├── .gitignore
├── cas.xml
├── etc
    ├── servicesRegistry.conf
    ├── cas.properties
    └── log4j.xml
├── deploy.sh
├── src
    └── main
    │   └── webapp
    │       └── WEB-INF
    │           ├── spring-configuration
    │               └── propertyFileConfigurer.xml
    │           └── deployerConfigContext.xml
├── README.md
├── pom.xml
└── LICENSE


/.gitignore:
--------------------------------------------------------------------------------
 1 | .classpath
 2 | !/.project
 3 | .project
 4 | .settings
 5 | target/
 6 | .idea/
 7 | .DS_Store
 8 | .idea
 9 | overlays/
10 | .gradle/
11 | build/
12 | 
13 | 
14 | /bin
15 | 


--------------------------------------------------------------------------------
/cas.xml:
--------------------------------------------------------------------------------
1 | <Context docBase="$CAS_HOME$/target/cas.war"
2 |          privileged="true"
3 |          antiResourceLocking="false"
4 |          antiJARLocking="false"
5 |          unpackWAR="false"
6 |          swallowOutput="true" />


--------------------------------------------------------------------------------
/etc/servicesRegistry.conf:
--------------------------------------------------------------------------------
 1 | {
 2 |     "services":[
 3 |         {
 4 |             "id":1,
 5 |             "serviceId":"https://www.google.com",
 6 |             "name":"GOOGLE",
 7 |             "description":"Test Google service",
 8 | 			"ignoreAttributes":true,
 9 | 			"enabled":true            
10 |         }		
11 |     ]
12 | }


--------------------------------------------------------------------------------
/deploy.sh:
--------------------------------------------------------------------------------
 1 | #!/bin/sh
 2 | #
 3 | 
 4 | $CATALINA_HOME/bin/shutdown.sh
 5 | cd /opt/cas-overlay
 6 | mvn clean package
 7 | rm -rf $CATALINA_HOME/logs/*
 8 | rm -f $CATALINA_HOME/webapps/cas.war
 9 | rm -rf $CATALINA_HOME/webapps/cas
10 | rm -rf $CATALINA_HOME/work/*
11 | # cp -v target/cas.war $CATALINA_HOME/webapps
12 | echo "WARN: Make sure the cas.xml in the root directory points to the cas.war file!"
13 | cp -v cas.xml $CATALINA_HOME/conf/Catalina/localhost
14 | rm -rf /etc/cas/logs/*
15 | rm -rf /var/logs/cas/*
16 | $CATALINA_HOME/bin/startup.sh


--------------------------------------------------------------------------------
/src/main/webapp/WEB-INF/spring-configuration/propertyFileConfigurer.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <beans xmlns="http://www.springframework.org/schema/beans"
 3 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |        xmlns:context="http://www.springframework.org/schema/context"
 5 |        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd
 6 |        http://www.springframework.org/schema/context http://www.springframework.org/schema/context/spring-context.xsd">
 7 | 
 8 | 
 9 | 	<context:property-placeholder location="file:/etc/cas/cas.properties"/>
10 | 
11 | </beans>


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | cas-overlay
 2 | ==================
 3 | 
 4 | This overlay configures Jasig CAS v4.0.0 for use with a LDAP server. Intended to test against Enterprise accounts.
 5 | 
 6 | Currently, this overlay is configured for LDAP Direct Bind. For configuration against an authenticated search or AD search, please refer to https://jasig.github.io/cas/4.0.0/installation/LDAP-Authentication.html to configure an alternate configuration manager.
 7 | 
 8 | # Versions
 9 | ```xml
10 | <cas.version>4.0.0</cas.version>
11 | <cas-addons.version>1.12</cas-addons.version>
12 | ```
13 | 
14 | # Requirements
15 | * Apache Maven 3
16 | * Web Server (i.e. Apache Tomcat 7)
17 | 
18 | # Configuration
19 | The `etc` directory contains the sample configuration files that would need to be copied to an external file system location (`/etc/cas` by default) and configured to satisfy local CAS installation needs. These are managed by Puppet in the `cas` module.
20 | 
21 | # Building
22 | * Execute `mvn clean package`
23 | * Copy the file over to `$CATALINA_HOME/conf/Catalina/localhost`
24 | * Restart tomcat.
