CAS server authenticating Uportal
Fawad Rashid
fwdrsd at hotmail.com
Thu May 3 12:56:32 EDT 2007
Hi
Is there a definative guide to CASifying uPortal ?. The no frills guide
doesn't seem to help.
I am currently using uPortal 2.5.3 & CAS 2.0.12.
Regards
Fawad Rashid
_____
From: Fawad Rashid [mailto:fwdrsd at hotmail.com]
Sent: Wednesday, April 18, 2007 10:10 AM
To: 'Yale CAS mailing list'
Subject: RE: CAS server authenticating Uportal
Hi Andrew
I tried edu.yale.its.tp.portal.security.YaleCasFilteredContextFactory and
now after the CAS login i am being redirected to uPortal's login page where
i am seeing the following error " An error occured during
authentication. The portal is unable to log you on at this time. Try again
later.". I am entering "admin/admin" as the username and password.
I have also gone over the tomcat logs but i cannot see any errors. On the
tomcat console i see the following message
2007-04-18 10:01:26,828 INFO
[org.jasig.cas.web.flow.AutomaticCookiePathSetterAc
tion] - <Setting ContextPath for cookies to: /cas>
2007-04-18 10:01:29,750 INFO
[org.jasig.cas.authentication.AuthenticationManager
Impl] - <AuthenticationHandler:
org.jasig.cas.authentication.handler.support.Sim
pleTestUsernamePasswordAuthenticationHandler successfully authenticated the
user
which provided the following credentials: admin>
2007-04-18 10:01:29,750 INFO
[org.jasig.cas.CentralAuthenticationServiceImpl] -
<Granted service ticket [ST-2-hJZp3EKrbF4fRgkoGgc2Xzbga2IM1ipPOhQ-20] for
servic
e [http://localhost:8088/uPortal/Login] for user [admin]>
On the uPortal login screen when i try entering login & pwd admin/admin i am
getting the same error as mentioned above. What could be the reason for
this?.
Regards
Fawad
_____
From: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] On
Behalf Of Andrew Petro
Sent: Tuesday, April 17, 2007 10:35 PM
To: Yale CAS mailing list
Subject: Re: CAS server authenticating Uportal
Fawad,
I think it will work if you use
root=edu.yale.its.tp.portal.security.YaleCasFilteredContextFactory
as documented in the No Frills Guide to CASifying uPortal that you link.
That approach requires the Yale-developed casclient.jar and
cas-security-provider.jar. I believe these ship with uPortal 2.5.3.
uPortal CASification is presently in an unfortunate place where there's a
JA-SIG Java CAS client library that duplicates the functionality of the Yale
Java CAS client and uPortal security contexts, but the documentation and
particularly the uPortal source have not caught up with these changes.
Andrew
Fawad Rashid wrote:
Hi
I have managed to setup CAS with SSO using SSL, i have setup a CAS server
which is authenticating properly. Now i need to CASify a uPortal deployment.
My CAS server deployment should authenticate the uPortal deployment. Is
there a guide around somewhere for achieving this, i have gone through the
mailing list but so far i havent found what i am looking for. I am using CAS
3.0.7 & uPortal 2.5.3. I have already tried the following guide but i
believe it is a Yale implementation
http://www.ja-sig.org/wiki/display/CASC/No+Frills+CASify+uPortal
Changes that i have made are as follows
Security.properties
=========================================================
# This is the factory that supplies the concrete authentication class
root=org.jasig.cas.client.integration.uportal.CasSecurityContextFactory
#root=org.jasig.portal.security.provider.SimpleSecurityContextFactory
#root.cas=org.jasig.portal.security.provider.cas.CasFilteredSecurityContextF
actory
#root=org.jasig.portal.security.provider.YaleCasContextFactory
credentialToken.root.cas=ticket
=========================================================
=========================================================
web.xml
<filter>
<filter-name>CAS Validate Filter</filter-name>
<filter-class>edu.yale.its.tp.cas.client.filter.CASValidateFilter</filter-cl
ass>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
<param-value>https://localhost:8443/cas/login</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
<param-value>https://localhost:8443/cas/serviceValidate</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
<param-value>localhost:8088</param-value>
</init-param>
</filter>
<filter>
<filter-name>CAS Receipt Cacher</filter-name>
<filter-class>edu.yale.its.tp.cas.client.filter.StaticCasReceiptCacherFilter
</filter-class>
</filter>
<filter-mapping>
<filter-name>CAS Validate Filter</filter-name>
<url-pattern>/Login</url-pattern>
</filter-mapping>
<filter-mapping>
<filter-name>CAS Receipt Cacher</filter-name>
<url-pattern>/Login</url-pattern>
</filter-mapping>
===========================================================================
I am getting the following error (http://localhost:8088/uPortal/)
<http://localhost:8088/uPortal/%29.> Using the default
SimpleSecurityContextFactory
everything works fine expect that i have to relogin to the uPortal using
the uPortal login page.
uPortal Error
Sorry, but uPortal encountered an error that is preventing it from
rendering. The error must be corrected by system administrators. Try again
later.
_____
_______________________________________________
Yale CAS mailing list
cas at tp.its.yale.edu
http://tp.its.yale.edu/mailman/listinfo/cas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070503/e3be3ef4/attachment.html
More information about the cas
mailing list