User management when using CAS
Robert Oschwald
robertoschwald at yahoo.de
Tue Dec 16 03:18:44 EST 2008
CAS does not store userdata itself, but uses Authentication Adapters
(LDAP, DB) to access / authenticate user data.
I for example use LDAP, SearchModeSearchDBAdapters or Spring WS Client
to authenticate agains authentication applications.
Robert
Am 16.12.2008 um 08:17 schrieb Mehdi Sarmadi:
> David
>
> The good news is application could be modified, developers
> cooperate and would use phpCAS. And it's not deployed yet.
>
> For now, they have their own user management, and user profile
> +credentials are in their own database.
>
> The question that they have is, what will happen to user
> credentials(username/password). in using CAS. Will those credentials
> stored in CAS's own DB and they wouldn't have users' credentials
>
> As far as I know, authentication information for each user is
> stored in CAS's own DB. If it is correct, for user creation, should
> they send a create query to CAS, that tells CAS to create an entry
> for new user corresponding a new user in their own DB?
>
> TIA
> Regards
> --
> Mehdi Sarmadi
>
>
> On Mon, Dec 15, 2008 at 11:55 PM, David Whitehurst <dlwhitehurst at gmail.com
> > wrote:
> Mehdi:
>
> Where are your users stored? If they use an authentication method
> that CAS supports, the application could be changed to require CAS
> authentication prior to seeing application content. If the
> application cannot be modified you may have an issue. CAS is used
> as an authentication filter prior to application entry.
>
> David
>
>
> On 12/15/08, Mehdi Sarmadi <msarmadi at gmail.com> wrote:
> Dear All
>
> Assuming an architecture that CAS is in use(say using Spring in a
> Java Web App)
> How user management would be changed?
> For example, is there a function in CAS Library which makes user
> add to CAS possible? which the application's user manager will be
> able to add user to its user DB and the CAS simultaneously? Or an
> API which makes CAS's user list enomuration possible for a web
> application?
>
> TIA
> Cheers
> --
> Mehdi Sarmadi
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20081216/0dba4ae5/attachment.html
More information about the cas
mailing list