This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
docpublic:systemes:ssocas:cas7install [2024/06/02 14:25] adminjp [Dossier Logs pour CAS] |
docpublic:systemes:ssocas:cas7install [2024/06/16 09:06] (current) adminjp [Registering Applications] |
||
---|---|---|---|
Line 471: | Line 471: | ||
</ | </ | ||
+ | et downgrade de springBootVersion du fait du passage de cas version version=7.1.0-SNAPSHOT vers 7.0.4 ci-dessus , | ||
+ | |||
+ | sinon erreur de Class Not Found : " | ||
+ | |||
+ | < | ||
+ | # | ||
+ | springBootVersion=3.2.6 | ||
+ | </ | ||
==== support LDAP ==== | ==== support LDAP ==== | ||
Line 514: | Line 522: | ||
< | < | ||
- | [root@ssocas6 | + | |
- | --- /opt/cas-overlay-template/etc/cas/ | + | [root@cas7d cas-overlay-template]# |
- | +++ /opt/cas-overlay-template/ | + | cas.server.name=https: |
- | @@ -1,6 +1,19 @@ | + | cas.server.prefix=${cas.server.name}/cas |
- | -cas.server.name=https://cas.example.org:8443 | + | |
- | +cas.server.name=https://ssocas6.domain.fr:443 | + | logging.config=file: |
- | cas.server.prefix=${cas.server.name}/cas | + | |
+ | cas.authn.accept.users= | ||
+ | ### Connexion LDAP | ||
+ | ##cas.authn.ldap\[0\].providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider | ||
+ | cas.authn.ldap\[0\].type=AUTHENTICATED | ||
+ | cas.authn.ldap\[0\].ldapUrl=ldaps://ldap.domain.fr | ||
+ | cas.authn.ldap\[0\].baseDn= dc=domain, | ||
+ | cas.authn.ldap\[0\].subtreeSearch=true | ||
+ | # | ||
+ | cas.authn.ldap\[0\].searchFilter=(& | ||
+ | cas.authn.ldap\[0\].principalAttributeList=cn, | ||
- | | + | ### Credential to connect to LDAP |
- | + | cas.authn.ldap\[0\].bindDn=CN=binder, | |
- | -# cas.authn.accept.users= | + | cas.authn.ldap\[0\].bindCredential=!SECRET! |
- | +cas.authn.accept.users= | + | |
- | +### Connexion LDAP | + | ### Registering Applications |
- | +cas.authn.ldap\[0\].providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider | + | cas.serviceRegistry.json.location: |
- | +cas.authn.ldap\[0\].type=AUTHENTICATED | + | |
- | +cas.authn.ldap\[0\].useSsl=true | + | # Required: false |
- | +cas.authn.ldap\[0\].ldapUrl=ldaps:// | + | # Type: java.lang.Long |
- | +cas.authn.ldap\[0\].baseDn= dc=int,dc=fr | + | # Owner: org.apereo.cas.configuration.model.core.ticket.PrimaryTicketExpirationPolicyProperties |
- | +cas.authn.ldap\[0\].subtreeSearch=true | + | # Module: cas-server-core-tickets |
- | +cas.authn.ldap\[0\].searchFilter=uid=\{user\} | + | # Maximum time in seconds tickets would be live in CAS server. |
- | +cas.authn.ldap\[0\].principalAttributeList=cn, | + | # jehan 8H -> 10H |
- | + | + | cas.ticket.tgt.primary.max-time-to-live-in-seconds: |
- | +### Credential to connect to LDAP | + | |
- | +cas.authn.ldap\[0\].bindDn=CN=dsi, | + | |
- | +cas.authn.ldap\[0\].bindCredential=S3cr3T | + | # Required: false |
+ | # Type: java.lang.Long | ||
+ | # Owner: org.apereo.cas.configuration.model.core.ticket.PrimaryTicketExpirationPolicyProperties | ||
+ | # Module: cas-server-core-tickets | ||
+ | # Time in seconds after which tickets would be destroyed after a period of inactivity. | ||
+ | # jehan 2H -> 4H | ||
+ | cas.ticket.tgt.primary.time-to-kill-in-seconds: | ||
+ | |||
+ | |||
+ | ### Monitor Status | ||
+ | #management.endpoints.web.base-path=/ | ||
+ | #management.endpoints.web.exposure.include=status | ||
+ | #management.endpoint.status.enabled=true | ||
+ | |||
+ | #cas.monitor.endpoints.endpoint.status.access=IP_ADDRESS | ||
+ | #cas.monitor.endpoints.endpoint.status.required-ip-addresses=127.0.0.1 | ||