25 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0"
 3 |          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 4 |          xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd ">
 5 |     <modelVersion>4.0.0</modelVersion>
 6 |     <groupId>com.github.cas.overlay</groupId>
 7 |     <artifactId>github-cas-overlay</artifactId>
 8 |     <packaging>war</packaging>
 9 |     <version>0.1</version>
10 | 
11 |     <build>
12 |         <plugins>
13 |             <plugin>
14 |                 <groupId>org.apache.maven.plugins</groupId>
15 |                 <artifactId>maven-war-plugin</artifactId>
16 |                 <version>2.4</version>
17 |                 <configuration>
18 |                     <warName>cas</warName>
19 |                     <overlays>
20 |                         <overlay>
21 |                             <groupId>org.jasig.cas</groupId>
22 |                             <artifactId>cas-server-webapp</artifactId>
23 |                             <excludes>
24 |                                 <exclude>WEB-INF/cas.properties</exclude>
25 |                                 <exclude>WEB-INF/classes/log4j.xml</exclude>
26 |                             </excludes>
27 |                         </overlay>
28 |                     </overlays>
29 |                 </configuration>
30 |             </plugin>
31 |             <plugin>
32 |                 <groupId>org.apache.maven.plugins</groupId>
33 |                 <artifactId>maven-compiler-plugin</artifactId>
34 |                 <version>3.1</version>
35 |                 <configuration>
36 |                     <source>1.7</source>
37 |                     <target>1.7</target>
38 |                 </configuration>
39 |             </plugin>
40 | 
41 |         </plugins>
42 |         <finalName>github-cas</finalName>
43 |     </build>
44 | 
45 |     <dependencies>
46 |         <dependency>
47 |             <groupId>org.jasig.cas</groupId>
48 |             <artifactId>cas-server-webapp</artifactId>
49 |             <version>${cas.version}</version>
50 |             <type>war</type>
51 |             <scope>runtime</scope>
52 |         </dependency>
53 |         <dependency>
54 |              <groupId>org.jasig.cas</groupId>
55 |              <artifactId>cas-server-support-ldap</artifactId>
56 |              <version>${cas.version}</version>
57 |         </dependency>
58 |         <dependency>
59 |             <groupId>javax.servlet</groupId>
60 |             <artifactId>servlet-api</artifactId>
61 |             <version>${servlet.version}</version>
62 |             <scope>provided</scope>
63 |         </dependency>
64 |     </dependencies>
65 | 
66 |     <properties>
67 |         <cas.version>4.0.0</cas.version>
68 |         <servlet.version>2.5</servlet.version>
69 |         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
70 |     </properties>
71 | </project>
72 | 


--------------------------------------------------------------------------------
/etc/cas.properties:
--------------------------------------------------------------------------------
  1 | server.name=https://localhost:8443
  2 | server.prefix=${server.name}/cas
  3 | cas.securityContext.serviceProperties.service=${server.prefix}/services/j_acegi_cas_security_check
  4 | # Names of roles allowed to access the CAS service manager
  5 | cas.securityContext.serviceProperties.adminRoles=ROLE_ADMIN
  6 | cas.securityContext.casProcessingFilterEntryPoint.loginUrl=${server.prefix}/login
  7 | cas.securityContext.ticketValidator.casServerUrlPrefix=${server.prefix}
  8 | # IP address or CIDR subnet allowed to access the /status URI of CAS that exposes health check information
  9 | # IPv6 version
 10 | cas.securityContext.status.allowedSubnet=0:0:0:0:0:0:0:1
 11 | 
 12 | # IPv4 version
 13 | #cas.securityContext.status.allowedSubnet=127.0.0.1
 14 | 
 15 | 
 16 | cas.themeResolver.defaultThemeName=cas-theme-default
 17 | cas.viewResolver.basename=default_views
 18 | 
 19 | host.name=cas.example.org
 20 | 
 21 | ## Log4J 
 22 | log4j.config.location=/etc/cas/log4j.xml
 23 | log4j.refresh.interval=60000
 24 | 
 25 | #database.hibernate.dialect=org.hibernate.dialect.HSQLDialect
 26 | 
 27 | ##
 28 | # Single Sign-On Session Timeouts
 29 | # Defaults sourced from WEB-INF/spring-configuration/ticketExpirationPolices.xml
 30 | #
 31 | # Maximum session timeout - TGT will expire in maxTimeToLiveInSeconds regardless of usage
 32 | tgt.maxTimeToLiveInSeconds=28800
 33 | 
 34 | #
 35 | # Idle session timeout -  TGT will expire sooner than maxTimeToLiveInSeconds if no further requests
 36 | # for STs occur within timeToKillInSeconds
 37 | tgt.timeToKillInSeconds=7200
 38 | 
 39 | ##
 40 | # Service Ticket Timeout
 41 | # Default sourced from WEB-INF/spring-configuration/ticketExpirationPolices.xml
 42 | #
 43 | # Service Ticket timeout - typically kept short as a control against replay attacks, default is 10s.  You'll want to
 44 | # increase this timeout if you are manually testing service ticket creation/validation via tamperdata or similar tools
 45 | 
 46 | # Set to 3 min here for easy testing/demonstrating new features.
