This article turns to self-blog, reprint please declare address: http://www.heartlifes.com/archives/7/ background:
1. The project uses Yale's CAs for single sign-on. 2. Using the Spring-oauth package to implement OAUTH2 Services 3. Use Spring-cas to do spring-security and CAS integration phenomena:
Development reported a bug, the approximate process is the system
This article transferred from: http://www.cnblogs.com/flying607/p/7598248.html
1. Download Overlay
By reading the official website document (https://apereo.github.io/cas/5.1.x/planning/Getting-Started.html), we know that we are advised by:
By using a project called overlay to generate a war package that can be used directly, to deploy the service side, we first download the project, the official website gives two architecture format:
I use Maven he
Download Cas-server 4.4.0 http://download.csdn.net/download/knight_black_bob/9698176
Cas-server Tomcat http://download.csdn.net/download/knight_black_bob/9698717
CAS client SPRINGMVC http://download.csdn.net/download/knight_black_bob/9698720
Code has been uploaded,
Which SPRINGMVC +hibernate package is very useful, we can learn the next
1. Generate Keychain J
In the previous article, a simple authentication method and password must start with the user name. In previous projects, LDAP was often used as the unified authentication source for single-point logon. Therefore, we wanted to extend an LDAP authentication method. I usually use the following LDAP servers in my project: SunOne LDAP, Oracle Internet Directory, Oracle Directory Server Enterprise Edition, and Oracle Unified Directory. These are some commercial LDAP products that are already familiar
itoo CAS I was responsible for leading the study for a period of time, seemingly quit to make, but it has been morbid, as the saying goes, the disease is to be cured, can not cure to find a way to be cured, The original road has been to find us in the wrong where, why not realize the vicious circle. In fact, we can jump out of this cycle, in another way to solve the problem. Now that the current cas
Login-webflow is when you enter https://uia.comsys.net.cn/login?param_list in the browserAfter that, the CAS server side handles how.It's actually a spring-webflow application.For a detailed introduction to Spring-webflow,The internet is overwhelming and I'm not going to nag.The Web. xml file on the CAS server side hasOrg.jasig.cas.web.init.SafeDispatcherServletThis is Login-webflow's entry servlet, one of
CAS principle, reference: http://bbs.bkjia.com/thread-4465-1-1.html according to the show, we need to implement CASClient side "Interceptor", we achieve through HttpModule, the server needs two pages, one is the login interface, the page or ashx of the user information obtained through the token in step 1 on the way.
1. client code and ConfigurationCreate a class with the following code:HttpModule1 using System;2 using System. Collections. Generic;3
Use Tomcat for CAS Server and WebLogic 9.2.3 for CAS client server.
The certificate import part is omitted. There are many online certificates. Note the following:
WebLogic only serves as the client and does not need to configure SSL.In keystores configuration, select Custom iden and standard trust ,"Java standard trust keystore passphrase: "enter the password of the key pair library you generated
The
/** * @see------------------------------------------------------------------------------------------------------- -----------------* @see CAS personality login Page * @see 0.cas page Display control is centered on the Cas.viewResolver.basename attribute in \web-inf\cas.properties, Its value defaults to Default_views * @see so CAS will go to classpath to find defa
Required Parameters:
Casserverloginurl: defines the logon URL of the CAS server, for example, https: // localhost: 8443/CAS/login.
Service or servername:
Service: the URL of the Service sent to the CAS server, for example, https: // localhost: 8443/yourwebapp/index.html
Servername: the server name of the CAS client.
CAS implementation in spring MVCConcept:
SSO: Single Sign On Single Sign-On. SSO is one of multiple application systems. Users only need to log on once to access all mutually trusted application systems.
Principle:
This is the system schematic of CAS. It is only the first time the system is verified. The subsequent verification will be much clearer.
Implementation:
If we want to know how
;} This mode uses the Compareandset method to manipulate the atomic reference of an enumeration, about the Compareandset method, which is the CAS algorithm, namely: Compare and swap, translated into comparison and exchange, the source code is as follows:With CAs, the Java.util.concurrent package provides an optimistic lock that differs from the Synchronouse sync Lock, and uses these classes to pe
What is it
Full name compare and swap, a CPU Atom directive, implemented at the hardware level, embodies the idea of optimistic locking.
The JVM encapsulates assembly calls in C language. There are many classes in the base library of Java, which is the function of multithreading synchronization update based on JNI call C interface.
PrincipleCMS has three operands: the value of the current main memory variable v, thread local variable expected value A, thread local to update val
-called primitive language belongs to the operating system language category. A process in which a primitive is composed of several directives used to accomplish a certain function. Primitive or atomic action is a program of several machine instructions that accomplishes a particular function, which is indivisible-that is, the execution of the primitive must be sequential and not allowed to be interrupted during execution. CAS is the abbreviation for
The recent use of CAs as a single point of authentication service found about 20 minutes later found that the general asynchronous way to refresh the page is no response (due to the use of the Easyui framework, page refresh is based on Ajax+div), has been considered a CAS service-side timeout problem, view the various configurations, Online also referred to a lot of posts, has not been resolved, today is no
Error contentThe pom.xml of CAs overlay increased the cas-server-support-pm-jdbc.jary dependency,Packaging (MVN package) with the following errorD:\casoverlay\cas-overlay-template>mvn Package[info] scanning forprojects ... [INFO] [INFO]------------------------------------------------------------------------[INFO] Building cas
The previous blog explains the configuration of the CAS server, this blog for everyone to talk about the CAS client configuration!The first step to build a projectCreate a new MVC project on your own.Second Step Add referenceAfter you have downloaded the file from the beginning of the previous blog, copy the DotNetCasClient.dll file from the Dotnet-client-1.0.2-bin file to the Bin folder and add the DotNetC
one. Error: javax.net.ssl.SSLHandshakeExceptionTwo. Cause Analysis:CAS deployments often involve the issue of certificate publishing for HTTPS. Because CAs and application services often share a single PC in an experimental environment, they run on the same JRE environment and Tomcat server, ignoring the actual use of the certificate, and when the CAs and applications are deployed on separate machines, they
Wikipedia:
In computer science,Compare-and-swapCPU instruction ("CAS") (Or the compare Exchange-cmpxchg instruction in the x86 and itanium ubuntures) is a special instruction that atomically (regarding intel X86, lock prefix shocould be there to make it really atomic) compares the contents of a memory location to a given value and, only if they are the same, modifies the contents of that memory location to a given new value. this guarantees that the
RENEW-Specifies whether renew = true shocould be sent to the CAS server. Valid values are either "true" or "false" (or no value at all ).
Gateway-Specifies whether gateway = true shocould be sent to the CAS server. Valid values are either "true" or "false" (or no value at all ).
Artifactparametername-specifies the name of the Request Parameter on where to find the artifact (I. e. "ticket ").
Serviceparamete
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.