[OOD-users] OOD-users Digest, Vol 9, Issue 1 <Re: CAS authentication (Benjamin Evans)>

[Ping Luo]

Benjamin,

Our OOD server is configured with CAS. This is how we do it.

1. download the patched CAS source code from

https://github.com/klausdieterkrannich/mod_auth_cas


2. build auth_cas_module for apache

autoreconfig
./configure --prefix=/opt/rh/httpd24/root/etc/httpd/modules
--with-apxs=/opt/rh/httpd24/root/usr/bin/apxs --with-apr=/opt/rh/httpd24/
root/usr/bin/apr-1-config
make install

3.  configure /opt/rh/httpd24/root/etc/httpd/conf.modules.d/00-base.conf to
load the module

LoadModule auth_cas_module modules/mod_auth_cas.so


4. modify /opt/rh/httpd24/root/etc/httpd/conf.d/ood-portal.conf

Add these lines to the outside of the virtual host

CASCookiePath      /opt/rh/httpd24/root/etc/httpd/mod_auth_cas/
CASLoginURL        Your_CAS_login_URL
CASValidateURL     Your_CAS_validate_URL
CASCertificatePath /opt/rh/httpd24/root/etc/httpd/certs
<VirtualHost *.443>
...
</VirtualHost>

And modify the two locations as follows:

<Location "/pun">
#   AuthType Basic
#   AuthName "Private"
#   AuthUserFile "/opt/rh/httpd24/root/etc/httpd/.htpasswd"
    AuthType CAS
...
</Location>

<Location "/nginx">
#   AuthType Basic
#   AuthName "Private"
#   AuthUserFile "/opt/rh/httpd24/root/etc/httpd/.htpasswd"
    AuthType CAS
...
</Location>


Hope you will find the above instructions useful.

Ping

On Wed, Nov 1, 2017 at 11:03 AM, <ood-users-request at lists.osc.edu> wrote:

> Send OOD-users mailing list submissions to
>         ood-users at lists.osc.edu
>
> To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.osu.edu/mailman/listinfo/ood-users
> or, via email, send a message with subject or body 'help' to
>         ood-users-request at lists.osc.edu
>
> You can reach the person managing the list at
>         ood-users-owner at lists.osc.edu
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of OOD-users digest..."
>
>
> Today's Topics:
>
>    1. CAS authentication (Benjamin Evans)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 31 Oct 2017 14:38:41 -0400
> From: Benjamin Evans <b.evans at yale.edu>
> To: ood-users at lists.osc.edu
> Subject: [OOD-users] CAS authentication
> Message-ID:
>         <CAOVMLG5ztTWURaZB8i9Hh2QLXVoCi-F1x1CbuokgFox06ZQ=Rg at mail.
> gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Hello list,
>
> I've gotten a test ood server running for one of our clusters and so far my
> colleagues and I are quite happy. Out of laziness and an allergy to
> duplication of work I wanted to ping this list to see if anyone had gotten
> CAS authentication working. If not, is there is a good place to look in the
> source to get started doing so? I'd love for whatever work we do to not go
> to waste!
>
> Cheers,
> Ben
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.osu.edu/pipermail/ood-users/
> attachments/20171031/3221ee25/attachment-0001.html>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> OOD-users mailing list
> OOD-users at lists.osc.edu
> https://lists.osu.edu/mailman/listinfo/ood-users
>
>
> ------------------------------
>
> End of OOD-users Digest, Vol 9, Issue 1
> ***************************************
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osu.edu/pipermail/ood-users/attachments/20171102/52059c73/attachment.html>