 47 | st.timeToKillInSeconds=10
 48 | 
 49 | #========================================
 50 | # LDAP Properties
 51 | #========================================
 52 | ldap.url=ldaps://ops-ldap1-pe1-prd.aws.github.net
 53 | 
 54 | # LDAP connection timeout in milliseconds
 55 | ldap.connectTimeout=3000
 56 | 
 57 | # Whether to use StartTLS (probably needed if not SSL connection)
 58 | ldap.useStartTLS=false
 59 | 
 60 | #========================================
 61 | # LDAP connection pool configuration
 62 | #========================================
 63 | ldap.pool.minSize=2
 64 | ldap.pool.maxSize=3
 65 | ldap.pool.validateOnCheckout=false
 66 | ldap.pool.validatePeriodically=true
 67 | 
 68 | # Amount of time in milliseconds to block on pool exhausted condition
 69 | # before giving up.
 70 | ldap.pool.blockWaitTime=3000
 71 | 
 72 | # Frequency of connection validation in seconds
 73 | # Only applies if validatePeriodically=true
 74 | ldap.pool.validatePeriod=300
 75 | 
 76 | # Attempt to prune connections every N seconds
 77 | ldap.pool.prunePeriod=300
 78 | 
 79 | # Maximum amount of time an idle connection is allowed to be in
 80 | # pool before it is liable to be removed/destroyed
 81 | ldap.pool.idleTime=600
 82 | 
 83 | #========================================
 84 | # Authentication
 85 | #========================================
 86 | 
 87 | # Base DN of users to be authenticated
 88 | ldap.baseDn=ou=People,dc=github,dc=net
 89 | 
 90 | # Manager DN for authenticated searches
 91 | ldap.managerDn=uid=CAS Manager,ou=Service Accounts,dc=github,dc=net
 92 | 
 93 | # Manager password for authenticated searches
 94 | ldap.managerPassword=test123
 95 | 
 96 | # Search filter used for configurations that require searching for DNs
 97 | ldap.searchFilter=(uid={user})
 98 | 
 99 | # Search filter used for configurations that require searching for DNs
100 | #ldap.authn.format=uid=%s,ou=Users,dc=example,dc=org
101 | ldap.format=%s@github.com
102 | 


--------------------------------------------------------------------------------
/etc/log4j.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8" ?>
  2 | <!DOCTYPE log4j:configuration SYSTEM "log4j.dtd">
  3 | 
  4 | <log4j:configuration debug="false" xmlns:log4j="http://jakarta.apache.org/log4j/">
  5 |     <!--
  6 |       This default ConsoleAppender is used to log all NON perf4j messages
  7 |       to System.out
  8 |     -->
  9 |     <appender name="console" class="org.apache.log4j.ConsoleAppender">
 10 |         <layout class="org.apache.log4j.PatternLayout">
 11 |             <param name="ConversionPattern" value="%d %p [%c] - &lt;%m&gt;%n"/>
 12 |         </layout>
 13 |     </appender>
 14 | 
 15 |     <appender name="cas" class="org.apache.log4j.RollingFileAppender">
 16 |         <param name="File" value="/var/lib/tomcat7/logs/cas.log"/>
 17 |         <param name="MaxFileSize" value="512KB"/>
 18 |         <param name="MaxBackupIndex" value="3"/>
 19 |         <layout class="org.apache.log4j.PatternLayout">
 20 |             <param name="ConversionPattern" value="%d %p [%c] - %m%n"/>
 21 |         </layout>
 22 |     </appender>
 23 | 
 24 |     <!-- Perf4J appenders -->
 25 |     <!--
 26 |        This AsyncCoalescingStatisticsAppender groups StopWatch log messages
 27 |        into GroupedTimingStatistics messages which it sends on the
 28 |        file appender defined below
 29 |     -->
 30 |     <appender name="CoalescingStatistics" class="org.perf4j.log4j.AsyncCoalescingStatisticsAppender">
 31 |         <param name="TimeSlice" value="60000"/>
 32 |         <appender-ref ref="fileAppender"/>
 33 |         <appender-ref ref="graphExecutionTimes"/>
 34 |         <appender-ref ref="graphExecutionTPS"/>
 35 |     </appender>
 36 | 
 37 |     <!-- This file appender is used to output aggregated performance statistics -->
 38 |     <appender name="fileAppender" class="org.apache.log4j.FileAppender">
 39 |         <param name="File" value="/var/lib/tomcat7/logs/perfStats.log"/>