+ | |||
+ | ### Monitor Heath Info | ||
+ | # | ||
+ | |||
+ | # | ||
+ | #management.endpoint.health.show-details=always | ||
+ | |||
+ | # | ||
+ | |||
+ | #cas.monitor.endpoints.endpoint.health.access=AUTHENTICATED | ||
+ | #cas.monitor.endpoints.endpoint.info.access=ANONYMOUS | ||
+ | |||
+ | # Required: false | ||
+ | # Type: java.lang.Boolean | ||
+ | # Owner: org.apereo.cas.configuration.model.core.authentication.AuthenticationAttributeReleaseProperties | ||
+ | # Module: cas-server-support-validation | ||
+ | # Whether CAS authentication/ | ||
+ | cas.authn.authentication-attribute-release.enabled: true | ||
</ | </ | ||
Line 580: | Line 632: | ||
Gradle build permet d' | Gradle build permet d' | ||
- | === clean === | ||
- | < | + | === gradlew |
- | [root@ssocas6 cas-overlay-template]# | + | |
- | Downloading https:// | + | |
- | ..........10%...........20%...........30%..........40%...........50%...........60%...........70%..........80%...........90%...........100% | + | |
- | + | ||
- | Welcome to Gradle 7.0! | + | |
- | + | ||
- | Here are the highlights of this release: | + | |
- | - File system watching enabled by default | + | |
- | - Support for running with and building Java 16 projects | + | |
- | - Native support for Apple Silicon processors | + | |
- | - Dependency catalog feature preview | + | |
- | + | ||
- | For more details see https:// | + | |
- | + | ||
- | Starting a Gradle Daemon (subsequent builds will be faster) | + | |
- | < | + | |
- | > root project > Resolve dependencies of classpath > maven-metadata.xml | + | |
- | > IDLE | + | |
- | > IDLE | + | |
- | > root project > Resolve dependencies of classpath > pac4j-http-5.0.1.pom | + | |
- | > root project > Resolve dependencies of classpath > spring-webmvc-pac4j-5.0.0.pom | + | |
- | > root project > Resolve dependencies of classpath > maven-metadata.xml | + | |
- | > root project > Resolve dependencies of classpath > maven-metadata.xml | + | |
- | > IDLE | + | |
- | > root project > Resolve dependencies of classpath > oauth2-oidc-sdk-9.5.1.pom | + | |
- | > IDLE | + | |
- | > root project > Resolve dependencies of classpath > maven-metadata.xml | + | |
- | > IDLE | + | |
- | + | ||
- | ... | + | |
- | + | ||
- | Deprecated Gradle features were used in this build, making it incompatible with Gradle 8.0. | + | |
- | Use ' | + | |
- | See https:// | + | |
- | + | ||
- | BUILD SUCCESSFUL in 1m 29s | + | |
- | 2 actionable tasks: 2 executed | + | |
- | + | ||
- | </ | + | |
- | === build === | + | l' |
< | < | ||
Line 645: | Line 657: | ||
< | < | ||
- | [root@cas7d cas-overlay-template]# | + | [root@cas7 cas-overlay-template]# |
- | [root@cas7d cas-overlay-template]# | + | [root@cas7 cas-overlay-template]# |
[root@cas7 cas-overlay-template]# | [root@cas7 cas-overlay-template]# | ||
Line 668: | Line 680: | ||
< | < | ||
- | 22-May-2021 10:27:29.240 INFO [main] org.apache.catalina.startup.HostConfig.deployDescriptor Deployment of deployment descriptor | + | 06-Jun-2024 19:06:21.431 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deploying web application archive |
- | 22-May-2021 10:27:29.242 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR Deploying web application archive | + | 06-Jun-2024 19:06:29.068 INFO [main] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve |
+ | 2024-06-06 19: | ||
+ | 2024-06-06 19: | ||
- | 22-May-2021 10: | ||
- | 2021-05-22 10: | ||
- | | + | 2024-06-06 19: |
- | / \ | _ \| ____| _ \| ____/ _ \ / ___| / \ / ___| | + | |
