Announcements

CAS Server 3.3.1 Released

Posted Monday, November 10, 2008 at 12:41 pm

We're pleased to announce the release of CAS Server 3.3.1.  We've included the following bug fixes and enhancements:

Bugs:
1. Fixed Tomcat 6 incompatibility with default JSP pages
2. Improved REST support by conforming to 201 standard specification more closely
3. Upgrade to latest Spring 2.5.6 to fix bugs introduced in 2.5.5 that affected flow timeout
4. Wrong reference path being set for RESTful API
5. Fixed service schema generation to support Oracle (NOTE: this will require you to update the table being used to store attributes, even if you're not using Oracle!)
6. Fix for incorrect parsing of identifier from X.509 certificates
7. Fix for array index out of bound exceptions in SPNEGO support.

Enhancements:
1. Implemented method to allow for  deployers to support non-standard REST clients
2. Support for CA certs without pathlength
3. better support for accented characters
4. Use maven-enforcer plugin to determine required Maven version
5. Upgrade to Restlet 1.1.1
6. Updated INSTALL instructions
7. Provided predictable ordering of services pattern matching
8. Support for Multivalued attributes in Attribute model.
9. Configure MemCacheTicketRegistry to be synchronous to support cases where CAS is too fast

Thanks to everyone who submitted bug reports, patches, and fixes!  You can download this from the standard location:
http://www.ja-sig.org/products/cas/downloads/

CAS Server 3.3 Final

Posted Thursday, August 14, 2008 at 11:08 am

Dear CAS Community,

We're pleased to announce the final release of CAS Server 3.3. CAS Server 3.3 includes numerous bug fixes, enhancements, and new features including:

Bug Fixes

  • LDAP - support "/" in DNs
  • Move all files that require Spring LDAP to the LDAP module
  • Data too long for column in Services Management tool
  • Properly escaping all example JSP pages
  • Language fixes for German
  • Properly populate meta data on re-authentication

Enhancements

  • Descriptions of all Spring configuration files
  • Google Accounts Support upgrade to support latest Google Apps
  • Requires Maven 2.0.9 to build
  • Library upgrades including PersonDirectory 1.1.2, JBossCache 2, Spring Security 2.0 and Inspektr 0.7.0
  • Transforming Principal names with SPNEGO
  • Added Logging to JpaTicketRegistry
  • Service Management Tool can ignore custom principals

New Features

  • RESTful API
  • Memcached-backed Ticket Registry
  • Terracotta Support
  • Trusted LDAP module for trusted network clients
  • Slovenian language support
  • Support for Services Management via LDAP

Thanks to everyone who reported bugs and helped test!

You can download the entire release from our web site.

Some information on upgrading from CAS 3.2 to 3.3.

CAS 3.2.1 Final Release

Posted Tuesday, April 22, 2008 at 8:37 am

We're pleased to announce that CAS 3.2.1 has been released. It fixes a number of minor issues with the initial 3.2 release and offers a few enhancements. Please see the changelog.

You can download it from the usual spot: http://www.jasig.org/products/cas/downloads/

CAS Server 3.2 Release

Posted Tuesday, February 19, 2008 at 9:03 am

Dear CAS Community,

We're pleased to announce the CAS Server 3.2 release. It includes a number of enhancements, bug fixes, and new features. This includes updated dependencies (Spring 2.5.1, Log4j, Acegi Security, Spring LDAP, Spring Web Flow) as well as bug fixes in the SPNEGO module and Services Management tool. It also includes enhancements to enable/disable single sign out at the server level.

Finally, it includes a new Hard Timeout Expiration Policy, an updated Spring Configuration mechanism (and modularized Spring configuration files) as well as a utilizing a production-ready auditing/statistics tool/API (Inspektr).

You can download the release from the usual location: http://www.jasig.org/products/cas/downloads/

Please note that as this is a major release you should take a look at the major new features (the updated Spring Configuration mechanism and the Inspektr auditing tool) and see how/if it changes your deployment.

Thanks
-Scott

17th Annual JASIG Conference

Posted Wednesday, January 9, 2008 at 8:01 am

Friends-

The JA-SIG Spring 2008 Conference will be held at the end of April this year, a change in schedule for us. We have extended invitations to our many colleagues in higher education community source to share in the event, and we're excited to present a first-time, jointly planned conference.

It's an unprecedented opportunity to meet and learn from each other. We're hoping to see you there!

