esup-casgeneric 的安装

最新推荐文章于 2023-10-17 23:31:57 发布

yuanxz

最新推荐文章于 2023-10-17 23:31:57 发布

阅读量1.8k

点赞数

分类专栏： SSO主题文章标签： authentication methods passwords hierarchy download database

本文链接：https://blog.csdn.net/yuanxz/article/details/317411

版权

SSO主题专栏收录该内容

13 篇文章 0 订阅

订阅专栏

ESUP是Yale CAS的一个插件，它为CAS提供了多种用户身份认证的方式，如LDAP、Database等多种方式，使得CAS在运用上更加简便和灵活，我们可以通过ESUP的多种接口实现SSO对于不同用户的认证。本文介绍了ESUP插件的安装流程。

Complete instructions

1. Download and extract

Download the esup-casgeneric package and extract it on your file system

2. Configure

2a. User authentication

Multiple authentication is the first and main feature of CAS GH. It is achieved by editing the webpages/WEB-INF/genericHandler.xml (this file is copied as web/WEB-INF/genericHandler.xml when deployed in the source hierarchy of a CAS server), which should fit the CAS GH DTD. One or many authentication methods are specified in this file. Methods are intended to be tested one after the other until one succeeds.

The configuration for CAS GH always looks like:

<authentication>
  list of handlers (authentication methods)
</authentication>

In case of trouble with CAS GH, always try to validate your CAS GH installation by using a very simple configuration such as:

<authentication empty_password_accepted="on" debug="on">
  <handler>
    <classname>org.esupportail.cas.server.handlers.test.EmptyPasswordHandler</classname>
  </handler>
  <handler>
    <classname>org.esupportail.cas.server.handlers.test.PasswordEqualsUsername</classname>
  </handler>
</authentication>

With this configuration, authentication attempts will succeed if users give their username as password, or simply give an empty password.

Authentication methods

The possible authentication methods are (click on the links below to get specific help):

LDAP
Database
NIS
File

Some test handlers are provided to begin with CASGenericHandler.

There is also a way to prevent specific users from authenticating.

Some other authentication methods may be introduced in next releases if needed:

Windows NT (under development)
X509

CASGEnericHandler and empty passwords

CASGenericHandler can be configured to accept (or reject) empty passwords. For instance,

<authentication empty_password_accepted="on">
  list of handlers (authentication methods)
</authentication>

will allow users to give empty passwords to authenticate (only if they have no password in the user referential used by one of the authentication methods specified). By default, empty passwords are rejected.