cas.adminPagesSecurity.ip=127\.0\.0\.1

logging.config: file:/etc/cas/config/log4j2.xml
# cas.serviceRegistry.config.location: classpath:/services

##
# CAS Thymeleaf Views
#
spring.thymeleaf.cache=false
spring.thymeleaf.mode=HTML
spring.thymeleaf.encoding=UTF-8
# spring.thymeleaf.prefix=classpath:/templates/
##
# Embedded CAS Tomcat Container
#
server.context-path=/cas-management
server.port=8443
server.ssl.key-store=file:/etc/cas/thekeystore
server.ssl.key-store-password=changeit
server.ssl.key-password=changeit

##
# Log4J Configuration
#
server.context-parameters.isLog4jAutoInitializationDisabled=true
# logging.config=file:/etc/cas/log4j2.xml

##
# CAS
#
cas.server.name=https://accounts.wavity.net:15002
cas.server.prefix=${cas.server.name}/cas

cas.mgmt.serverName=https://accounts.wavity.net:8443

##
# CAS Authentication Attributes
#
cas.authn.attributeRepository.attributes.uid=uid
cas.authn.attributeRepository.attributes.displayName=displayName
cas.authn.attributeRepository.attributes.cn=commonName
cas.authn.attributeRepository.attributes.affiliation=groupMembership
cas.authn.attributeRepository.attributes.lastName=lastName
cas.authn.attributeRepository.attributes.firstName=firstName
cas.authn.attributeRepository.attributes.givenName=givenName
##
# CAS Web Application Config
#
server.session.timeout=1800
server.session.cookie.http-only=true
server.session.tracking-modes=COOKIE

##
# CAS Cloud Bus Configuration
# Please leave spring.cloud.bus.enabled set to false
#
spring.cloud.bus.enabled=false


#========================================
# General LDAP properties
#========================================
 cas.authn.attributeRepository.ldap.ldapUrl=casuser:389
 cas.authn.attributeRepository.ldap.useSsl=false
 cas.authn.attributeRepository.ldap.useStartTls=false
 cas.authn.attributeRepository.ldap.connectTimeout=3000
 cas.authn.attributeRepository.ldap.baseDn=ou=People,cn=%s,o=Tenants,dc=wavity,dc=com
 cas.authn.attributeRepository.ldap.userFilter=(mail={user})
 cas.authn.attributeRepository.ldap.subtreeSearch=true
 cas.authn.attributeRepository.ldap.bindDn=cn=cas admin
 cas.authn.attributeRepository.ldap.bindCredential=Password
 cas.authn.attributeRepository.ldap.trustCertificates=
 cas.authn.attributeRepository.ldap.keystore=
 cas.authn.attributeRepository.ldap.keystorePassword=
 cas.authn.attributeRepository.ldap.keystoreType=JKS|JCEKS|PKCS12
 cas.authn.attributeRepository.ldap.minPoolSize=0
 cas.authn.attributeRepository.ldap.maxPoolSize=10
 cas.authn.attributeRepository.ldap.validateOnCheckin=false
 cas.authn.attributeRepository.ldap.validateOnCheckout=false
 cas.authn.attributeRepository.ldap.validatePeriodically=true
 cas.authn.attributeRepository.ldap.validatePeriod=1800
 cas.authn.attributeRepository.ldap.failFast=true
 cas.authn.attributeRepository.ldap.idleTime=600
 cas.authn.attributeRepository.ldap.prunePeriod=300
 cas.authn.attributeRepository.ldap.blockWaitTime=3000
# cas.authn.attributeRepository.ldap.providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider



#========================================
# Service Tickets Expiration 
#========================================

# cas.ticket.st.maxLength=20

cas.ticket.st.numberOfUses=3
cas.ticket.st.timeToKillInSeconds=60


#========================================
# Eh-cache Ticket Registry
#========================================

 #cas.ticket.registry.ehcache.replicateUpdatesViaCopy=true
 #cas.ticket.registry.ehcache.cacheManagerName=ticketRegistryCacheManager
 #cas.ticket.registry.ehcache.replicatePuts=true
 #cas.ticket.registry.ehcache.replicateUpdates=true
 #cas.ticket.registry.ehcache.memoryStoreEvictionPolicy=LRU
# cas.ticket.registry.ehcache.configLocation=classpath:/ehcache-replicated.xml
 #cas.ticket.registry.ehcache.configLocation=/WEB-INF/ehcache-replicated.xml
# cas.ticket.registry.ehcache.maximumBatchSize=100
 #cas.ticket.registry.ehcache.shared=true
# cas.ticket.registry.ehcache.replicationInterval=10000
# cas.ticket.registry.ehcache.cacheTimeToLive=2147483647
 #cas.ticket.registry.ehcache.diskExpiryThreadIntervalSeconds=0
 #cas.ticket.registry.ehcache.replicateRemovals=true
 #cas.ticket.registry.ehcache.maxChunkSize=5000000
 #cas.ticket.registry.ehcache.maxElementsOnDisk=0
# cas.ticket.registry.ehcache.maxElementsInCache=0
 #cas.ticket.registry.ehcache.maxElementsInMemory=10000
# cas.ticket.registry.ehcache.cacheName=org.apereo.cas.ticket.TicketCache
# cas.ticket.registry.ehcache.eternal=false
# cas.ticket.registry.ehcache.loaderAsync=true
# cas.ticket.registry.ehcache.replicatePutsViaCopy=true
# cas.ticket.registry.ehcache.cacheTimeToIdle=0
# cas.ticket.registry.ehcache.persistence=LOCALTEMPSWAP|NONE|LOCALRESTARTABLE|DISTRIBUTED
# cas.ticket.registry.ehcache.synchronousWrites=

# cas.ticket.registry.ehcache.crypto.signing.key=
# cas.ticket.registry.ehcache.crypto.signing.keySize=512
# cas.ticket.registry.ehcache.crypto.encryption.key=
# cas.ticket.registry.ehcache.crypto.encryption.keySize=16
# cas.ticket.registry.ehcache.crypto.alg=AES


#========================================
# TGT Expiration
#========================================

# Set to a negative value to never expire tickets
 cas.ticket.tgt.maxTimeToLiveInSeconds=86400
 cas.ticket.tgt.timeToKillInSeconds=7200
 # cas.ticket.tgt.onlyTrackMostRecentSession=true
# cas.ticket.tgt.maxLength=50

#The throttled timeout policy extends the Timeout policy with the concept of throttling where a ticket may be used at most every N seconds.
 cas.ticket.tgt.throttledTimeout.timeToKillInSeconds=3600
 cas.ticket.tgt.throttledTimeout.timeInBetweenUsesInSeconds=5

#The hard timeout policy provides for finite ticket lifetime as measured from the time of creation.
# cas.ticket.tgt.hardTimeout.timeToKillInSeconds=28800