Jonathan Markow
JA-SIG Board Chair and Acting Executive Director

Hold the Dates!

Monday, April 28th to Wednesday, April 30th, 2008
(Pre-Conference Seminars on Sunday, April 27th)
Crowne Plaza St. Paul Riverfront Hotel
St. Paul, Minnesota

JA-SIG presents
HIGHER EDUCATION SOLUTIONS: THE COMMUNITY SOURCE WAY

The program is being planned jointly by representatives from--

DSpace, Fedora, Fluid, Internet2, Kuali, JA-SIG, and Sakai

The aim is to expose our respective communities to the wide array of community source efforts in our field, to share technologies across project boundaries, and to approach common issues and problems together in the areas of planning, strategy, software development, adoption, and sustainability.

Target audience: Developers, designers, content providers, administrators, faculty, planners, strategists, decision makers... There will be something for everyone!

Watch for registration information and Call for Proposals in January, 2008.

CAS Server 3.1.1 Final Release

Posted Thursday, October 25, 2007 at 4:06 pm

Dear CAS Community,

We're pleased to announce the latest CAS Server release, version 3.1.1. This release contains a number of bug fixes, improvements, and new features:

Bug Fixes:

  • Fix rendering issue with default pages in FireFox 2.0.0.8
  • Spring picks wrong constructor for UniqueTicketIdGenerators
  • ServiceThemeResolver NullPointerExceptions
  • Updated example configuration files
  • Service's toString not properly overwritten
  • Accessing /services/ did not go anywhere
  • LogoutRequest was not URLencoded
  • SAML 2.0 LogoutRequest missing appropriate namespaces
  • RegisteredService was not serializable
  • CasVersion.getVersion returned null
  • Extaneous image references in CSS

Improvements:

  • Moved commonly configured items to deployerConfigContext.xml
  • Created cas.properties to configure common properties
  • Moved protocol views to their own directory
  • Made it easier to include/exclude log4j.

New Features:

  • Updated BSD License
  • Czech translation
  • Croation translation
  • Polish translation

Thanks to Adam Rybicki, Andrew Feller, Arnaud Lesueur, Etienne Dysli, Marat Radchenko, Matt Smith, Michael Irion, Nick Fielding, Ray Tsang, Romain Bourgue, Zdenek Hrib, and everyone else who helped.

You can download the latest release from the usual spot.

The JA-SIG 2007 Unconference is Coming!

Posted Monday, October 1, 2007 at 3:49 pm

  • Registration fee for the November 12th-13th, 2007 JA-SIG Unconference: $225
  • Nightly rate at the Rutgers University Inn and Conference Center: $84
  • Two days talking, learning, teaching, planning, coding, and hanging out with your peers--and with the uPortal, CAS, Fluid, JSR-168, SpringMVC experts: Priceless!

Who. What. Where.

Dates November 12-13, 2007
November 14-16th, 2007 (optional post-conference activities)
Place Rutgers University Inn and Conference Center, 178 Ryders Lane, New Brunswick, NJ; phone: 732-932-9144
Registration Fee $225 (Includes lunch and snacks)
Inn Rooms $84/single/night (w/breakfast)

What's an Unconference?

"An unconference is a conference where the content of the sessions is driven and created by the participants, generally day-by-day during the course of the event, rather than by a single organizer, or small group of organizers, in advance."
-Wikipedia

JA-SIG has always been about people coming together to share and learn in an open environment, and this is what an "unconference" is all about. As demonstrated by the success of the Summer 2007 Conference mini "BarCamp" (another spontaneous approach), the unconference format fits very well with our community values and goals.

The November event will provide both spontaneous and planned opportunities to collaborate on all JA-SIG community initiatives and topics. (There will not be a separate Winter Conference or a Fall uPortal Developer Meeting.)

What are we going to do?!

It's up to you! Ideas people are talking about so far include the following:

  • Lightning Talks - Volunteers talk for up to 10 minutes. Any topic goes.
  • Code Clinics - Bring your uPortal, portlet, or CAS code or problem and work on it with core developers
  • Screencast Factory - Show off your work while a facilitator captures it to share with the community.
  • UCamp - Fluid Project members will lead a workshop and collaborations about user experience design and accessibility.
  • Strategic Planning - What should JA-SIG be focused on next year? In three years? Join the conversation.
  • How-to's. How-not-to's. Tips and techniques.

