Setup

1. Install Tomcat 5.x
2. Download CAS 2.0.12 from http://www.ja-sig.org/wiki/pages/viewpageattachments.action?pageId=924.
3. Build cas.war:

   ant dist

1. Copy cas.war to Tomcat's webapps directory.
2. Download esup-cas-server 2.0.5 from https://sourceforge.net/project/showfiles.php?group_id=88750.
3. Edit properties/build.properties. See http://esup-casgeneric.sourceforge.net/install-esup-cas-server.html.

   cas-server.lang=en
   
   esup-casgeneric.auth=ldap
   esup-casgeneric.auth.ldap.filter=uid=%u,ou=Users,dc=Penrose,dc=Safehaus,dc=org
   esup-casgeneric.auth.ldap.url=ldap://localhost
   
   cas-server.deploy.home=/usr/local/tomcat/webapps/cas

1. Deploy:

   ant deploy

1. Test CAS at http://localhost:8080/cas.

CAS 3.0 Settings

1. Install Penrose and map your existing data sources
2. Install CAS 3.0
3. edit deployerConfigContext.xml under webapps/cas/WEB-INF and replace authenticationHandlers property bean with this line

<bean class="org.jasig.cas.authentication.handler.support.SimpleTestUsernamePasswordAuthenticationHandler" />

with

...

more to come

Acegi with CAS

<bean id="ldapAuthenticationDao" class="org.appfuse.dao.ldap.LdapPasswordAuthenticationDao">
         <property name="URL"><value>ldap://server:389</value></property> 
         <property name="rootContext"><value>dc=server</value></property> 
	     <property name="roleContext"><value>ou=Applis,dc=server</value></property> 
         <property name="roleAttributesSearchFilter"><value>(&amp;(member={0}))</value></property>
         <property name="roleNameAttributes"><value>sAMAccountName</value></property> 
   </bean>

Replace ldap://server:389 with your penrose server URI

Reference

• CAS Authentication Module
• Acegi Spring Framework Forum
• Acegi LDAP Thread
• CAS Generic Handler
• Container Managed Authentication (CMA) vs Acegi
• CAS Java Client
• CAS Perl Client
• Clustering the CAS server
• Registered services, Global logoff, Service-specific includes