Indiana University
Indiana University has produced a CAS ISAPI filter for IIS. This can be found in the contrib/ directory of the CAS Client Distribution.
Below are some gotchas spotted by Phil Sladen that will hopefully help if you're trying to deploy the CAS ISAPI filter.
...
- In the filter configuration file, the '<serviceParamName>' tag should be set to 'service' and the '<ticketParamName>' tag should be set to 'ticket' to match what the server expects. I don't think the '<appParamName>' and '<appCode>' tags really need to be set to anything in particular.
- Consider instead the CCCI CAS client (see below).
CCCI
NOTE: On July 2, 2009 a security vulnerability was reported and fixed. If you are using an older version of the ISAPI filter, we suggest that you update it immediately. (The vulnerability did not affect Apache.)
CCCI has created a C++ based CAS client that can be compiled as an ISAPI filter or as an Apache module. (The Apache module can be compiled for either Linux or Windows.) Compiling the ISAPI filter from source currently requires MS Visual Studio, though it should be possible (and not too hard) to create a build script or project file for another environment.
Attached to this page is our July 2, 2009 distribution. It contains binaries for ISAPI and Windows Apache 2.2 (which might work under 2.0). Download here: plugin-distro-july-02-2009.zip
Key file locations:
- ISAPI filter implementationbinary: bin/CasIsapi.dll
- Apache Windows binary: bin/CasApacheWindows.dll
- Please read the README files in the root folder
Notes
- This CAS filter supports some custom functionality:
- single log-out: include "ticket" parameter, but prefix the value with "-" (dash)
- user-principal attributes (<cas:attributes><attr1-name>attr1-value</attr1-name><attr2-name>attr2-value</attr2-name></cas:attributes>)
- The documentation included might be slightly outdated (but only slightly)
- Versions of this DLL have been used in production since 2004. The latest version is very stable.