[cas-dev] CAS-452

[March, Andres]

Thanks for the explanation.  Should CAS provide some default
implementation to handle save password functionality?  I have everything
but this piece implemented already.  In fact, I could even do what you
suggest without your changes if I cast the ticket state to a type that
has a getter for the auth.  I'm just wondering if implementing this in a
generic way is more beneficial than having first-class support for
having longer lived tickets.

 

- Andres

________________________________

From: cas-dev-bounces at tp.its.yale.edu
[mailto:cas-dev-bounces at tp.its.yale.edu] On Behalf Of Scott Battaglia
Sent: Tuesday, February 20, 2007 2:24 PM
To: Mailing list for CAS developers
Subject: Re: [cas-dev] CAS-452

 

Basically what you are asking for is a way to confirm that you consider
the Authentication strong/valid enough to persist for more than the
normal period of time.

A MetaDataPopulator allows you to look at the Credentials and specify an
attribute on the Authentication object ( i.e. attribute "strong" is
"true") that is available in your ExpirationPolicy.

Its not modifying the authentication object as supply meta data to it to
assist in decision making.

-Scott

On 2/20/07, March, Andres <amarch at soe.sony.com> wrote:

On second thought, was the intention that we modify the authentication
to carry that info?  And then we can extract it from the auth in the
expiration policy?

 

- Andres

________________________________

From: cas-dev-bounces at tp.its.yale.edu [mailto:
cas-dev-bounces at tp.its.yale.edu] On Behalf Of March, Andres
Sent: Tuesday, February 20, 2007 1:32 PM
To: Mailing list for CAS developers
Subject: [cas-dev] CAS-452

 

I'm not sure how this resolution addresses the use case that I cited in
the issue.  We need to know the credentials in the TicketGenerator in
order to create a ticket that can be recognized by the expiration policy
as short-lived or long-lived.

 

  

Andres March

Platform - Application Engineering

Sony Online Entertainment

desk: 858.577.3373

cell:   619.519.1519

 

 

 


_______________________________________________
cas-dev mailing list
cas-dev at tp.its.yale.edu
http://tp.its.yale.edu/mailman/listinfo/cas-dev

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas-dev/attachments/20070220/4a6fdc07/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 103 bytes
Desc: image001.gif
Url : http://tp.its.yale.edu/pipermail/cas-dev/attachments/20070220/4a6fdc07/attachment.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 73 bytes
Desc: image002.gif
Url : http://tp.its.yale.edu/pipermail/cas-dev/attachments/20070220/4a6fdc07/attachment-0001.gif 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 73 bytes
Desc: image003.gif
Url : http://tp.its.yale.edu/pipermail/cas-dev/attachments/20070220/4a6fdc07/attachment-0002.gif