Single Sign-On CAS Usage Note (1): preparations and configuration of SSL protocol for CAS-Server, cas-serverssl
Knowledge point:
SSO: Single Sign-on(Single Sign On) is one of the most popular solutions for enterprise business integration. SSO is defined in multiple application systems. Users only need to log on once to
As a CAS server, whether or not clients can be accessed is defined by configuration. For the CAS server, each access client corresponds to a service configuration. When the CAS server is started, these services are loaded and regi
Environmental Win8+tomcat7+jdk7+cas-server-4.0.0-release1. First to http://downloads.jasig.org/address download cas-server-4.0.0-release.zip, unzip to modules directory Cas-server-webapp-4.0.0.war, copy to Tomcat's WebApp director
[1]. Overview following the previous demonstration of single-point Logon (SSO) instance based on CAS, the server authentication mechanism adopts the default configuration of the test environment, this article will focus on how to query the database and configure authentication for the user name and password.[2] The Basic Environment of the demo environment is the same: Demonstration of Single Sign-On (SSO)
With the previous foundation, you can now start the deployment of the CAS server side.
First you can go to http://www.jasig.org/cas/download. Download the latest server and client side of CAs
Here we are downloading Cas-
Introduction to the configuration of CAS server and the configuration method of CAS Server Client
Because CAS requires HTTPS to communicate with the client, Tomcat must be configured to support SSL. To achieve SSL, A Web service must have an associated certificate for each e
the current CAS source code is the latest 5 series, But the project that can use MAVEN to build the war package is only 4.1 series and 4.2 series, the default is the Master branch, in order to download a stable version, I select the 4.2 branch (can be used in the branch drop-down box selection, you can also directly use this url:https:// github.com/apereo/cas-overlay-template/tree/4.2
)。
as shown in figure
In this configuration document, refer to Argan's blog... use Yale CAS server to achieve single point of login (SSO)Argan's blog... Address: http://blog.matrix.org.cn/page/cas
Configure java_home as follows:Java_home = D:/Java/jdk1.5.0 _ 06
CAS (Central Authentication Service) is an open-source Java implementation devel
Recent project needs, need to do a single sign-on function, because previously did not contact SSO, not very understanding, consult the data after choosing to use CAS as the research object. CAS is a single sign-on server developed by Yale University.Learn from: http://blog.csdn.net/small_love/article/details/6664831 experience,1. Development environment
1 installation1.1 System ConfigurationThe following software environments are required:1. JDK 1.4.2 or higher2. Tomcat 5.X 1.2 tomcat configuration, enabling SSL1. Generate a key for Tomcat for use in SSL communications on the machine where CAS is to be installed:
Keytool–genkey–alias Tomcat–keyalg RSAThe key password and other parameters need to be entered (the first parameter, CN, must be set to the CAS
Directory
1. Download the CAS Server2. Create a CAS keystore2.1 generate keypair2.2 export certificates from keystore2.3 import the certificate to JVM3. Make Tomcat support HTTPS4. Run the CAS Server1. Download the CAS Server
Can download from
Exchange Server 2010 uses a role-based management model. Multi-Role Server installation and configuration, we have in the previous article has been introduced. In this case, depending on high availability, we need to deploy the server roles on separate servers and achieve high availability of CAs, HT, and MBX roles. At
. query [0]. password = 123456 # MySQL driver CAS. authn. JDBC. query [0]. driverclass = com. mySQL. JDBC. driver # Add JDBC-certified CAS. authn. JDBC. query [0]. SQL = select * from login where login_name =? # Which field is used as the password field cas. Authn. JDBC. Query [0]. fieldpassword = login_password
Note: The above configuration is a plaintext passwo
All the configuration files in Cas server are placed under the Web-inf directory and its subdirectories.The configuration files under Web-inf/classes are:L cas-theme-default.properties: The file is stored in the path of the CSS file, where the user can specify the CSS file to use as a custom CSS file, or you can change the default style of the corresponding CSS f
[SSO single-point series] (4): Return of user information after cas server logon, ssocas
Next, in the previous article, we described how to add a verification code on the cas server logon page and log on. Once the cas server is s
Login-webflow is when you enter a https://uia.comsys.net.cn/login in your browser? Param_list
Then, how does the CAS server handle the issue.
It is actually a spring-webflow application.
For more information about spring-webflow,
I won't be jealous if the Internet is overwhelming
The Web. xml file on the CAS server
Error contentThe pom.xml of CAs overlay increased the cas-server-support-pm-jdbc.jary dependency,Packaging (MVN package) with the following errorD:\casoverlay\cas-overlay-template>mvn Package[info] scanning forprojects ... [INFO] [INFO]------------------------------------------------------------------------[INFO] Build
Yesterday I tried to deploy the Java client side of CAs to another machine, and the result was a problem. (localhost deployment CAS server and Java client side see: http://www.cnblogs.com/sunshineatnoon/p/4119565.html)The main client access time error: Javax.net.ssl.SSLHandshakeException:java.security.cert.CertificateException:No subject Alternative names present
3. log on to the server for setting up CAS once failed. Setp3: bind Tomcat to the cas server: see www. open-= ========================================================== ======================================
Setp3: Tomcat and cas server
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.