As part of the un-conference format the final schedule will be determined in real-time, interactively with the attendees. See a list of ideas for activities and add your own

OK, I'm Interested! How do I Register?

If you're planning to join us, please do the following:

  1. Register for the Unconference right here: https://www.concentra-cms.com/register/start.action?confId=28
  2. Visit and add your name on the Unconference Planning Site on the JA-SIG wiki. This is a great place to indicate your interests---what you'd like to discuss, learn, share or teach.
  3. Call the Rutgers University Inn and Conference Center at 732-932-9144 to reserve a room for your stay. Hurry! Rooms are limited, and the conference rate will only be held for a brief period.
  4. Take a look detailed hotel, travel directions, and other information at http://www.ja-sig.org/wiki/x/SoF7
  5. If you are unable to book a room at the University Inn and Conference Center, consult this list of other nearby hotels: http://www.scils.rutgers.edu/leadconf/hotels.pdf, http://www.travelforecaster.com/hotelinfo/east_brunswick/nj/usa/92151/#trafficID=500026519&refererPageID=10

See you at the Unconference,

The Winter 2007 Unconference Organizers

CAS Server 3.1 Final Release

Posted Wednesday, August 8, 2007 at 2:01 pm

Dear CAS Community,

We're pleased to announce the general audience release of CAS Server 3.1. CAS Server 3.1 is the culmination of about seven and a half months of blood, sweat and tears for the development team. This release is a combination of bug fixes, refinements, enhancements, and major new features.

While the minor bug fixes, refinements and enhancements are detailed in our Change Log, here's a list of some of the major new features:

  • Requires Java 5
  • Additional Authentication Handlers: SPNEGO, NTLM, RADIUS
  • Built using Maven 2
  • Improved Internationalization: German, Chinese, Japanese, and Swedish
  • Optional Services Management Application (including Pseudo-anonymous support)
  • Support for Google Apps for Education / Integration with Google Accounts
  • Support for SAML 1.1 (attribute passing)
  • Support for Attributes / Integration with JA-SIG PersonDirectory
  • OpenID Identity Provider
  • Introduction of Single Sign Out protocol (currently, no client support)
  • Additional Ticket Registries: BerkeleyDB and JBoss Cache

Thanks go out to the CAS development team (Marc-Antoine Garrigue, Arnaud Lesueur and Jan Van der Velpen) as well as the many contributors who have supplied ideas, patches, documentation, etc. (William Thompson, Adam Rybicki, Stephen More, Andres March, Marvin S. Addison, Julien Marchal, Andrew Petro, David D. Kilzer, Frank Taffelt, John Thiltges, Julien Henry, Matt Smith, Eric Dalquist, and Ray Tsang)

The release can be downloaded from our Downloads Page.

Please download it and try it out. Please report any issues or enhancement requests to our JIRA instance.

Documentation can be found in the CAS User Manual.

Thanks!
-Scott

CAS Server 3.1 RC4 Release

Posted Friday, July 27, 2007 at 8:43 am

Dear CAS Community,

We're pleased to announce release candidate 4 of the CAS Server 3.1. This release contains the following fixes and enhancements:

Bug Fixes:

  • NullPointerException in ServiceThemeResolver
  • persistence.xml should be in cas-server-webapp not cas-server-core
  • Better Authorization Failure message for Services Management Application

Improvements:

  • Enhance INVALID_SERVICE error message to display both services
  • Provide abstract classes to help with PersonDirectory implementation
  • Provide sample OpenId user "Endpoint" JSP and configuration
  • Limit search scope for performance improvements in CredentialsToLDAPAttributePrincipalResolver

The release can be downloaded here.

CAS Server 3.1 Release Candidate 2

Posted Tuesday, June 19, 2007 at 3:09 pm

Dear CAS Community,

We're pleased to announce Release Candidate 2 of CAS Server 3.1. It contains the following fixes and improvements:

  • Generalized DSA*Key Factory Beans to construct either DSA*Key or RSA*Key (must specify algorithm to use)
  • Added Chinese (Simplified) Translation for Services Management
  • InMemoryDao for Services Registry was not providing an ID for Services
  • Updated Views to provide a better demonstration of CAS (provide better feedback, utilize Spring FORM tags, etc., more "Web 2.0-ish")
  • Expose load method on DefaultServicesManagerImpl

The release can be downloaded from our downloads page.