- | / _ \ | |_) | _| | |_) | _|| | | | | | / _ \ \___ \ | + | |
- | / ___ \| __/| |___| _ <| |__| |_| | | |___ / ___ \ ___) | | + | |
- | / | + | |
- | + | ||
- | CAS Version: | + | ____ ____ ___ ____ |
- | CAS Branch: | + | / |
- | CAS Commit Id: a03f3bf03f7f1b422794c026481cd2efdf8ae847 | + | Y o || o )/ [_ | D ) / [_ Y |
- | CAS Build Date/ | + | | |
- | Spring Boot Version: 2.4.5 | + | | _ || | | [_ | \ | [_ | |
- | Spring Version: | + | | | || | | |
- | Java Home: / | + | l__j__jl__j |
+ | |||
+ | CAS Version: | ||
+ | CAS Branch: | ||
+ | CAS Commit Id: d41ac9d5e157605fc43d97a77582c2062e864874 | ||
+ | CAS Build Date/ | ||
+ | Spring Boot Version: | ||
+ | Spring Version: | ||
+ | Java Home: / | ||
Java Vendor: Red Hat, Inc. | Java Vendor: Red Hat, Inc. | ||
- | Java Version: | + | Java Version: |
- | JVM Free Memory: | + | Servlet Version: 6.0 |
- | JVM Maximum Memory: | + | JVM Free Memory: |
- | JVM Total Memory: | + | JVM Maximum Memory: |
+ | JVM Total Memory: | ||
OS Architecture: | OS Architecture: | ||
OS Name: Linux | OS Name: Linux | ||
- | OS Version: | + | OS Version: |
- | OS Date/ | + | OS Date/ |
OS Temp Directory: / | OS Temp Directory: / | ||
------------------------------------------------------------ | ------------------------------------------------------------ | ||
- | Apache Tomcat Version: Apache Tomcat/9.0.35 | + | Apache Tomcat Version: Apache Tomcat/10.1.20 |
------------------------------------------------------------ | ------------------------------------------------------------ | ||
- | 2021-05-22 10:27:44,260 INFO [org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator] - < | + | 2024-06-06 19:06:32,669 INFO [org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator] - < |
- | 2021-05-22 10:27:44,407 INFO [org.apereo.cas.web.CasWebApplicationServletInitializer] - <The following | + | 2024-06-06 19:06:32,773 INFO [org.apereo.cas.configuration.CasConfigurationPropertiesValidator] - <Validating CAS property sources and configuration for active |
- | 2021-05-22 10: | + | 2024-06-06 19:06:32,833 INFO [org.apereo.cas.configuration.CasConfigurationPropertiesValidator] - <Validated CAS property sources and configuration successfully.> |
- | 2021-05-22 10:27:55,997 INFO [org.apereo.cas.config.LdapAuthenticationConfiguration] - <Registering LDAP authentication for [LdapAuthenticationHandler]> | + | 2024-06-06 19:06:32,835 INFO [org.apereo.cas.web.CasWebApplicationServletInitializer] - <The following 1 profile is active: " |
- | 2021-05-22 10:27:56,380 INFO [org.apereo.cas.services.resource.AbstractResourceBasedServiceRegistry] - <Watching service registry directory at [/ | + | |
- | 2021-05-22 10:27:56,388 INFO [org.apereo.cas.util.io.PathWatcherService] - < | + | |
- | 2021-05-22 10: | + | |
- | Using generated security password: 18fSECRETdb14 | + | |
- | > | + | |
- | 2021-05-22 10: | + | |
- | 2021-05-22 10:27:58,190 INFO [org.springframework.security.web.DefaultSecurityFilterChain] - <Will secure Ant [pattern='/ | + | 2024-06-06 19:06:37,014 INFO [org.apereo.cas.services.resource.AbstractResourceBasedServiceRegistry] - <Watching service registry directory at [/etc/cas/services]> |
- | 2021-05-22 10: | + | 2024-06-06 19:06:37,019 INFO [org.apereo.cas.util.io.PathWatcherService] - <Watching directory path at [/etc/cas/services]> |
- | 2021-05-22 10: | + | 2024-06-06 19:06:38,184 INFO [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry encryption/ |