 40 |         <layout class="org.apache.log4j.PatternLayout">
 41 |             <param name="ConversionPattern" value="%m%n"/>
 42 |         </layout>
 43 |     </appender>
 44 | 
 45 |     <appender name="graphExecutionTimes" class="org.perf4j.log4j.GraphingStatisticsAppender">
 46 |         <!-- Possible GraphTypes are Mean, Min, Max, StdDev, Count and TPS -->
 47 |         <param name="GraphType" value="Mean"/>
 48 |         <!-- The tags of the timed execution blocks to graph are specified here -->
 49 |         <param name="TagNamesToGraph"
 50 |                value="DESTROY_TICKET_GRANTING_TICKET,GRANT_SERVICE_TICKET,GRANT_PROXY_GRANTING_TICKET,VALIDATE_SERVICE_TICKET,CREATE_TICKET_GRANTING_TICKET"/>
 51 |     </appender>
 52 | 
 53 |     <appender name="graphExecutionTPS" class="org.perf4j.log4j.GraphingStatisticsAppender">
 54 |         <param name="GraphType" value="TPS"/>
 55 |         <param name="TagNamesToGraph"
 56 |                value="DESTROY_TICKET_GRANTING_TICKET,GRANT_SERVICE_TICKET,GRANT_PROXY_GRANTING_TICKET,VALIDATE_SERVICE_TICKET,CREATE_TICKET_GRANTING_TICKET"/>
 57 |     </appender>
 58 | 
 59 |     <!--
 60 |         WARNING: Setting the org.springframework logger to DEBUG displays debug information about
 61 |         the request parameter values being bound to the command objects.  This could expose your
 62 |         password in the log file.  If you are sharing your log files, it is recommend you selectively
 63 |         apply DEBUG level logging on a an org.springframework.* package level (i.e. org.springframework.dao)
 64 |     -->
 65 |     <logger name="org.springframework">
 66 |         <level value="WARN"/>
 67 |     </logger>
 68 | 
 69 |     <logger name="org.springframework.webflow">
 70 |         <level value="WARN"/>
 71 |     </logger>
 72 | 
 73 |     <logger name="org.jasig" additivity="true">
 74 |         <level value="DEBUG"/>
 75 |         <appender-ref ref="cas"/>
 76 |     </logger>
 77 | 
 78 |     <logger name="com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager">
 79 |         <level value="INFO"/>
 80 |         <appender-ref ref="cas"/>
 81 |     </logger>
 82 | 
 83 |     <!--
 84 |         WARNING: Setting the flow package to DEBUG will display
 85 |         the parameters posted to the login servlet including
 86 |         cleartext authentication credentials
 87 |     -->
 88 |     <logger name="org.jasig.cas.web.flow" additivity="true">
 89 |         <level value="INFO"/>
 90 |         <appender-ref ref="cas"/>
 91 |     </logger>
 92 | 
 93 |     <logger name="org.opensaml">
 94 |         <level value="OFF"/>
 95 |     </logger>
 96 | 
 97 |     <logger name="org.apache.xml">
 98 |         <level value="OFF"/>
 99 |     </logger>
100 | 
101 |     <logger name="org.ldaptive">
102 |         <level value="DEBUG" />
103 |         <appender-ref ref="cas" />
104 |     </logger>
105 | 
106 |     <!--
107 |       The root logger sends all log statements EXCEPT those sent to the perf4j
108 |       logger to System.out.
109 |     -->
110 |     <root>
111 |         <level value="DEBUG"/>
112 |         <appender-ref ref="console"/>
113 |     </root>
114 | </log4j:configuration>
115 | 
116 | 


--------------------------------------------------------------------------------
/src/main/webapp/WEB-INF/deployerConfigContext.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0" encoding="UTF-8"?>
  2 | <!--
  3 | | deployerConfigContext.xml centralizes into one file some of the declarative configuration that
  4 | | all CAS deployers will need to modify.
  5 | |
  6 | | This file declares some of the Spring-managed JavaBeans that make up a CAS deployment.
  7 | | The beans declared in this file are instantiated at context initialization time by the Spring
  8 | | ContextLoaderListener declared in web.xml.  It finds this file because this
  9 | | file is among those declared in the context parameter "contextConfigLocation".