CAS Server 3.1 Release Candidate 1

Posted Friday, June 15, 2007 at 9:22 am

Dear CAS Community,

We are pleased to announce the first release candidate for CAS Server 3.1. As a recap, CAS Server 3.1 RC1 includes the following features:

  • JBossCache Ticket Registry
  • SPNEGO Support
  • RADIUS Support
  • NTLM Support
  • Java 5 Dependency
  • Maven 2 Support
  • Upgrade to Spring LDAP
  • Upgrade to Spring 2
  • Chinese, Russian, German, Japanese
  • Services Management Application
  • SAML 1.1 Response
  • BerkeleyDB Ticket Registry
  • CAS as OpenID Server ("dumb" mode)
  • Google Accounts Support
  • Single Sign Out Protocol
  • "Pseudo-Anonymous" Users

plus a ton of minor tweaks, optimizations, and bug fixes!

The release candidate can be found here:

Please try it out and report any bugs. We're specifically interested in people who can help us test the OpenID, Google Accounts, and SAML 1.1 support.

CAS Server 3.1 M2 Released

Posted Tuesday, April 17, 2007 at 1:42 pm

Dear CAS Community,

We're pleased to announce the next milestone release of the CAS 3.1 Server, CAS 3.1 Milestone 2. Milestone 2 includes numerous enhancements:

New Features:

  • BerkeleyDb-backed TicketRegistry
  • German Internationalization Support
  • NTLM Support
  • Registered Services Administration Application
  • Re-vamped Registered Services/Whitelist Support
  • Java 5 Required

Bug Fixes:

  • Fixed error in rendering Simplified Chinese
  • Fixed erorr in Russian Locale
  • Escape backslash in LdapUtils

Improvements:

  • Better Handling of errors in SAML View
  • Corrected parsing of locale's in casLoginView.jsp
  • Upgraded to Spring 2.0.4 and Spring Web Flow 1.0.2
  • Improved Thread Safety/Synchronization
  • Usage of Annotations for dependency checking

There are numerous other minor tweaks and fixes. Check out the complete changelog here: http://www.ja-sig.org/issues/secure/ReleaseNote.jspa?projectId=10007&styleName=Html&version=10381

You can download the current releases here:

  • http://www.ja-sig.org/downloads/cas/cas-server-3.1-m2-release.zip
  • http://www.ja-sig.org/downloads/cas/cas-server-3.1-m2-release.tar.gz

CAS 3.0.7 Final Release

Posted Friday, April 13, 2007 at 1:49 pm

Dear CAS Community,

We're happy to release the final version of CAS Server 3.0.7. Slightly delayed, this version includes the following:

  • Upgrade to Spring 2.0.3
  • Upgrade to Spring Web Flow 1.0.1
  • Inclusion of Abstract Ticket Registry
  • Bug Fix: Must explicitly inject HttpClient into HttpBasedServiceCredentialsAuthenticationHandler
  • Bug Fix: ServiceThemeResolver does not strip jsession id
  • Bug Fix: Escape Backslash in LdapUtils
  • Improvement: Use Resource in FileAuthenticationHandler
  • Improvement: Make it harder to expose passwords in log file

It is recommended that all CAS 3.0.x deployers upgrade to CAS 3.0.7. You can find the release here: http://www.ja-sig.org/products/cas/downloads/

BioWebAuth Beta Released

Posted Tuesday, April 10, 2007 at 10:33 am

Elisardo González & Enrique Otero from the Universidad de Vigo in Spain send word that a beta version of the BioWebAuth software (Biometrics for Web Authentication) has been released. BioWebAuth is an open source Java framework intended to provide single sign-on web authentication based on BioAPI-compliant biometric software or devices. It uses the JA-SIG Central Authentication Service architecture. BioWebAuth system requires J2SE 1.5 SDK, JBoss Application Server 4.0.2 (or later), MySQL database 4.1 (or later) and BioAPI framework to be installed on the server machine.

This new version is easier to install than the previous one, and it offers a new administration tool that allows to enable/disable the enrollment process for a given user and a given biometric modality.

You can download the software from SourceForge.

RubyCAS Server

Posted Tuesday, April 10, 2007 at 10:29 am

The Ruby community is proud to announce RubyCAS-Server, a stand-alone server implementing the CAS 2.0 protocol.

