The Yale CAS client distribution includes modules for Apache which serve as a CAS 1.0 casclient. See AuthCAS for an alternative implementation of an Apache module for CAS authentication which offers additional features.
Esup-portail also distributes a modified version of MOD_CAS.
A version of MOD_CAS is also distribued as RPM Modules.
We now have a mod_cas patch below for apache2 that contributes support for apache directives for all configuration items. It also contains some changes to logging. mod_cas now has the capability of logging to the apache logs. All that needs to be done, is for someone to turn on the debug directive.
You may also want to try the RPMs. There is a pre-built one for RH AS3, and one that will build mod_cas from source for you. See the attachments below.
Please note this is not extensively tested at this time. I believe there is still a little bit of work to be done. We plan on testing this here at Athabasca University within the next little while (currently May 27th, 2005). This modification was written by Trenton D. Adams and anonymous. If someone knows who anonymous is, let me know. I will search my email soon to see if I can find out who it was that helped me. We will soon contribute a binary RPM as well as a source RPM, which will automatically suck down the patch, and build against it.
*TODO* support multiple certificate files in PEM format by using multiple directives.
When not to use MOD_CAS
(Per Scott Lundgren's email).
- mod_cas not should not be used with pages that use frames
- directories of images files should be moved out from under mod_cas protection because browsers (IE 6 & Firefox 1.06) do not know how to handle the redirects for the requests for images embedded in an HTML page
- directories of CSS files should be moved out from under mod_cas protection for the same reasons
- mod_cas cannot be used with server generated images where scripts return an image stream