 10 | |
 11 | | By far the most common change you will need to make in this file is to change the last bean
 12 | | declaration to replace the default authentication handler with
 13 | | one implementing your approach for authenticating usernames and passwords.
 14 | +-->
 15 | 
 16 | <beans xmlns="http://www.springframework.org/schema/beans"
 17 |        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 18 |        xmlns:p="http://www.springframework.org/schema/p"
 19 |        xmlns:c="http://www.springframework.org/schema/c"
 20 |        xmlns:tx="http://www.springframework.org/schema/tx"
 21 |        xmlns:util="http://www.springframework.org/schema/util"
 22 |        xmlns:sec="http://www.springframework.org/schema/security"
 23 |        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.2.xsd
 24 |        http://www.springframework.org/schema/tx http://www.springframework.org/schema/tx/spring-tx-3.2.xsd
 25 |        http://www.springframework.org/schema/security http://www.springframework.org/schema/security/spring-security-3.2.xsd
 26 |        http://www.springframework.org/schema/util http://www.springframework.org/schema/util/spring-util.xsd">
 27 | 
 28 |     <bean id="authenticationManager" class="org.jasig.cas.authentication.PolicyBasedAuthenticationManager">
 29 |         <constructor-arg>
 30 |             <map>
 31 |                 <entry key-ref="ldapAuthenticationHandler" value="#{null}"/>
 32 | 		<entry key-ref="proxyAuthenticationHandler" value-ref="proxyPrincipalResolver" />
 33 |             </map>
 34 |         </constructor-arg>
 35 |         <property name="authenticationPolicy">
 36 |             <bean class="org.jasig.cas.authentication.AnyAuthenticationPolicy" />
 37 |         </property>
 38 |     </bean>
 39 | 
 40 |     <!-- Required for proxy ticket mechanism. -->
 41 |     <bean id="proxyAuthenticationHandler"
 42 |           class="org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"
 43 |           p:httpClient-ref="httpClient" />
 44 | 
 45 |     <!-- Required for proxy ticket mechanism -->
 46 |     <bean id="proxyPrincipalResolver"
 47 |           class="org.jasig.cas.authentication.principal.BasicPrincipalResolver" />
 48 | 
 49 |     <bean id="ldapAuthenticationHandler"
 50 |           class="org.jasig.cas.authentication.LdapAuthenticationHandler"
 51 |           p:principalIdAttribute="uid"
 52 |           c:authenticator-ref="ldapAuthenticator">
 53 |       <property name="principalAttributeMap">
 54 |         <map>
 55 |           <entry key="member" value="member" />
 56 |           <entry key="mail" value="mail" />
 57 |           <entry key="displayName" value="displayName" />
 58 |         </map>
 59 |       </property>
 60 |     </bean>
 61 | 
 62 |     <bean id="ldapAuthenticator" class="org.ldaptive.auth.Authenticator"
 63 |      	  c:resolver-ref="dnResolver"
 64 | 	  c:handler-ref="ldapAuthHandler" />
 65 | 
 66 |     <bean id="dnResolver"
 67 |           class="org.ldaptive.auth.FormatDnResolver"
 68 |           c:format="uid=%s,${ldap.baseDn}" />
 69 | 
 70 |     <bean id="ldapAuthHandler" class="org.ldaptive.auth.PooledBindAuthenticationHandler"
 71 |           p:connectionFactory-ref="pooledLdapConnectionFactory" />
 72 | 
 73 |     <bean id="pooledLdapConnectionFactory"
 74 |           class="org.ldaptive.pool.PooledConnectionFactory"
 75 |           p:connectionPool-ref="connectionPool" />
 76 | 
 77 |     <bean id="connectionPool"
 78 |           class="org.ldaptive.pool.BlockingConnectionPool"
 79 |           init-method="initialize"
 80 |           p:poolConfig-ref="ldapPoolConfig"
 81 |           p:blockWaitTime="${ldap.pool.blockWaitTime}"
 82 |           p:validator-ref="searchValidator"
 83 |           p:pruneStrategy-ref="pruneStrategy"
 84 |           p:connectionFactory-ref="connectionFactory" />
 85 | 
 86 |     <bean id="ldapPoolConfig" class="org.ldaptive.pool.PoolConfig"
 87 |           p:minPoolSize="${ldap.pool.minSize}"
 88 |           p:maxPoolSize="${ldap.pool.maxSize}"
 89 |           p:validateOnCheckOut="${ldap.pool.validateOnCheckout}"
 90 |           p:validatePeriodically="${ldap.pool.validatePeriodically}"
 91 |           p:validatePeriod="${ldap.pool.validatePeriod}" />
 92 | 