RubyCAS-Server can be used as a full-featured alternative to the JA-SIG CAS server. Since it runs as a stand-alone daemon or as a simple CGI script, no existing Java infrastructure is required. The server is designed to be easily configurable, with support for custom front-end themes and back-end authenticators. Authenticators for Active Directory, LDAP, and SQL are included in the package.

To learn more, visit http://code.google.com/p/rubycas-server/

RubyCAS-Server is written in Ruby using the Camping micro-framework. The project is currently in beta and is under active development.

CAS 3.0.7 Release Candidate 2

Posted Thursday, March 15, 2007 at 11:30 am

We are pleased to announce a new release candidate for the maintenance release of the CAS 3.0.x branch.

CAS 3.0.7 Release Candidate 2 includes the following enhancements and bug fixes:

  • Upgrade to Spring 2.0.3
  • Minor fix in JSP page.
  • Inclusion of AbstractDistributedTicketRegistry

If you get a moment, please download and test this release.

CAS 3.0.7 Release Candidate 1

Posted Monday, February 5, 2007 at 3:32 pm

We are pleased to announce a new release candidate for the maintenance release of the CAS 3.0.x branch.

CAS 3.0.7 Release Candidate 1 includes the following enhancements and bug fixes:

  • Upgrade to Spring Web Flow 1.0.1
  • Upgrade to Spring 2.0.2
  • Backslash escaped in LdapUtils.java
  • Include missing ldapbp.jar
  • HttpBasedServiceCredentialsAuthenticationHandler now requires an instance of HttpClient to be injected.

If you get a moment, please download and test this release. We are planning to do a final release at the end of the week.

CAS Server and Client 3.1 Milestone 1 Released

Posted Wednesday, January 24, 2007 at 1:25 pm

Dear CAS Community,

We are pleased to announce two technology previews, CAS Server 3.1 Milestone 1 and CAS Client for Java 3.1 Milestone 1. The CAS Server has a re-architected web tier to concurrently support multiple authentication protocols, and demonstrates this by supporting both CAS and SAML. In addition, with SAML support comes support for sending attributes back to the client. This is demonstrated in the CAS Client for Java milestone.

We hope you'll check it out and provide feedback. We'll be publishing a complete 3.1 Release roadmap soon with the next milestones and release dates. We'd love to incorporate any suggested features from the community.

Note that these releases are not intended for production use and may contain bugs.

You can download the client and server releases here:

Server

Client

phpCAS 0.5.0 RC5 Release

Posted Saturday, January 20, 2007 at 4:54 pm

ESUP Portail has released version 0.5.0 RC5 of the phpCAS library. The latest version has the following changes:

New features

  • added japanese translation (Noriyuki Fukuoka).
  • added german translation (Henrik Genssen).
  • phpCAS now works for CAS v3 proxy tickets (Matt Zukowski).
  • phpCAS now also works with lighttpd (Marvin Addison)

Bug fixes

  • fixed method setHTMLFooter() (Noriyuki Fukuoka).
  • fixed method setHTMLHeader() (Xavier Castanho).
  • fixed method isHttps() (Henrik Genssen).
  • fixed method PGTStorageDB() (Ray Lambe).
  • encode all the parameters, not only '&' characters (Matthew Debus)

Please note that this release is still a release candidate and any feedback is welcome. You can download the release from the project's web site.

BioWebAuth Alpha Release

Posted Monday, January 8, 2007 at 3:11 pm

Elisardo González Agulla and Enrique Otero Muras from the Universidade de Vigo have released an Alpha version of their BioWebAuth project as an open-source project. BioWebAuth extends CAS to add biometric capabilities. Its available on SourceForge. A quick install is included.

CAS 3.0.6 Final

Posted Wednesday, December 13, 2006 at 9:46 am

We are pleased to announce the final release of CAS 3.0.6. It is recommended that all users upgrade to obtain the latest fixes and enhancements:

http://www.ja-sig.org/products/cas/

A short summary of the latest changes are:

  • Upgrade to Spring 2.0.1, Spring Web Flow 1.0 and Spring LDAP 1.1.1
  • Bug fixes for the X.509 Certificate Support
  • Bug fix for the Md5PasswordEncoder
  • Introduction of JBossCacheTicketRegistry
  • Removal of unnecessary synchronization.

A complete change log can be found here: http://www.ja-sig.org/issues/secure/ReleaseNote.jspa?projectId=10007&styleName=Html&version=10343

The next major release will be a 3.1 release.

