for precision, I tested with FranceConnect Oidc server Le mercredi 31 août 2016 18:04:59 UTC+2, Aymar Anli a écrit : > > - issue done <https://github.com/apereo/cas/issues/1970> > - bug fixed in cas 4.2.5 > > It works well now for me (test with tomcat 7 and cas 4.2.5-SNAPSHOT) > > Thx very much Misagh! > Best regards > > Le mercredi 17 août 2016 18:46:05 UTC+2, Misagh Moayyed a écrit : >> >> Post your overlay here https://github.com/cas-projects/cas-issues please. >> >> -- >> Misagh >> >> From: Aymar Anli <[email protected]> >> Reply: Aymar Anli <[email protected]> >> Date: August 17, 2016 at 7:13:38 AM >> To: CAS Community <[email protected]> >> Cc: [email protected] <[email protected]> >> Subject: Re: [cas-user] Re: CAS 4.2.1 as google openid connect client >> >> >> Hi Jérôme, >> >> Thx very much for your reply. >> Oidc works well with your demo. >> Note: your demo google oidc id doesn't authorize http://localhost:8080 URI >> >> If I follow instructions at >> https://apereo.github.io/cas/4.2.x/integration/Delegate-Authentication.html >> it doesn't work. >> In your demo pom.xml you included other dependencies instead of >> "cas-server-support-pac4j-webflow". >> >> Thanks, >> regards, >> Aymar >> >> >> Le mercredi 17 août 2016 10:26:34 UTC+2, leleuj a écrit : >>> >>> Hi, >>> >>> I just upgraded my demo with OpenID Connect support: >>> https://github.com/leleuj/cas-pac4j-oauth-demo/commit/634c8b5564e50b4e98cf9addeb46c6887cace69f >>> >>> and it works for 4.2.3 and 4.2.4. >>> >>> The "Oidc" link redirects me to Google. >>> >>> Thanks. >>> Best regards, >>> Jérôme >>> >>> >>> 2016-08-16 16:23 GMT+02:00 Aymar Anli <[email protected]>: >>> >>>> Hi, >>>> >>>> It doesn't work for me too. >>>> >>>> In cas.properties >>>> cas.pac4j.oidc.id=<xxx>.apps.googleusercontent.com >>>> cas.pac4j.oidc.secret=<xxx> >>>> cas.pac4j.oidc.discoveryUri= >>>> https://accounts.google.com/.well-known/openid-configuration >>>> >>>> I have "Cas is Unavailable" when I click to Oidc link ( >>>> http://localhost:8080/cas/login?client_name=OidcClient&needs_client_redirection=true >>>> ) >>>> >>>> Nothing special in the log file (debug level). >>>> >>>> CAS 4.2.4 >>>> test with tomcat 7.0.69 and tomcat 8.5.4 >>>> java 1.7.0_95 >>>> >>>> Note : It works well with Oauth server (facebook) and with CAS server. >>>> None with OIDC (google) >>>> >>>> Any help would be appreciated, >>>> Regards, >>>> Aymar >>>> >>>> Le lundi 2 mai 2016 23:07:41 UTC+2, Bryce Nordgren a écrit : >>>>> >>>>> Trying to add Google as an OpenID Connect provider to a CAS 4.2.1 >>>>> installation having LDAP/AD. Following the instructions on >>>>> http://jasig.github.io/cas/4.2.x/integration/Delegate-Authentication.html, >>>>> >>>>> I added the dependency to the pom and redeployed the webapp. I got a >>>>> client >>>>> id and a secret from google, and placed them in the cas.properties file >>>>> (but I have a lot of blanks I don't know what to do with): >>>>> >>>>> cas.pac4j.oidc.id=<mine>.apps.googleusercontent.com >>>>> cas.pac4j.oidc.secret=<secret> >>>>> cas.pac4j.oidc.discoveryUri=https:// >>>>> accounts.google.com/.well-known/openid-configuration >>>>> # cas.pac4j.oidc.useNonce= >>>>> # cas.pac4j.oidc.preferredJwsAlgorithm= >>>>> # cas.pac4j.oidc.maxClockSkew= >>>>> # cas.pac4j.oidc.customParamKey1= >>>>> # cas.pac4j.oidc.customParamValue1= >>>>> # cas.pac4j.oidc.customParamKey2= >>>>> # cas.pac4j.oidc.customParamValue2= >>>>> >>>>> When I go to the login screen, it says "Or login with: Oidc". First, I >>>>> want that to say "or login with Google" and show the google logo. Is >>>>> there >>>>> a way to do that? Second, clicking on the link just takes me to my own >>>>> site >>>>> and displays the error page: >>>>> >>>>> 2016-05-02 20:03:00,762 DEBUG [org.jasig.cas.support.pac4j.web.flow. >>>>> ClientAction] - Oidc -> http: >>>>> //mine:8080/cas/login?client_name=OidcClient&needs_client_redirection=true >>>>> >>>>> Note: instead of "mine:8080", the log actually lists my real DNS name. >>>>> Also, I'm proxying through apache httpd, and until now I had no reason to >>>>> have port 8080 open. Can I make it use https://mine:443/? I have >>>>> found nothing in the logs related to landing on the error page. However, >>>>> when Tomcat starts up, I get many errors similar to these: >>>>> >>>>> SEVERE: Unable to process Jar entry [javassist/util/proxy/ >>>>> SerializedProxy.class] from Jar [jar:file:/usr/share/tomcat/webapps/ >>>>> cas/WEB-INF/lib/javassist-3.19.0-GA.jar!/] for annotations >>>>> java.io.EOFException >>>>> >>>>> These errors were not present before I added the pac4j maven >>>>> dependency. I've seen some indications on the web that I might be able to >>>>> ignore this(?): >>>>> https://bz.apache.org/bugzilla/show_bug.cgi?id=57173#c16 ? >>>>> >>>>> I am using a Centos 7 box with Tomcat 7.0.54 and this environment: >>>>> >>>>> ******************** Welcome to CAS ******************* >>>>> CAS Version: 4.2.1 >>>>> Build Date/Time: 2016-04-01T05:04:30.000Z >>>>> Java Home: /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.91-0.b14.el7_2.x86_64 >>>>> /jre >>>>> Java Vendor: Oracle Corporation >>>>> Java Version: 1.8.0_91 >>>>> OS Architecture: amd64 >>>>> OS Name: Linux >>>>> OS Version: 3.10.0-327.13.1.el7.x86_64 >>>>> ******************************************************* >>>>> >>>>> Any help would be appreciated. >>>>> Thanks much, >>>>> Bryce >>>>> >>>>> >>>>> -- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To post to this group, send email to [email protected]. >>>> Visit this group at >>>> https://groups.google.com/a/apereo.org/group/cas-user/. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/2d0452f7-6244-48e9-8d1c-ff13720f6584%40apereo.org >>>> >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/2d0452f7-6244-48e9-8d1c-ff13720f6584%40apereo.org?utm_medium=email&utm_source=footer> >>>> . >>>> For more options, visit https://groups.google.com/a/apereo.org/d/optout >>>> . >>>> >>> >>> -- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> Visit this group at >> https://groups.google.com/a/apereo.org/group/cas-user/. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/029c5b37-f4ee-45df-b62b-dfdf4014e494%40apereo.org >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/029c5b37-f4ee-45df-b62b-dfdf4014e494%40apereo.org?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/a/apereo.org/d/optout. >> >>
-- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d5218692-ab5a-4d84-9c82-89e6abf9b2d8%40apereo.org. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