 93 |     <bean id="connectionFactory" class="org.ldaptive.DefaultConnectionFactory"
 94 |           p:connectionConfig-ref="connectionConfig" />
 95 | 
 96 |     <bean id="connectionConfig" class="org.ldaptive.ConnectionConfig"
 97 |           p:ldapUrl="${ldap.url}"
 98 |           p:connectTimeout="${ldap.connectTimeout}"
 99 |           p:useStartTLS="${ldap.useStartTLS}" />
100 | 
101 |     <!-- needs review, tired of fighting it
102 |  	  p:sslConfig-ref="sslConfig" />
103 | 
104 |     <bean id="sslConfig" class="org.ldaptive.ssl.SslConfig">
105 |       <property name="credentialConfig">
106 |         <bean class="org.ldaptive.ssl.X509CredentialConfig"
107 |               p:trustCertificates="${ldap.trustedCert}" />
108 |       </property>
109 |     </bean>
110 |     -->
111 | 
112 |     <bean id="pruneStrategy" class="org.ldaptive.pool.IdlePruneStrategy"
113 |           p:prunePeriod="${ldap.pool.prunePeriod}"
114 |           p:idleTime="${ldap.pool.idleTime}" />
115 |     
116 |     <bean id="searchValidator" class="org.ldaptive.pool.SearchValidator" />
117 | 
118 |     <!--
119 |     Sample, in-memory data store for the ServiceRegistry. A real implementation
120 |     would probably want to replace this with the JPA-backed ServiceRegistry DAO
121 |     The name of this bean should remain "serviceRegistryDao".
122 |     +-->
123 |     <bean id="serviceRegistryDao" class="org.jasig.cas.services.InMemoryServiceRegistryDaoImpl"
124 |             p:registeredServices-ref="registeredServicesList" />
125 | 
126 |     <util:list id="registeredServicesList">
127 |         <bean class="org.jasig.cas.services.RegexRegisteredService"
128 |               p:id="0" p:name="HTTP and IMAP" p:description="Allows HTTP(S) and IMAP(S) protocols"
129 |               p:serviceId="^(https?|imaps?)://.*" p:evaluationOrder="10000001" />
130 |     </util:list>
131 | 
132 |     <bean id="auditTrailManager" class="com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager" />
133 | 
134 |     <bean id="healthCheckMonitor" class="org.jasig.cas.monitor.HealthCheckMonitor" p:monitors-ref="monitorsList" />
135 | 
136 |     <util:list id="monitorsList">
137 |       <bean class="org.jasig.cas.monitor.MemoryMonitor" p:freeMemoryWarnThreshold="10" />
138 |       <!--
139 |         NOTE
140 |         The following ticket registries support SessionMonitor:
141 |           * DefaultTicketRegistry
142 |           * JpaTicketRegistry
143 |         Remove this monitor if you use an unsupported registry.
144 |       -->
145 |       <bean class="org.jasig.cas.monitor.SessionMonitor"
146 |           p:ticketRegistry-ref="ticketRegistry"
147 |           p:serviceTicketCountWarnThreshold="5000"
148 |           p:sessionCountWarnThreshold="100000" />
149 |     </util:list>
150 | </beans>
151 | 


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
  1 | Apache License
  2 |                            Version 2.0, January 2004
  3 |                         http://www.apache.org/licenses/
  4 | 
  5 |    TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
  6 | 
  7 |    1. Definitions.
  8 | 
  9 |       "License" shall mean the terms and conditions for use, reproduction,
 10 |       and distribution as defined by Sections 1 through 9 of this document.
 11 | 
 12 |       "Licensor" shall mean the copyright owner or entity authorized by
 13 |       the copyright owner that is granting the License.
 14 | 
 15 |       "Legal Entity" shall mean the union of the acting entity and all
 16 |       other entities that control, are controlled by, or are under common
 17 |       control with that entity. For the purposes of this definition,
 18 |       "control" means (i) the power, direct or indirect, to cause the
 19 |       direction or management of such entity, whether by contract or
 20 |       otherwise, or (ii) ownership of fifty percent (50%) or more of the
 21 |       outstanding shares, or (iii) beneficial ownership of such entity.
 22 | 
 23 |       "You" (or "Your") shall mean an individual or Legal Entity
 24 |       exercising permissions granted by this License.
 25 | 
 26 |       "Source" form shall mean the preferred form for making modifications,
 27 |       including but not limited to software source code, documentation
 28 |       source, and configuration files.
