User management when using CAS

Robert Oschwald robertoschwald at yahoo.de
Tue Dec 16 03:18:44 EST 2008


CAS does not store userdata itself, but uses Authentication Adapters  
(LDAP, DB) to access / authenticate user data.
I for example use LDAP, SearchModeSearchDBAdapters or Spring WS Client  
to authenticate agains authentication applications.

Robert

Am 16.12.2008 um 08:17 schrieb Mehdi Sarmadi:

> David
>
>   The good news is application could be modified, developers  
> cooperate and would use phpCAS. And it's not deployed yet.
>
>   For now, they have their own user management, and user profile 
> +credentials are in their own database.
>
>   The question that they have is, what will happen to user  
> credentials(username/password). in using CAS. Will those credentials  
> stored in CAS's own DB and they wouldn't have users' credentials
>
>   As far as I know, authentication information for each user is  
> stored in CAS's own DB. If it is correct, for user creation, should  
> they send a create query to CAS, that tells CAS to create an entry  
> for new user corresponding a new user in their own DB?
>
> TIA
> Regards
> --
> Mehdi Sarmadi
>
>
> On Mon, Dec 15, 2008 at 11:55 PM, David Whitehurst <dlwhitehurst at gmail.com 
> > wrote:
> Mehdi:
>
> Where are your users stored?  If they use an authentication method  
> that CAS supports, the application could be changed to require CAS  
> authentication prior to seeing application content.  If the  
> application cannot be modified you may have an issue.  CAS is used  
> as an authentication filter prior to application entry.
>
> David
>
>
> On 12/15/08, Mehdi Sarmadi <msarmadi at gmail.com> wrote:
> Dear All
>
>   Assuming an architecture that CAS is in use(say using Spring in a  
> Java Web App)
>   How user management would be changed?
>   For example, is there a function in CAS Library which makes user  
> add to CAS possible? which the application's user manager will be  
> able to add user to its user DB and the CAS simultaneously? Or an  
> API which makes CAS's user list enomuration possible for a web  
> application?
>
> TIA
> Cheers
> --
> Mehdi Sarmadi
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20081216/0dba4ae5/attachment.html 


More information about the cas mailing list