...
| Tip |
|---|
|
Hint: filter declarations come before servlet declarations in the web.xml. Personally, I find XMLBuddy's support for validating application descriptors XML against its declared DTD / schema quite helpful in catching element ordering and XML validity problems... |
...
| Code Block |
|---|
| title | Configuring CASValidateFilter to request proxy granting tickets |
|---|
|
<filter>
<filter-name>CAS Validate Filter</filter-name>
<filter-class>edu.yale.its.tp.cas.client.filter.CASValidateFilter</filter-class>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
<param-value>https://secure.its.yale.edu/cas/serviceValidate</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
<param-value>hkg2.cis.yale.edu:8080</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.proxyCallbackUrl</param-name>
<param-value>https://hkg2.cis.yale.edu/uPortal/CasProxyServlet</param-value>
</init-param>
</filter>
|
| Warning |
|---|
| title | The Proxy Callback MUST be over SSL |
|---|
|
The proxy callback URL MUST be an https: URL. |
Obtaining and using ProxyTickets in your IChannel implementations
Your IChannels obtain and use proxy tickets through the CasConnectionContext and ICasSecurityContext abstractions LocalConnectionContext abstraction, as implemented by a CasConnectionContext instance.