CAS+HyperContent+uPortal QuickStart

Posted Monday, December 4, 2006 at 11:13 am

Alex Vigdor, Lead Developer for JA-SIG's HyperContent Content Management System has released a Quick Start that includes uPortal, CAS, and HyperContent. If you're interested in checking it out, you can download it here.

CAS Server 3.0.6 RC1 Release

Posted Monday, December 4, 2006 at 10:34 am

We are pleased to announce the Release Candidate 1 of CAS 3.0.6. A final release will be following shortly. It is recommended that all users upgrade to obtain the latest fixes and enhancements:

http://www.ja-sig.org/products/cas/

A short summary of the latest changes are:

  • Upgrade to Spring 2.0.1, Spring Web Flow 1.0 and Spring LDAP 1.1.1
  • Bug fixes for the X.509 Certificate Support
  • Bug fix for the Md5PasswordEncoder
  • Introduction of JBossCacheTicketRegistry
  • Removal of unnecessary synchronization.

A complete change log can be found here: http://www.ja-sig.org/issues/secure/ReleaseNote.jspa?projectId=10007&styleName=Html&version=10343

The next major release will be a 3.1 release.

CAS Biometrics Research

Posted Monday, November 27, 2006 at 12:04 pm

Elisardo González of the University of Vigo's (Spain) Signal Processing Group has been working on several R&D projects related to Biometrics. His group has modified CAS to support web-based authentication via biometrics. They developed a Java client that allows the use of any BioAPI-compliant software or devices (such as UPEK fingerprint scanners) in order to authenticate users. Basic face-verification and voice-recognition support are provided.

To test the system you will need to:

  1. Access to our website.

  2. Create a new user, log in, and perform an enrollment session.

    Our current version is offering several types of biometric enrollment and verification:

    • BioPassword verification
    • UPEK fingerprint (commercial)
    • face verification
    • voice verification
    • signature verification
  3. Access to our modified version of CAS front-end with support for biometrics.

JA-SIG CAS Client for Java 3.0.0 RC2 Released

Posted Monday, October 30, 2006 at 2:38 pm

Dear CAS Community,

We're pleased to announce the 3.0.0 RC2 Release of the JA-SIG CAS Client for Java. This release features minor enhancements and bug fixes as well as refined documentation and examples. Some changes include:

  • Switched to org.springframework.web.filter.DelegatingFilterProxy
  • Introduce ThreadLocal option for retrieving Assertion
  • Improved Logging

This will be the least release before the 3.0 Final release.

You can download the release from our downloads page.

CAS 3.0.5 Final Released

Posted Monday, July 31, 2006 at 11:54 pm

Dear CAS Community,

We're pleased to announce the final release of 3.0.5.  This release includes many bug fixes, improvements and new features.  Though there are minor changes between 3.0.4 and 3.0.5 due to upgrades to Spring Webflow, all deployers are encouraged to upgrade.  Deployers who have client applications that use Acegi are especially encouraged to upgrade, as CAs 3.0.5 can properly handle jsession ids.

Some of the changes in this release:

New Features:

  • JAAS Authentication Handler
  • Remote User Support
  • Ability to accept arbitrary credentials for PGT callback
  • Inclusion of jars for adaptors

Improvements:

  • LDAP Authentication Handlers now use LdapTemplate project
  • Expose Additional ticket state information to Ticket Expiration Policies
  • Italian, Swedish, and Urdu internationalization
  • Argument checking Assertions now provide more information
  • Utilize HttpClient to allow for connection pooling
  • Additional hooks in AbstractNonInteractiveCredentailsAction for postAction and error handlinig
  • Spring 2.0 and Spring Webflow upgrades

Bug Fixes:

  • JDBC Authentication Handlers threw exception when username not found
  • Strip jsession id from service urls
  • Fixes to X509 Certificate CredentialsToPrincipalResolvers

The complete set of release notes is available in JIRA.

You can download the most recent release on our downloads page.

Thanks to everyone who helped out with this release, including load testing, bug tracking, translations, and feature ideas and code!

