ACEGI, CAS and stateless clients

[Scott Battaglia]

Eric,

Take a look at:
http://www.ja-sig.org/products/cas/overview/proxy_auth/index.html

It details Proxy Authentication and there are links to the actual protocol.
If you plan on using Acegi, take a look at www.acegisecurity.org.  There's a
guide that details how to CASify an application.  There should also be
information on passing a CAS ticket via BASIC Auth.

-Scott

On 9/27/07, Eric Miles <eric.miles at kronos.com> wrote:
>
> I too am about to go down this road at looking to use CAS for
> authentication for stateless clients (web services).  I have CAS
> integrated into a web application, so I have knowledge of how that works
> and how it all ties togeter.  However, I'm unsure as to where to begin
> to look at using CAS for stateless clients.  Do you have any suggestions
> about where to look for documents and/or examples for this?
>
> Thanks so much.
>
> Eric
>
>
> Bill Bailey wrote:
> > Never mind. I found my answer. It was right in front of me all along. It
> > is explicitly provided in the configuration of the ServiceProperties
> > used to configure the ProxyTicketValidator.
> >
> >
> > Bill
> >
> >
> >
> >
> >
> > ------------------------------------------------------------------------
> >
> > *From:* cas-bounces at tp.its.yale.edu
> > [mailto:cas-bounces at tp.its.yale.edu] *On Behalf
> > Of *Bill Bailey
> > *Sent:* Monday, August 06, 2007 11:21 AM
> > *To:* Yale CAS mailing list
> > *Subject:* ACEGI, CAS and stateless clients
> >
> >
> >
> > Hi,
> >
> >
> >
> > I am using Spring-WS, ACEGI, and CAS together to add security to my web
> > services. I have gotten as far as generating a proxy ticket for the web
> > services to use, but I cannot determine what service I should say the
> > ticket is for because I can't figure out what ACEGI passes as the name
> > of the service when it validates the ticket.
> >
> >
> >
> > Can anyone tell me how ACEGI forms the service name when it calls
> > proxyValidate? I have tried the name of the URL that represents the web
> > service endpoint, but it doesn't seem to work. And I can't find the URL
> > logged anywhere in the CAS log files so I can tell what service I should
> > be using.
> >
> >
> >
> > Thanks.
> >
> >
> > Bill
> >
> >
> >
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>



-- 
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070928/34461158/attachment.html