...
[07:14:08 CDT(-0500)] <chilversc_> that really depends on what the app is, and what language its wrote in
[07:32:29 CDT(-0500)] <hermitage> its a java web app
[07:35:01 CDT(-0500)] <chilversc_> is it an app you wrote or is it 3rd party?
[07:37:21 CDT(-0500)] <hermitage> is it app that is writen by an student
[07:37:30 CDT(-0500)] <hermitage> chilversc_: sorry for my english
[07:44:04 CDT(-0500)] <chilversc_> then it should just be a case of using the Java CAS client library, of which I belive there are extensions for spring if you use that
[07:44:13 CDT(-0500)] <chilversc_> but I'm not familure with the java client myself
[07:44:48 CDT(-0500)] <chilversc_> see, https://wiki.jasig.org/display/CASC/CAS+Client+for+Java+3.1
[07:46:21 CDT(-0500)] <hermitage> chilversc_: thanks a lot, i'll check that tutorial
[12:05:16 CDT(-0500)] <nrogers> hello all
[12:05:51 CDT(-0500)] <nrogers> i'm trying to setup a cas/spnego following the guide on the jasig site and running into some problems
[12:06:15 CDT(-0500)] <nrogers> we have kerberos authentication working, at least loggin in with kinit works
[12:07:26 CDT(-0500)] <nrogers> but when we try to login automatically from the cas site it gives this: 2012-05-22 11:20:14,558 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
[12:07:26 CDT(-0500)] <nrogers> =============================================================
[12:07:26 CDT(-0500)] <nrogers> WHO: unknown
[12:07:26 CDT(-0500)] <nrogers> WHAT: error.authentication.credentials.bad
[12:07:26 CDT(-0500)] <nrogers> ACTION: TICKET_GRANTING_TICKET_NOT_CREATED
[12:07:26 CDT(-0500)] <nrogers> APPLICATION: CAS
[12:07:27 CDT(-0500)] <nrogers> WHEN: Tue May 22 11:20:14 CDT 2012
[12:08:08 CDT(-0500)] <nrogers> sorry for the paste... 
[12:29:50 CDT(-0500)] <nrogers> <-idiot please ignore my previous posts ty
[15:21:14 CDT(-0500)] <nrogers> just wanted to let someone know you might want to update the jasig wiki user manual on SPNEGO to clarify that when creating the keytab file you need the whole.server.name.domain.com@YOUR.REALM.HERE it does not work with just servername... maybe that's obvious to some people but it would have saved me a couple hours of smashing my face on the desk because the kerberos test worked but cas didn't....
[15:35:58 CDT(-0500)] <Jackson_> hi all. I've got a SAML/CAS solution that I am building. anyone care to discuss?
[15:36:34 CDT(-0500)] <Jackson_> just want to validate a few assumptions