Shibboleth IDP 3 as CAS Server

[Jesse Martinich]

Thanks! I'm glad most of what I've copy and pasted is correct.

I'll upgrade the cert to SHA2 to rule that out.

I was getting ticket validation errors, but they subsided when I turned on
CASValidateServer, if I recall correctly.

Jesse


*Jesse Martinich*
Systems Administrator
Southern Oregon University | 1250 Siskiyou Blvd | Ashland OR  97520
541-552-8424


Why I'm at SOU: https://www.youtube.com/watch?v=Ski0MzPd5IM

On Thu, Jun 11, 2015 at 12:44 PM, Jesse Martinich <martinicj at sou.edu> wrote:

> Well thank you for the info. Marvin pointed me to this list. I look
> forward to learning more.
>
> Jesse
>
>
> *Jesse Martinich*
> Systems Administrator
> Southern Oregon University | 1250 Siskiyou Blvd | Ashland OR  97520
> 541-552-8424
>
>
> Why I'm at SOU: https://www.youtube.com/watch?v=Ski0MzPd5IM
>
> On Thu, Jun 11, 2015 at 12:39 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> On 6/11/15, 7:36 PM, "Jesse Martinich" <martinicj at sou.edu> wrote:
>>
>>
>>
>> >I took from the CAS protocol configuration documentation
>> >(
>> https://wiki.shibboleth.net/confluence/display/IDP30/CasProtocolConfigura
>> >tion) that there were
>> > was nothing in the way of relying party config beyond the
>> >defaultRelyingParty bean. It seems that the serviceRegistry takes the
>> >place of metadata configuration for CAS services. I assume there is
>> >something analogous to the attribute-filter for registered CAS
>> > services?
>>
>> I'm guessing yes, but Marvin would have to help with that. He's also
>> working on making it possible to use SAML metadata for that and then I
>> think the filter layer would be the same in both, but that's all true now.
>> I would assume some kind of filter rule is needed (there's only one filter
>> component, nothing specific to CAS), but I don't know what it would look
>> like.
>>
>> >Is there somewhere else I could look for documentation?
>>
>> Not that I'm aware.
>>
>> -- Scott
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150611/fa24449d/attachment-0001.html>