Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Migrated to Confluence 5.3
Warning
titleWarning

AuthCAS is not currently maintained or supported by JASIG. It has come to light that there may be a SQL injection vulnerability in this module. It is currently being investigated. However, JASIG does not maintain or control the source code so we may not be able to publish a fixed version if one is needed.

If you need Apache support, we recommend mod_auth_cas.

Patches against the CPAN module are available in the comments section and the attachments tab.

...

Please upgrade to version 0.5 of this module, which has a fix for an SQL Injection Vulnerability.  The new version also has a fix for specifying a non-Pg DBI module to use. Currently, this release can be downloaded here until it is indexed on CPAN.

David Castro distributes a mod_perl Apache module which provides proxy CAS functionality. Also see the Apache2::AuthCAS module.

...