CAS protocol questions

[Paul B. Henson]

> From: Marvin Addison
> Sent: Friday, February 19, 2016 12:23 PM
>
> > 	I thought it had to be a URL in the namespace of the service?
> 
> There's no CAS server implementation I'm aware of that enforces that kind
> of constraint.

Ah, interesting; I did not realize that. In that case, I now understand the security issue you are pointing out. Fortunately, uportal is the only CAS application we allow to proxy, so it should be simple enough to include just its actual certificate.

Thanks for the explanation…

--
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768