[cas-dev] Making CAS authentication parameterizable

Harry Ng harryworld at gmail.com
Tue Feb 27 22:23:02 EST 2007


Steve,

Day back to your post on mid-Dec, 2006, what did you modify on the clients?

Firstly, are you using the java client implemented by Yale? If, in case, I
would like to use that java client and make some modifications, do you know
where should I modify?

I have read some codes in the java client, and found that extending
"edu.yale.its.tp.cas.client.ProxyTicketValidator" and its handler shall be a
way, since it is the original mechanism on parsing the response from the CAS
Server.

Other suggestions are welcome.

Thanks,
Harry


Stephen A. Cochran wrote:
> 
> 
> Modification to the clients to extract the new fields from the XML  
> are also required. This is the biggest gotcha, it means you can't  
> simply use the standard clients out-of-the-box. Also the biggest  
> reason why I hope the CAS project standardizes on a way to add  
> attributes to the response. It's fairly easy to design the clients to  
> pull out any XML fields and create some kind of hash or array  
> appropriate to the programming language. We've been slowly adding  
> client support here, we currently have an apache module, plsql  
> procedure, ruby module, and a java filter. Next on my list is a perl  
> module.
> 
> Only the apache module is currently in the subversion directory, they  
> are all a little rough right now. I'm hoping to clean them up and get  
> them in there in a releasable state.
> 
> Steve
> 
> 
> On Dec 11, 2006, at 6:42 AM, Jean-Noel Colin wrote:
> 
>> Thanks a lot for your response; I fully agree with you, it's more  
>> an authorization problem. I will look into the way you propose,  
>> i.e. having the application make the authorization decision. I  
>> guess I have to write my own Principal and  
>> CredentialToPrincipalResolver classes, and then update the  
>> deployerConfigContext.xml file. Is this correct?
> 
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
> 
> 

-- 
View this message in context: http://www.nabble.com/Making-CAS-authentication-parameterizable-tf2779911.html#a9197402
Sent from the CAS Users mailing list archive at Nabble.com.



More information about the cas mailing list