CAS Client for Java 3.0.0 M2 Released

Posted Wednesday, July 19, 2006 at 11:10 am

Dear CAS Community,

We're pleased to announce the second milestone of the JA-SIG CAS Client for Java 3.0.0.  New features include:

  • Refactoring of ProxyReceptorServlet into a subclass such that implementations can exist that are not Spring-configured.
  • Delegating Servlet Filter to delegate to a particular filter based on request parameters.
  • Ability to redirect request after successful ticket validation such that the URI no longer has the ticket as a request parameter.
  • Ability to tell filters not to use sessions (i.e. validate each request).

Pending any new feature requests, the next version of the client will most likely be a release candidate, focusing on increased test coverage.

You can download the release from our downloads page. <http://www.ja-sig.org/products/cas/downloads/>

CAS 3.0.5 RC3 Released

Posted Wednesday, July 12, 2006 at 10:48 am

Dear CAS Community,

We're pleased to announce the release of CAS 3.0.5 RC3 which includes the following fixes and enhancements:

  •  Fix for missing service url in gateway mode under certain situations
  • Fix for spelling error in French translation
  • More natural Spanish translation
  • onSuccess and onError methods in AbstractNonInteractiveCredentialsAction to support protocols that require sending response
  • Fix to build to include source and compiled jars for adaptors components
  • Fix for AbstractNonInteractiveAction that could have genereated two service tickets
  • Additional documentation in log4j.properties explaining that setting org.springframework to DEBUG results in request parameters (like password) being logged

This will most likely be the last RC before a GA release.  The final release is waiting on the final versions of Spring 2.0 and Spring Web Flow.

You can download the newest release from our web site.

New Documentation Team Members

Posted Thursday, July 6, 2006 at 3:07 pm

We're pleased to announce that Stephen Cochran from Dartmouth College and Jan "Velpi" Van der Velpen of K.U. Leuven have both joined the CAS team to help spearhead our documentation effort.  Their initial focus will be in updating existing documentation with the knowledge they've gained from CAS deployments (as well as documentation they may have produced that's relevant to the general CAS community).

Please join me in welcoming them to the team!

We're still looking for others to help with our documentation efforts (whether its merely updating/maintaining/cleaning the Wiki, assisting with site updates, or creating a user's guide).  If you're interested (or even if you merely have a "one-time" contribution) please contact us on the cas-dev list!

CAS 3.0.5 RC2 Released

Posted Thursday, June 22, 2006 at 11:17 am

We're pleased to announce the availability of the CAS 3.0.5 RC2 release. This release includes many new features, enhancements and bug fixes:

  • RegisteredService is now more extensible
  • Upgrade to Spring 2.0 M5
  • AuthenticationManager can handle null principals
  • AbstractX509CertificateCredentialsToPrincipalResolver can now handle situation where subclass returns null principal

We recommend that all users of 3.0.5 RC1 upgrade to RC2. It can be found in our downloads section.

JA-SIG CAS Java Client 3.0.0-m1 Released

Posted Thursday, June 15, 2006 at 3:19 pm

Dear CAS Community,

We're happy to announce the first milestone of the JA-SIG CAS Java Client 3.0.0.  This release features a completely re-architected CAS Java Client with many new features.

  • Revamped Authorization filter that allows for different backing implementations
  • Revamped Proxying to allow for different ProxyGrantingTicket Storage implemenations
  • Utilization of HttpClient to do connection pooling and timeouts
  • Ticket and Assertion Interfaces to make parsing and using custom XML and attributes easier
  • Configuration via Spring Bean Factory instead of web.xml allows for more flexible configuration options (JNDI, properties files, etc.)

You can download the release from our downloads page.

We are looking for early feedback and feature requests.  Note that although M1 uses Spring for configuration, there is only one class that actually has a Spring dependency.  If anyone is interested in contributing an alternate configuration, please do so.

Upon release, this CAS Java Client will be integrated with the next release of Acegi Security for Java.

Also, we're still looking for contributors for updating other CAS clients.  Feel free to contact us on the developers list if you'd like to help out!

