes
2answers
1k views
Run “apereo/cas” docker image prints “Failed to start connector” error
My goal is to run CAS to replace ADFS. I thought starting with the docker image is a good place to begin.
I've tried running two different versions of apereo/cas and both have the same error.
Here's ...