- | 2021-05-22 10:27:58,191 INFO [org.springframework.security.web.DefaultSecurityFilterChain] - <Will secure Ant [pattern='/ | + | 2024-06-06 19:06:38,241 INFO [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Runtime memory |
- | 2021-05-22 10: | + | 2024-06-06 19:06:39,324 INFO [org.apereo.cas.config.LdapAuthenticationConfiguration] - <Registering LDAP authentication |
- | 2021-05-22 10: | + | 2024-06-06 19:06:39,585 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for encryption |
- | 2021-05-22 10:27:58,191 INFO [org.springframework.security.web.DefaultSecurityFilterChain] - <Will secure Ant [pattern='/ | + | 2024-06-06 19:06:39,594 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - < |
- | 2021-05-22 10: | + | |
- | 2021-05-22 10: | + | 2024-06-06 19:06:43,801 INFO [org.apereo.cas.web.CasWebApplicationServletInitializer] - <Started CasWebApplicationServletInitializer in 13.811 seconds (process running |
- | 2021-05-22 10: | + | 2024-06-06 19:06:43,839 INFO [org.apereo.cas.services.mgmt.AbstractServicesManager] - <Loaded |
- | 2021-05-22 10: | + | 2024-06-06 19:06:43,846 INFO [org.apereo.cas.web.CasWebApplicationReady] - <> |
- | 2021-05-22 10: | + | 2024-06-06 19:06:43,846 INFO [org.apereo.cas.web.CasWebApplicationReady] - < |
- | 2021-05-22 10:28:00,197 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for encryption | + | |
- | 2021-05-22 10:28:00,226 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Generated encryption key [szXKgSECRETFCQ] of size [256] for [Ticket-granting Cookie]. The generated key MUST be added to CAS settings under setting [cas.tgc.crypto.encryption.key].> | + | |
- | 2021-05-22 10:28:00,229 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for signing | + | |
- | 2021-05-22 10:28:00,229 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - < | + | | \ / |
- | 2021-05-22 10: | + | | |
- | 2021-05-22 10:28:00,409 WARN [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated signing key [oDrASECRETqCiyP-3RQxi2VGGwHiw3G7h3pHHPOprtIjSisWhnDx2Q] of size [512]. The generated key MUST be added to CAS settings under setting [cas.webflow.crypto.signing.key].> | + | | |
- | 2021-05-22 10: | + | | |
- | 2021-05-22 10:28:00,411 WARN [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated encryption key [rcagcSECRETScsw] of size [16]. The generated key MUST be added to CAS settings under setting [cas.webflow.crypto.encryption.key].> | + | | |
- | 2021-05-22 10:28:00,650 INFO [org.apereo.cas.web.CasWebApplicationServletInitializer] - <Started CasWebApplicationServletInitializer in 20.636 seconds (JVM running for 33.242)> | + | l__j\_jl_____jl__j__jl_____jl____/ |
- | 2021-05-22 10:28:00,671 INFO [org.apereo.cas.web.CasWebApplication] - <> | + | |
- | 2021-05-22 10: | + | CAS is now running at https://cas7d.imtbs-tsp.eu: |
- | ____ | + | |
- | | + | |
- | | |_) | _| / _ \ | | | \ V / | + | |
- | | + | |
- | |_| \_\_____/_/ \_\____/ |_| | + | |
- | + | ||
> | > | ||
- | 2021-05-22 10:28:00,671 INFO [org.apereo.cas.web.CasWebApplication] - <> | + | 2024-06-06 19:06:43,846 INFO [org.apereo.cas.web.CasWebApplicationReady] - <> |
- | 2021-05-22 10:28:00,671 INFO [org.apereo.cas.web.CasWebApplication] - <Ready to process requests @ [2021-05-22T09:28:00.670Z]> | + | 2024-06-06 19:06:43,846 INFO [org.apereo.cas.web.CasWebApplicationReady] - <Ready to process requests @ [2024-06-06T17:06:43.822Z]> |
- | 22-May-2021 10: | + | 2024-06-06 19:06:43,846 INFO [org.apereo.cas.configuration.CasConfigurationPropertiesValidator] - <Validating CAS property sources and configuration for active profiles |
