esup-casgeneric 的安装

ESUP是Yale CAS的一个插件，它为CAS提供了多种用户身份认证的方式，如LDAP、Database等多种方式，使得CAS在运用上更加简便和灵活，我们可以通过ESUP的多种接口实现SSO对于不同用户的认证。本文介绍了ESUP插件的安装流程。

Complete instructions

1. Download and extract

Download the esup-casgeneric package and extract it on your file system

2. Configure

2a. User authentication

Multiple authentication is the first and main feature of CAS GH. It is achieved by editing the webpages/WEB-INF/genericHandler.xml (this file is copied as web/WEB-INF/genericHandler.xml when deployed in the source hierarchy of a CAS server), which should fit the CAS GH DTD. One or many authentication methods are specified in this file. Methods are intended to be tested one after the other until one succeeds.

The configuration for CAS GH always looks like:

<authentication>
  list of handlers (authentication methods)
</authentication> 

In case of trouble with CAS GH, always try to validate your CAS GH installation by using a very simple configuration such as:

<authentication empty_password_accepted="on" debug="on">
  <handler>
    <classname>org.esupportail.cas.server.handlers.test.EmptyPasswordHandler</classname>
  </handler>
  <handler>
    <classname>org.esupportail.cas.server.handlers.test.PasswordEqualsUsername</classname>
  </handler>
</authentication>

With this configuration, authentication attempts will succeed if users give their username as password, or simply give an empty password.

Authentication methods

The possible authentication methods are (click on the links below to get specific help):

• LDAP
• Database
• NIS
• File

Some test handlers are provided to begin with CASGenericHandler.

There is also a way to prevent specific users from authenticating.

Some other authentication methods may be introduced in next releases if needed:

• Windows NT (under development)
• X509

CASGEnericHandler and empty passwords

CASGenericHandler can be configured to accept (or reject) empty passwords. For instance,

<authentication empty_password_accepted="on">
  list of handlers (authentication methods)
</authentication> 

will allow users to give empty passwords to authenticate (only if they have no password in the user referential used by one of the authentication methods specified). By default, empty passwords are rejected.

2b. Context

Precise the location of your Yale ITS CAS server by editing the properties/esup-casgeneric.properties file. For instance:

cas-server.home=C:/cas-server-2.0.11

3. Deploy

Run `ant deploy' to install CAS GH into your Yale ITS CAS server:

ant deploy