Thanks,
The JA-SIG CAS Team

CAS 3.0.5 RC1 Released

Posted Monday, June 5, 2006 at 11:28 pm

We're pleased to announce the availability of the CAS 3.0.5 RC1 release.  This release includes many new features, enhancements and bug fixes:

New Features

  • Support for obtaining user from request.getRemoteUser()
  •  Upgrade EhcacheTicketRegistry to support distributed ticket registries
  • JAAS AuthenticationHandler


Improvements

  •  LdapHandlers utilize LdapTemplate project
  • Support for Swedish, Italian, and Urdu
  • Ticket State updated for TicketGrantingTickets in order to facilitate better ExpirationPolicies
  • Use HttpClient to allow for better configuration/polling of HttpConnections
  • Added hook method to ServiceValidate to obtain credentials for PGTs besides PGT URL
  • Upgrade to Spring Webflow 1.0 and Spring 2.0


Bug Fixes

  • Removed infinate redirect on 404 error
  • Avoid hardcoding of /cas/ for cookie request paths
  • Disable LDAP connection pooling for binding (cannot pool connections where credentials change)
  • Assert.notNull checks did not include information to determine which parameter was null
  • Strip jsession id from service urls
  • JDBC AuthenticationHandler threw exception if username was not found in database

You can download this release from our downloads section.

CAS 3.0.4 Final Release

Posted Friday, February 17, 2006 at 5:48 pm

Dear CAS Community:

We're pleased to announce the availability of CAS 3.0.4 Final. CAS 3.0.4 is a minor feature and bug fix release. It is recommended that all CAS 3.0.x users migrate to 3.0.4.

This new release contains the following changes:

  • Better Support for Internationalization (examples of French, Dutch, English, and Spanish)
  • Support for X.509 Certificate Credentials
  • Revamped Webflow support to better support non-interactive credentials
  • Ability to deploy demo war on Weblogic
  • Increased performance by removing unnecessary synchronization
  • Support for "default" messages if no message found in properties file
  • Fixed error with CAS forgetting parameters on login flow timeout

You can find the complete changelog here.

The release can be downloaded from our Downloads page.

Additional JARs for optional Authentication Handlers can be found in the Maven repository.

CAS 3.0.4 RC2 Released

Posted Monday, February 13, 2006 at 7:56 pm

Dear CAS Community:

We're pleased to announce that RC2 of CAS 3.0.4 is now available. This release introduces the following changes from RC1:

  • Internationalization support in views and error messages (English and Dutch are available out of the box)
  • Pattern matching on Subject DNs for X.509 Credentials (so you can use a regular expression to validate a X.509 Subject DN)

The release is available from: http://www.ja-sig.org/products/cas/downloads/index.html

Specific Handler jars (including X.509 support) are available from: http://developer.ja-sig.org/maven/cas/jars/

Documentation on enabling X.509 support can be found here:
http://www.ja-sig.org/products/cas/server/certs/index.html

This will probably be the last release before a CAS 3.0.4 Final. If you get a minute, please try it out.


CAS 3.0.4 RC1 Released

Posted Thursday, February 9, 2006 at 1:15 pm

Dear CAS Community:

We're pleased to announce that CAS 3.0.4 RC1 has just been released.

This is a bugfix and minor enhancement release, introducing x509 Certificate support and a revamped webflow.

The CAS 3.0.4 RC1 release is available for download along with a complete change log:

http://www.ja-sig.org/products/cas/downloads/index.html

All users on the CAS 3.0.x branch are encouraged to try out CAS 3.0.4 RC1.

CAS 3.0.3 Final Released

Posted Saturday, December 24, 2005 at 11:44 am

Dear CAS Community:

We're pleased to announce that CAS 3.0.3 Final has just been released.

This is a bugfix and minor enhancement release, fixing some issues with the Maven repository, dependency upgrades, introduction of the LDAP handlers, and more!

The CAS 3.0.3 Final release is available in our Wiki along with a complete change log:

http://www.ja-sig.org/wiki/display/CAS/CAS+3.0.3+Final

All users on the CAS 3.0.x branch are encouraged to upgrade their CAS releases to the current version.

CAS Web Site Announced

Posted Thursday, December 15, 2005 at 3:43 pm

Work has begun on a new CAS web site to introduce an organized hub of information on JA-SIG CAS and its community.

CAS 3.0.2 Final Released

Posted Monday, October 17, 2005 at NaN:NaN pm

Dear CAS Community:

We're pleased to announce that CAS 3.0.2 Final has just been released.

This is a bugfix and minor enhancement release, fixing a small number of issues including making Assertions serializable, externalizing cookie timeout properties, upgrading dependencies, and removing the cas.properties file. A complete change log is available with the release.

The CAS 3.0.2 Final release is available in our Wiki:

http://www.ja-sig.org/wiki/display/CAS/CAS+3.0.2+Final

All users on the CAS 3.0.x branch are encouraged to upgrade their CAS releases to the