Question about CAS and Shibboleth v4.0.1

Joseph Fischetti Joseph.Fischetti at marist.edu
Thu Jun 11 17:29:15 UTC 2020


Scott,
That's major.  As always, thanks for taking the time to talk through things.

I'll update our cas-protocol.xml so it doesn't try to look at a metadata registry anymore, or I'll move it so it looks it up after the local registry.  At least the warnings will be gone.

Joe
-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Thursday, June 11, 2020 12:08 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Question about CAS and Shibboleth v4.0.1

[EXTERNAL EMAIL]

On 6/11/20, 11:42 AM, "users on behalf of Joseph Fischetti" <users-bounces at shibboleth.net on behalf of Joseph.Fischetti at marist.edu> wrote:

> What tells the IdP to look in metadata for CAS services?

Your copy of cas-protocol.xml is probably just pre-3.whatever and doesn't have this comment inside it.

    <!--
       | Uncomment this bean if you want to override the default list of CAS service registries.
       | The default configuration tries to find the relying party in a SAML metadata source and falls back to
       | reloadableServiceRegistry if a match is not found.
       -->
    <!--<util:list id="shibboleth.CASServiceRegistries">
        <ref bean="shibboleth.CASMetadataServiceRegistry" />
        <ref bean="shibboleth.CASServiceRegistry" />
    </util:list>-->

The CAS docs are very implicit and rely on reading comments in files.

-- Scott


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list