allow FusionDirectory to be integrated into a cas infrastructure

hello,

it would be nice if fd could be integrated into a cas infrastructure, the library and explanation are here

https://wiki.jasig.org/display/CASC/phpCAS+examples

Cheers

(from redmine: issue id 4219, created on 2015-10-15, closed on 2015-11-25)

• Relations:
  • relates #1630
• Changesets:
  • Revision a745d5e5 by Côme Chilliet on 2015-11-03T10:38:17.000Z:

Fixes #4219 Cleaned up FD login system to ease future CAS integration

• Revision c87a348c by Côme Chilliet on 2015-11-03T10:38:47.000Z:

Fixes #4219 Cleaned up FD login system to ease future CAS integration

• Revision b6785535 by Côme Chilliet on 2015-11-04T11:33:32.000Z:

Fixes #4219 Added CAS support

• Revision 7702a7fe by Côme Chilliet on 2015-11-04T11:42:15.000Z:

Fixes #4219 Added CAS support

• Revision 7cd32fc7 by Côme Chilliet on 2015-11-12T10:14:22.000Z:

Fixes #4219 Fixed CAS login (ACL system init was missing)

• Revision 0b3e9db0 by Côme Chilliet on 2015-11-12T10:15:13.000Z:

Fixes #4219 Fixed CAS login (ACL system init was missing)

• Revision 4e8341cc by Côme Chilliet on 2015-11-23T10:52:38.000Z:

Fixes #4219 Added CAS logout

• Revision 868bdc36 by Côme Chilliet on 2015-11-23T10:54:11.000Z:

Fixes #4219 Added CAS logout

• Revision f028c7cb by Côme Chilliet on 2015-11-24T02:55:38.000Z:

Fixes #4219 Added full CAS workflow for logout

• Revision 0b77e870 by Côme Chilliet on 2015-11-24T10:19:43.000Z:

Fixes #4219 Fixed expiration with new logout system

• Revision fd3433ee by Côme Chilliet on 2015-11-24T10:21:09.000Z:

Fixes #4219 Fixed expiration with new logout system

• Revision f2c15442 by Côme Chilliet on 2015-11-24T11:42:16.000Z:

Fixes #4219 Added full CAS workflow for logout

• Custom Fields:
  • Bug in version: 1.0.9.1

Login process have been cleaned in order to ease CAS implementation.

(from redmine: written on 2015-11-03)

By Côme Chilliet on 2017-09-02T15:25:00 (imported from GitLab)

With last commit you can install php-cas, activate CAS in FD configuration and see what happens.

(from redmine: written on 2015-11-04)

By Côme Chilliet on 2017-09-02T15:25:00 (imported from GitLab)

Login with CAS now works. (logout is broken but we have to decide what it should do…)

(from redmine: written on 2015-11-10)

By Côme Chilliet on 2017-09-02T15:25:01 (imported from GitLab)

hello,

after discussing with clement wa have to implement the cas logout on our logout when in cas mode

Cheers

(from redmine: written on 2015-11-20)

By bmortier on 2017-09-02T15:25:01 (imported from GitLab)

hello,

the cas context can be empty so the code should be changed from

$config->get_cfg_value('casContext', '/cas')

to

$config->get_cfg_value('casContext', '')

Cheers

(from redmine: written on 2015-11-23)

By bmortier on 2017-09-02T15:25:01 (imported from GitLab)

hello,

when i logout i get this stack trace

Fatal error: Uncaught exception 'CAS_OutOfSequenceBeforeClientException' with message 'this method cannot be called before phpCAS::client() or phpCAS::proxy()' in /usr/share/pear/CAS.php:1721 Stack trace: #0 /usr/share/pear/CAS.php(1342): phpCAS::_validateClientExists() #1 /usr/share/fusiondirectory/html/index.php(120): phpCAS::logout() #2 {main} thrown in /usr/share/pear/CAS.php on line 1721

Cheers

(from redmine: written on 2015-11-23)

By bmortier on 2017-09-02T15:25:01 (imported from GitLab)

hello,

this is because the phpcas::Logout is no called in the right context

maybe we should have a fonction like the casLoginProcess() to have a correct logout

Cheers

(from redmine: written on 2015-11-23)

By bmortier on 2017-09-02T15:25:02 (imported from GitLab)

Ok, I added the full phpCAS workflow to the logout. I thought phpCAS could get all this info in the session once we are logged in, it’s weird to have to do it all again. I also changed default casContext to empty as you asked

(from redmine: written on 2015-11-24)

By Côme Chilliet on 2017-09-02T15:25:02 (imported from GitLab)

hello,

latest code does the logout correctly

Cheers

(from redmine: written on 2015-11-24)

By bmortier on 2017-09-02T15:25:02 (imported from GitLab)

hello,

my latest question is does the timeout code of fd correclty logout in cas mode ?

Cheers

(from redmine: written on 2015-11-24)

By bmortier on 2017-09-02T15:25:02 (imported from GitLab)

It should be ok now.

(from redmine: written on 2015-11-24)

By Côme Chilliet on 2017-09-02T15:25:02 (imported from GitLab)

hello,

tested on a real cas production server on its working perfectly

Cheers

Close issue

(from redmine: written on 2015-11-25)

By bmortier on 2017-09-02T15:25:03 (imported from GitLab)

closed

By bmortier on 2017-09-02T15:25:03 (imported from GitLab)

added Changed label

By bmortier on 2018-10-05T12:31:41 (imported from GitLab)