CAS User Name From Headers After Authentication
Srikar Kummamuri
skummamuri at agentrics.com
Thu Dec 13 12:59:00 EST 2007
Thanks for the help Andrew.
Let me be bit clear here to get specific answer from you for my specific
need.
I am having apache outside the firewall which collects the request and
for matching URL, send the user for authentication and then proxy
forward the request to any app server (I have multiple) behind the
firewall with the ModJK.
Now I am not using any CAS clients on any of these App Servers since No
App Server is tightly coupled with CAS and all of them just receive the
request directly form Apache with the user name in request and construct
the user objects locally. So no authentication redirects at the App
Servers but only at the Proxy Server which is outside firewall.
Now I am working with MicroStrategy which wont expose much API to play
with HttpRequest Object and I don't have capability to use
request.getRemoteUser() and I can only read the HTTP Headers to get the
user name.
I hope I am clear.
Thanks a lot for help.
Srikar
------------------------------------------------------------------------
----------------
Srikar,
Whether and how your application can consume the user name as
authenticated by CAS is entirely a matter of whether and what CAS
client software you use. The Yale Java CAS Client, for example, can
be configured to wrap the ServletRequest to expose this username as
request.getRemoteUser(). But this is an implementation detail of that
particular client library, not a matter of a requirement or feature of
the CAS protocol itself.
If you'd like to consume the CAS user name via request headers,
getting to that point is a matter of developing or using CAS protocol
client binding implementations that accomplish this, e.g. an Apache
module or the like.
I'm afraid this post won't be very concretely helpful in pointing you
to particular software to get the job done, but I do hope it helps to
identify the pieces under discussion here.
Andrew
On Dec 13, 2007, at 10:06 AM, Srikar Kummamuri wrote:
> Is there a way that I can see the CAS user name from the request
> headers after authentication and proxy forward from the apache. I
> used the Oracle SSO earlier and used the request headers to fetch
> the user name when it is not possible to fetch the used name from
> request.getRemoteUser().
>
> Thanks
> Srikar
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu <http://tp.its.yale.edu/mailman/listinfo/cas>
> http://tp.its.yale.edu/mailman/listinfo/cas
________________________________
From: Srikar Kummamuri
Sent: Thursday, December 13, 2007 12:07 PM
To: 'cas at tp.its.yale.edu'
Subject: CAS User Name From Headers After Authentication
Is there a way that I can see the CAS user name from the request headers
after authentication and proxy forward from the apache. I used the
Oracle SSO earlier and used the request headers to fetch the user name
when it is not possible to fetch the used name from
request.getRemoteUser().
Thanks
Srikar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20071213/a51ffcfd/attachment.html
More information about the cas
mailing list