- | 22-May-2021 10: | + | 06-Jun-2024 19:06:43.860 INFO [main] org.apache.catalina.startup.HostConfig.deployWAR |
- | 2021-05-22 10:28:01,033 INFO [org.apereo.cas.services.AbstractServicesManager] - <Loaded | + | |
- | 22-May-2021 10: | + | |
- | 22-May-2021 10:28:01.050 INFO [main] org.apache.catalina.startup.HostConfig.deployDirectory Deploying web application directory [/ | + | |
- | 22-May-2021 10: | + | |
- | 22-May-2021 10: | + | |
- | 22-May-2021 10: | + | |
- | 22-May-2021 10: | + | |
- | 22-May-2021 10: | + | |
- | Warning: Nashorn engine is planned to be removed from a future JDK release | + | |
</ | </ | ||
Line 763: | Line 763: | ||
< | < | ||
- | [root@cas6 ~]# cat / | + | [root@cas7 ~]# cat / |
- | ProxyRequests off | + | #ProxyRequests off |
- | ProxyPass /cas ajp:// | + | ProxyPass /cas ajp:// |
- | ProxyPassReverse /cas ajp:// | + | ProxyPassReverse /cas ajp:// |
ProxyPass /manager ajp:// | ProxyPass /manager ajp:// | ||
ProxyPassReverse /manager ajp:// | ProxyPassReverse /manager ajp:// | ||
+ | |||
</ | </ | ||
Line 779: | Line 780: | ||
depuis un navigateur accedons a notre service CAS : https:// | depuis un navigateur accedons a notre service CAS : https:// | ||
- | + | {{: | |
- | {{: | + | |
une fois le login/ | une fois le login/ | ||
Line 860: | Line 860: | ||
==== Registering Applications ==== | ==== Registering Applications ==== | ||
+ | |||
+ | * https:// | ||
+ | |||
les appplications clientes autorisées à utiliser notre serveur CAS doivent etre declarée au préalable . cela peut se faire au travers d'un simple fichier de type json . | les appplications clientes autorisées à utiliser notre serveur CAS doivent etre declarée au préalable . cela peut se faire au travers d'un simple fichier de type json . | ||
- | nous déclarons dans cas.prpoerties | + | nous déclarons dans cas.properties |
< | < | ||
- | [root@ssocas6 | + | [root@cas7 cas-overlay-template]# |
- | ### Registering Applications | + | 846-### Registering Applications |
- | cas.serviceRegistry.json.location: | + | 876:cas.serviceRegistry.json.location: |
</ | </ | ||
- | Il est recommandé de nommer les nouveaux fichiers JSON comme ceci: " | + | Il est recommandé de nommer les nouveaux fichiers JSON comme ceci: " |
Pour créer l'ID nous utilisons la commande date +%s | Pour créer l'ID nous utilisons la commande date +%s | ||
< | < | ||
- | [root@ssocas6 | + | [root@cas7 cas-overlay-template]# |
- | [root@ssocas6 | + | [root@cas7 cas-overlay-template]# |
- | [root@ssocas6 | + | [root@cas7 services]# touch disi_star_domain-`date +%s`.json |
- | [root@ssocas6 | + | [root@cas7 services]# vim disi_star_domain-1718526946.json |
</ | </ | ||
- | on peux ensuite ajouter d' | + | le contenu de la définition de services a autoriser, dans cet exemple RegEx sur tout un domain |
+ | |||
+ | < | ||
+ | [root@cas7 services]# cat disi_star_domain-1718526946.json | ||
+ | { | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | } | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | } | ||
+ | " | ||
+ | " | ||
+ | } | ||
+ | |||
+ | } | ||
+ | </ | ||
+ | |||
+ | |||
+ | on peut ensuite ajouter d' | ||
< | < | ||
Line 888: | Line 916: | ||
[root@ssocas6 services]# | [root@ssocas6 services]# | ||
{ | { | ||
- | " | + | " |
" | " | ||
" | " | ||
Line 900: | Line 928: | ||
[1] | [1] | ||
< | < | ||
- | 2021-05-28 14:18:03,506 INFO [org.apereo.cas.services.AbstractServicesManager] - <Loaded [3] service(s) from [JsonServiceRegistry].> | + | 2024-06-16 10:56:43,076 INFO [org.apereo.cas.services.mgmt.AbstractServicesManager] - <Loaded [2] service(s) from [JsonServiceRegistry].> |