 29 | 
 30 |       "Object" form shall mean any form resulting from mechanical
 31 |       transformation or translation of a Source form, including but
 32 |       not limited to compiled object code, generated documentation,
 33 |       and conversions to other media types.
 34 | 
 35 |       "Work" shall mean the work of authorship, whether in Source or
 36 |       Object form, made available under the License, as indicated by a
 37 |       copyright notice that is included in or attached to the work
 38 |       (an example is provided in the Appendix below).
 39 | 
 40 |       "Derivative Works" shall mean any work, whether in Source or Object
 41 |       form, that is based on (or derived from) the Work and for which the
 42 |       editorial revisions, annotations, elaborations, or other modifications
 43 |       represent, as a whole, an original work of authorship. For the purposes
 44 |       of this License, Derivative Works shall not include works that remain
 45 |       separable from, or merely link (or bind by name) to the interfaces of,
 46 |       the Work and Derivative Works thereof.
 47 | 
 48 |       "Contribution" shall mean any work of authorship, including
 49 |       the original version of the Work and any modifications or additions
 50 |       to that Work or Derivative Works thereof, that is intentionally
 51 |       submitted to Licensor for inclusion in the Work by the copyright owner
 52 |       or by an individual or Legal Entity authorized to submit on behalf of
 53 |       the copyright owner. For the purposes of this definition, "submitted"
 54 |       means any form of electronic, verbal, or written communication sent
 55 |       to the Licensor or its representatives, including but not limited to
 56 |       communication on electronic mailing lists, source code control systems,
 57 |       and issue tracking systems that are managed by, or on behalf of, the
 58 |       Licensor for the purpose of discussing and improving the Work, but
 59 |       excluding communication that is conspicuously marked or otherwise
 60 |       designated in writing by the copyright owner as "Not a Contribution."
 61 | 
 62 |       "Contributor" shall mean Licensor and any individual or Legal Entity
 63 |       on behalf of whom a Contribution has been received by Licensor and
 64 |       subsequently incorporated within the Work.
 65 | 
 66 |    2. Grant of Copyright License. Subject to the terms and conditions of
 67 |       this License, each Contributor hereby grants to You a perpetual,
 68 |       worldwide, non-exclusive, no-charge, royalty-free, irrevocable
 69 |       copyright license to reproduce, prepare Derivative Works of,
 70 |       publicly display, publicly perform, sublicense, and distribute the
 71 |       Work and such Derivative Works in Source or Object form.
 72 | 
 73 |    3. Grant of Patent License. Subject to the terms and conditions of
 74 |       this License, each Contributor hereby grants to You a perpetual,
 75 |       worldwide, non-exclusive, no-charge, royalty-free, irrevocable
 76 |       (except as stated in this section) patent license to make, have made,
 77 |       use, offer to sell, sell, import, and otherwise transfer the Work,
 78 |       where such license applies only to those patent claims licensable
 79 |       by such Contributor that are necessarily infringed by their
 80 |       Contribution(s) alone or by combination of their Contribution(s)
 81 |       with the Work to which such Contribution(s) was submitted. If You
 82 |       institute patent litigation against any entity (including a
 83 |       cross-claim or counterclaim in a lawsuit) alleging that the Work
 84 |       or a Contribution incorporated within the Work constitutes direct
 85 |       or contributory patent infringement, then any patent licenses
 86 |       granted to You under this License for that Work shall terminate
 87 |       as of the date such litigation is filed.
 88 | 
 89 |    4. Redistribution. You may reproduce and distribute copies of the
 90 |       Work or Derivative Works thereof in any medium, with or without
 91 |       modifications, and in Source or Object form, provided that You
 92 |       meet the following conditions:
 93 | 
 94 |       (a) You must give any other recipients of the Work or
 95 |           Derivative Works a copy of this License; and
 96 | 
 97 |       (b) You must cause any modified files to carry prominent notices
 98 |           stating that You changed the files; and
 99 | 
100 |       (c) You must retain, in the Source form of any Derivative Works
101 |           that You distribute, all copyright, patent, trademark, and
102 |           attribution notices from the Source form of the Work,
103 |           excluding those notices that do not pertain to any part of
104 |           the Derivative Works; and
105 | 
106 |       (d) If the Work includes a "NOTICE" text file as part of its
107 |           distribution, then any Derivative Works that You distribute must
108 |           include a readable copy of the attribution notices contained
109 |           within such NOTICE file, excluding those notices that do not
110 |           pertain to any part of the Derivative Works, in at least one
111 |           of the following places: within a NOTICE text file distributed
112 |           as part of the Derivative Works; within the Source form or
113 |           documentation, if provided along with the Derivative Works; or,
114 |           within a display generated by the Derivative Works, if and
115 |           wherever such third-party notices normally appear. The contents
116 |           of the NOTICE file are for informational purposes only and
117 |           do not modify the License. You may add Your own attribution
118 |           notices within Derivative Works that You distribute, alongside
119 |           or as an addendum to the NOTICE text from the Work, provided
120 |           that such additional attribution notices cannot be construed
121 |           as modifying the License.
