[cas-dev] pam_cas, IIS

[Howard Gilbert]

Currently Yale has no developer actively working on either of these modules,
so if someone wants to pick up a ball and run with it they will not be in
conflict with any other development. That said, ISAPI filters run in one of
the world's most difficult execution environments, trying to juggle the C++
conventions for building a COM server that runs under a Service. While the
API remains the same, the environment changes radically from one IIS release
to the next. The CAS protocol is only a small part of the problem. 

-----Original Message-----
From: cas-dev-bounces at tp.its.yale.edu
[mailto:cas-dev-bounces at tp.its.yale.edu] On Behalf Of Smith, Matt
Sent: Monday, March 31, 2008 12:02 PM
To: CAS Developers Mailing List
Subject: [cas-dev] pam_cas, IIS

All-
  Two questions:
  1) Is there an official "pam_cas"?
  2) Is there an official IIS CAS filter?

  I pose these questions on cas-dev because of a thought I had while porting
mod_auth_cas to Apache on Windows.  I'm considering development of a libcas
that externalizes the CAS protocol, leveraging curl for HTTPS handling and
expat for XML handling.  Done properly, this could be leveraged by any CAS
client implementation written in C, including pam_cas and an IIS filter.  I
would not suggest rewriting something that already works and is "official",
(if it ain't broke ...), but I do not know what the state of pam_cas and an
IIS filter are.

  My thinking, though, is that much could be gained by having a
cross-platform C library that pam_cas, IIS cas, and mod_auth_cas could all
leverage.  Ensuring common protocol support (CAS 1.x/2.x) and adding new
functionality (e.g., SAML support) could be simplified.

  Before I think any further about this or spend any further time
prototyping, I was hoping for some feedback.

Any thoughts?
-Matt

--
Matt Smith
matt.smith at uconn.edu
University Information Technology Services (UITS) University of Connecticut
PGP Key ID: 0xE9C5244E