</ | </ | ||
Line 962: | Line 991: | ||
* https:// | * https:// | ||
* https:// | * https:// | ||
+ | * https:// | ||
- | depuis 5.X on est passé de JSP a tymeleaf , on peux visualiser le resultat | + | depuis 5.X on est passé de JSP a tymeleaf , on peut visualiser le resultat |
pour personaliser des pages, il faut d' | pour personaliser des pages, il faut d' | ||
- | pour ce faire nous allons utiliser la tache gradle listTemplateViews afin de lister l'ensembles | + | pour ce faire nous allons utiliser la tache //gradle listTemplateViews// afin de lister l'ensemble |
< | < | ||
- | [root@ssocas6 | + | [root@cas7 cas-overlay-template]# |
- | Starting a Gradle Daemon | + | Starting a Gradle Daemon, 1 busy Daemon could not be reused, use --status for details |
- | > Task :bootBuildInfo | + | Configuration on demand is an incubating feature. |
- | > Task :generateLombokConfig | + | > Task :generateEffectiveLombokConfig UP-TO-DATE |
- | > Task :compileJava | + | > Task :compileJava |
+ | > Task :validateConfiguration | ||
> Task : | > Task : | ||
- | > Task :classes | + | > Task : |
> Task : | > Task : | ||
- | > Task :bootWar | + | > Task : |
+ | > Task : | ||
> Task :war SKIPPED | > Task :war SKIPPED | ||
- | > Task :assemble | + | > Task : |
+ | > Task : | ||
> Task : | > Task : | ||
> Task : | > Task : | ||
Line 987: | Line 1020: | ||
> Task :test NO-SOURCE | > Task :test NO-SOURCE | ||
> Task :check UP-TO-DATE | > Task :check UP-TO-DATE | ||
- | > Task :build | + | > Task : |
- | > Task :explodeWarOnly | + | > Task :unzipWAR |
- | Exploded | + | Unzipped |
- | > Task :explodeWar | + | > Task :unzip |
- | Exploded WAR resources into /opt/test-6.3-cas-overlay-template/ | + | Exploded WAR resources into /opt/cas-src/ |
> Task : | > Task : | ||
- | / | + | |
- | / | + | BUILD SUCCESSFUL in 12s |
- | / | + | 10 actionable tasks: 3 executed, 7 up-to-date |
- | /templates/casAccountLockedView.html | + | [root@cas7d cas-overlay-template]# |
- | /templates/casAdminLoginView.html | + | application.properties |
- | /templates/ | + | application.yml |
- | / | + | bootstrap.properties |
- | / | + | bootstrap.yml |
- | / | + | cas-theme-default.properties |
- | / | + | |
- | / | + | |
- | / | + | |
- | / | + | |
- | / | + | </code> |
- | / | + | |
- | / | + | |
- | / | + | List des ressources |
- | / | + | |
- | / | + | < |
- | / | + | [root@cas7 cas-overlay-template]# |
- | / | + | Configuration on demand is an incubating feature. |
- | / | + | |
- | / | + | > Task : |
- | / | + | /templates/acct-mgmt/casAccountSignupView.html |
- | /templates/ | + | /templates/acct-mgmt/casAccountSignupViewComplete.html |
- | / | + | /templates/acct-mgmt/casAccountSignupViewCompleted.html |
- | /templates/ | + | /templates/acct-mgmt/casAccountSignupViewSentInfo.html |
- | /templates/ | + | /templates/acct/casMyAccountProfile.html |
- | / | + | /templates/adaptive-authn/ |
- | /templates/ | + | /templates/adaptive-authn/ |
- | / | + | /templates/admin/ |
- | /templates/casMustChangePassView.html | + | /templates/aup/ |
- | /templates/ | + | /templates/consent/ |
- | /templates/casPasswordUpdateSuccessView.html | + | /templates/delegated-authn/casDelegatedAuthnErrorView.html |
- | /templates/casPasswordlessDisplayView.html | + | /templates/delegated-authn/casDelegatedAuthnSelectionView.html |
- | /templates/casPasswordlessGetUserIdView.html | + | /templates/delegated-authn/casDelegatedAuthnStopWebflow.html |
- | /templates/casPropagateLogoutView.html | + | /templates/delegated-authn/casDynamicDiscoveryView.html |