122 | 
123 |       You may add Your own copyright statement to Your modifications and
124 |       may provide additional or different license terms and conditions
125 |       for use, reproduction, or distribution of Your modifications, or
126 |       for any such Derivative Works as a whole, provided Your use,
127 |       reproduction, and distribution of the Work otherwise complies with
128 |       the conditions stated in this License.
129 | 
130 |    5. Submission of Contributions. Unless You explicitly state otherwise,
131 |       any Contribution intentionally submitted for inclusion in the Work
132 |       by You to the Licensor shall be under the terms and conditions of
133 |       this License, without any additional terms or conditions.
134 |       Notwithstanding the above, nothing herein shall supersede or modify
135 |       the terms of any separate license agreement you may have executed
136 |       with Licensor regarding such Contributions.
137 | 
138 |    6. Trademarks. This License does not grant permission to use the trade
139 |       names, trademarks, service marks, or product names of the Licensor,
140 |       except as required for reasonable and customary use in describing the
141 |       origin of the Work and reproducing the content of the NOTICE file.
142 | 
143 |    7. Disclaimer of Warranty. Unless required by applicable law or
144 |       agreed to in writing, Licensor provides the Work (and each
145 |       Contributor provides its Contributions) on an "AS IS" BASIS,
146 |       WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
147 |       implied, including, without limitation, any warranties or conditions
148 |       of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
149 |       PARTICULAR PURPOSE. You are solely responsible for determining the
150 |       appropriateness of using or redistributing the Work and assume any
151 |       risks associated with Your exercise of permissions under this License.
152 | 
153 |    8. Limitation of Liability. In no event and under no legal theory,
154 |       whether in tort (including negligence), contract, or otherwise,
155 |       unless required by applicable law (such as deliberate and grossly
156 |       negligent acts) or agreed to in writing, shall any Contributor be
157 |       liable to You for damages, including any direct, indirect, special,
158 |       incidental, or consequential damages of any character arising as a
159 |       result of this License or out of the use or inability to use the
160 |       Work (including but not limited to damages for loss of goodwill,
161 |       work stoppage, computer failure or malfunction, or any and all
162 |       other commercial damages or losses), even if such Contributor
163 |       has been advised of the possibility of such damages.
164 | 
165 |    9. Accepting Warranty or Additional Liability. While redistributing
166 |       the Work or Derivative Works thereof, You may choose to offer,
167 |       and charge a fee for, acceptance of support, warranty, indemnity,
168 |       or other liability obligations and/or rights consistent with this
169 |       License. However, in accepting such obligations, You may act only
170 |       on Your own behalf and on Your sole responsibility, not on behalf
171 |       of any other Contributor, and only if You agree to indemnify,
172 |       defend, and hold each Contributor harmless for any liability
173 |       incurred by, or claims asserted against, such Contributor by reason
174 |       of your accepting any such warranty or additional liability.
175 | 
176 |    END OF TERMS AND CONDITIONS
177 | 
178 |    APPENDIX: How to apply the Apache License to your work.
179 | 
180 |       To apply the Apache License to your work, attach the following
181 |       boilerplate notice, with the fields enclosed by brackets "{}"
182 |       replaced with your own identifying information. (Don't include
183 |       the brackets!)  The text should be enclosed in the appropriate
184 |       comment syntax for the file format. We also recommend that a
185 |       file or class name and description of purpose be included on the
186 |       same "printed page" as the copyright notice for easier
187 |       identification within third-party archives.
188 | 
189 |    Copyright {yyyy} {name of copyright owner}
190 | 
191 |    Licensed under the Apache License, Version 2.0 (the "License");
192 |    you may not use this file except in compliance with the License.
193 |    You may obtain a copy of the License at
194 | 
195 |        http://www.apache.org/licenses/LICENSE-2.0
196 | 
197 |    Unless required by applicable law or agreed to in writing, software
198 |    distributed under the License is distributed on an "AS IS" BASIS,
199 |    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
200 |    See the License for the specific language governing permissions and
201 |    limitations under the License.
202 | 
203 | 


--------------------------------------------------------------------------------