Grouper Users - Open Discussion List

["Singley, Norman" <>]

Hi Chris 

 

Thanks, yes we did add the cas jars to the tomcat library. 

 

I think we need some kind of security restraint in web.xml for cas, but I’m not sure what.  When some entries are there, it will go out to CAS to authenticate, but if I strip them all, then I never see CAS and I get the not-authenticated error. 

 

 

Norman Singley

Directory Services

406 243 6799

 

 

 

 

 

From: Hyzer, Chris [mailto:]
Sent: Wednesday, November 02, 2016 1:02 PM
To: Singley, Norman; Mailing List
Subject: RE: Grouper CAS -Shib authentication

 

I assume you added the cas jars to the tomcat library dir?

 

Does someone know if you need security constraints in web.xml for cas?

 

Maybe you could ask this on a CAS mailing list if someone here cannot help?

 

Thanks

Chris

 

From: [] On Behalf Of Singley, Norman
Sent: Wednesday, November 02, 2016 2:37 PM
To:
Subject: [grouper-users] Grouper CAS -Shib authentication

 

Hi folks.

 

I’m working on this CAS authentication piece for grouper 2.3 again, and I am still stuck.  Here’s the current status. 

 

I removed the security constraints from web.xml files:

 

/grouper/grouper.ws-2.3.0/grouper-ws/webapp/WEB-INF/web.xml

/grouper/grouper.ui-2.3.0/dist/grouper/WEB-INF/web.xml

 

 

 

Now when I hit the url, I don’t seem to get redirected to CAS/Shib.  I don’t get the tomcat 403 error, but the application errors:

 

 

 

 

Anything else I can provide to help troubleshoot?  Again, thanks for all the help.

 

 

Norman Singley

Directory Services

406 243 6799