- | /templates/casRadiusLoginView.html | + | |
- | /templates/casResetPasswordErrorView.html | + | |
- | /templates/casResetPasswordSendInstructionsView.html | + | |
- | /templates/casResetPasswordSentInstructionsView.html | + | |
- | /templates/casResetPasswordVerifyQuestionsView.html | + | |
- | /templates/ | + | |
- | /templates/casSamlIdPDiscoveryView.html | + | |
- | /templates/casServiceErrorView.html | + | |
- | /templates/casSimpleMfaLoginView.html | + | |
- | /templates/casSurrogateAuthnListView.html | + | |
- | /templates/casSwivelLoginView.html | + | |
- | /templates/ | + | |
- | /templates/casU2fRegistrationView.html | + | |
- | /templates/ | + | |
- | /templates/casWebAuthnRegistrationView.html | + | |
- | /templates/casWsFedStopWebflow.html | + | |
- | /templates/casYubiKeyLoginView.html | + | |
- | /templates/casYubiKeyRegistrationView.html | + | |
/ | / | ||
+ | / | ||
/ | / | ||
/ | / | ||
Line 1057: | Line 1073: | ||
/ | / | ||
/ | / | ||
- | / | + | / |
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
/ | / | ||
+ | / | ||
/ | / | ||
+ | / | ||
/ | / | ||
+ | / | ||
/ | / | ||
/ | / | ||
Line 1070: | Line 1103: | ||
/ | / | ||
/ | / | ||
+ | / | ||
/ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
/ | / | ||
- | /templates/protocol/2.0/casProxyFailureView.html | + | /templates/login-error/casAccountDisabledView.html |
- | /templates/protocol/2.0/casProxySuccessView.html | + | / |
- | /templates/protocol/2.0/casServiceValidationFailure.html | + | /templates/login-error/casAccountUnlockedView.html |
- | /templates/protocol/2.0/casServiceValidationSuccess.html | + | / |
- | /templates/protocol/3.0/casServiceValidationFailure.html | + | /templates/login-error/casBadHoursView.html |
- | /templates/protocol/3.0/casServiceValidationSuccess.html | + | / |
+ | /templates/login-error/casExpiredPassView.html | ||
+ | / | ||
+ | /templates/login/casConfirmView.html | ||
+ | / | ||
+ | /templates/login/casLoginMessageView.html | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
/ | / | ||
/ | / | ||
Line 1084: | Line 1150: | ||
/ | / | ||
/ | / | ||
- | /templates/protocol/openid/casOpenIdAssociationSuccessView.html | + | /templates/radius/casRadiusLoginView.html |
- | /templates/protocol/openid/casOpenIdServiceFailureView.html | + | / |
- | /templates/protocol/openid/casOpenIdServiceSuccessView.html | + | /templates/saml2-idp/casSamlIdPErrorView.html |
- | /templates/protocol/openid/user.html | + | / |
+ | /templates/simple-mfa/casSimpleMfaSelectEmailsView.html | ||
+ | /templates/ | ||
+ | /templates/storage/casSessionStorageWriteView.html | ||
+ | /templates/ | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | / | ||
+ | |||
+ | BUILD SUCCESSFUL in 3s | ||
+ | 10 actionable tasks: 1 executed, 9 up-to-date | ||
</ | </ | ||
Line 1093: | Line 1172: | ||
< | < | ||
- | [root@ssocas6 | + | [root@cas7 cas-overlay-template]# |
+ | To honour the JVM settings for this build a single-use Daemon process will be forked. For more on this, please refer to https:// | ||
+ | Daemon will be stopped at the end of the build | ||
+ | Configuration on demand is an incubating feature. | ||
+ | |||
+ | > Task :unzipWAR | ||
+ | Unzipped WAR into / | ||
> Task : | > Task : | ||
- | Copied file /opt/test-6.3-cas-overlay-template/ | + | Copied file /opt/cas-src/ |
- | </code> | + | |
+ | BUILD SUCCESSFUL in 13s | ||
+ | 10 actionable tasks: 5 executed, 5 up-to-date | ||
+ | |||
+ | [root@cas7 cas-overlay-template]# | ||
