How to get CAS based Single Sign On working?
Hi All, I have a situation where we have a main website based on Joomla. This Joomla site uses CAS to authenticate users. We would like users ( who have already logged in to the Joomla site via CAS) to be able to follow a link to Koha site and be logged in automatically ( e.g. Single Sign On ). I have got simple CAS ( not proxy CAS ) working with Koha ( version 3.2.6 ) using the same CAS server as used by Joomla site. Still when I login to Joomla site with CAS, and then go to Koha and click on login and follow the CAS login link, I am asked to fill up CAS login information again. How can this be avoided by using CAS SSO? I have read through http://wiki.koha-community.org/wiki/SSO_CAS_improvements and am confused by the statement "Note: simple sso cas support (no proxy) has been done already by biblibre, is in testing and should be released in Koha 3.2" in there. Does this statement mean that SSO is possible with simple CAS? If yes how to set it up? If not, I have also read through bugs 6012, 5630 and the CAS Proxy examples. Frankly I haven't been able to figure out how I can achieve the above required functionality based on all the reading. Any help is much appreciated.. Another related query is, Is it possible to automatically create users in Koha once they have authenticated with CAS? Regards, Koustubha Kale Anant Corporation Contact Details : Address : 103, Armaan Residency, R. W Sawant Road, Nr. Golden Dyes Naka, Thane (w), Maharashtra, India, Pin : 400601. TeleFax : +91-22-21720108, +91-22-21720109 Mobile : +919820715876 Website : http://www.anantcorp.com Blog : http://www.anantcorp.com/blog/?author=2
On Sat, Apr 23, 2011 at 12:51 PM, Koustubha Kale <kmkale@anantcorp.com> wrote:
Hi All, I have a situation where we have a main website based on Joomla. This Joomla site uses CAS to authenticate users. We would like users ( who have already logged in to the Joomla site via CAS) to be able to follow a link to Koha site and be logged in automatically ( e.g. Single Sign On ).
Hi All, Figured out the SSO part. Had to make just one change in <tomcat_home>/webapps/cas/WEB-INF/spring-configuration/ticketGrantingTicketCookieGenerator.xml Changed p:cookieSecure="false" from true to false since we are not using https for Koha's login url. By default the TGT cookie is sent for only encrypted connections so browser was not sending the TGT cookie for Koha's http login url.. Now is it possible to create users in Koha after successful login via CAS? Regards, Koustubha Kale Anant Corporation Contact Details : Address : 103, Armaan Residency, R. W Sawant Road, Nr. Golden Dyes Naka, Thane (w), Maharashtra, India, Pin : 400601. TeleFax : +91-22-21720108, +91-22-21720109 Mobile : +919820715876 Website : http://www.anantcorp.com Blog : http://www.anantcorp.com/blog/?author=2
Hi all, I try to connect Koha to CAS but response after access to CAS successfully but koha back CAS login failed and OPAC log: [Wed May 28 15:31:12 2014] [error] [client 192.168.85.1] [Wed May 28 15:31:12 2014] opac-main.pl: Use of uninitialized value $retuserid in string ne at /usr/share/koha/lib/C4/Auth.pm line 808, <DATA> line 522., referer: http://192.168.85.128/cgi-bin/koha/opac-user.pl [Wed May 28 15:35:29 2014] [error] [client 192.168.85.1] [Wed May 28 15:35:29 2014] opac-main.pl: Use of uninitialized value $retuserid in string ne at /usr/share/koha/lib/C4/Auth.pm line 808, <DATA> line 522. [Wed May 28 15:35:34 2014] [error] [client 192.168.85.1] [Wed May 28 15:35:34 2014] opac-user.pl: Use of uninitialized value $lasttime in numeric lt (<) at /usr/share/koha/lib/C4/Auth.pm line 685, <DATA> line 522., referer: http://192.168.85.132/cgi-bin/koha/opac-main.pl?logout.x=1 [Wed May 28 15:35:35 2014] [error] [client 192.168.85.1] [Wed May 28 15:35:35 2014] opac-user.pl: Use of uninitialized value $retuserid in string ne at /usr/share/koha/lib/C4/Auth.pm line 808, <DATA> line 522., referer: http://192.168.85.132/cgi-bin/koha/opac-main.pl?logout.x=1 any boy help to fix this error.
Hi Kale, I need to authenticate KOHA with CAS. As I see, you have implemented KOHA with CAS and I would be thankful if you could share your documentation. Kind regards
participants (3)
-
Ahmed Hadzic -
huy le -
Koustubha Kale