+ | -rw-r--r-- 1 root root 1955 Jun 6 19:34 casLoginView.html | ||
on va egalement prendre header.html (extrait vers src/ | on va egalement prendre header.html (extrait vers src/ | ||
< | < | ||
- | [root@ssocas6 | + | [root@cas7 cas-overlay-template]# |
- | <img class=" | + | To honour the JVM settings for this build a single-use Daemon process will be forked. For more on this, please refer to https:// |
- | | + | Daemon will be stopped at the end of the build |
+ | Configuration on demand is an incubating feature. | ||
+ | |||
+ | > Task : | ||
+ | Copied file / | ||
+ | |||
+ | BUILD SUCCESSFUL in 9s | ||
+ | 10 actionable tasks: 1 executed, 9 up-to-date | ||
+ | [root@cas7d | ||
+ | < | ||
+ | | ||
+ | |||
</ | </ | ||
- | on peux aussi extraire le cas.logo.png afin de disposer de l' | + | on peut aussi extraire le cas.logo.png afin de disposer de l' |
< | < | ||
- | [root@ssocas6 | + | [root@cas7 cas-overlay-template]# |
+ | > Task : | ||
+ | Copied file /opt/ | ||
</ | </ | ||
+ | |||
+ | il est possible de recuperer le logo depuis une autre version/ | ||
+ | |||
+ | < | ||
+ | [root@cas6 resources]# scp static/ | ||
+ | root@cas7.domain.fr' | ||
+ | logo_IMTBS-TSP_198x80.png | ||
+ | </ | ||
+ | |||
+ | restera a appeler ce fichier dans le cas.css | ||
+ | |||
+ | ==== CSS ==== | ||
+ | |||
+ | pour les gouts et les couleurs, extraire et modifier //cas.css// | ||
+ | |||
+ | < | ||
+ | [root@cas7 cas-overlay-template]# | ||
+ | To honour the JVM settings for this build a single-use Daemon process will be forked. For more on this, please refer to https:// | ||
+ | Daemon will be stopped at the end of the build | ||
+ | Configuration on demand is an incubating feature. | ||
+ | |||
+ | > Task :unzipWAR | ||
+ | Unzipped WAR into / | ||
+ | |||
+ | > Task : | ||
+ | Copied file / | ||
+ | |||
+ | BUILD SUCCESSFUL in 13s | ||
+ | 10 actionable tasks: 5 executed, 5 up-to-date | ||
+ | |||
+ | </ | ||
+ | |||
+ | on change par exemple le logo | ||
+ | |||
+ | < | ||
+ | [root@cas7 resources]# diff templates/ | ||
+ | 35c35 | ||
+ | < th: | ||
+ | --- | ||
+ | > th: | ||
+ | </ | ||
+ | |||
+ | |||
+ | |||
enfin on redeploie le tout (il est possible de faire usage ./gradlew bootRun pour changer les views a chaud) | enfin on redeploie le tout (il est possible de faire usage ./gradlew bootRun pour changer les views a chaud) | ||
Line 1131: | Line 1281: | ||
- | === lie vers l'URL de changement de password === | + | ==== lien vers l'URL de changement de password |
il est definit via le password Manamegement link => fragment pmlink a extraire pour trouver le bon lienvers le messages.propeties a modifier | il est definit via le password Manamegement link => fragment pmlink a extraire pour trouver le bon lienvers le messages.propeties a modifier | ||
< | < | ||
- | #./gradlew getResource -PresourceName=pmlinks | + | [root@cas7 cas-overlay-template]# ./gradlew getResource -PresourceName=pmlinks |
> Task : | > Task : | ||
- | Copied file /opt/test-6.3-cas-overlay-template/ | + | Copied file /opt/cas-src/ |
- | + | ||
- | [root@ssocas6d | + | |
- | <span th: | + | |
</ | </ | ||
Line 1151: | Line 1297: | ||
[root@ssocas6dev cas-overlay-template]# | [root@ssocas6dev cas-overlay-template]# | ||
screen.pm.button.forgotpwd=< | screen.pm.button.forgotpwd=< | ||
- | </ | ||
- | |||
- | === CSS === | ||
- | |||
- | pour les gouts et les couleurs, cas.css | ||
- | |||
- | < | ||
- | ./gradlew getResource -PresourceName=cas.css | ||
- | > Task : | ||
- | Copied file / | ||
</ | </ | ||