CAS Server 3.3.5 Release

8 messages Options
Embed this post
Permalink
Scott Battaglia-2

CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Johan Reinalda

Re: CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
Some javascript/style in this post has been disabled (why?)
Scott,
thanks for 3.3.5
I see:
>* Customizable attribute can  be used for Google Apps login
 
Is this documented somewhere ?
Just starting to look at the code, and it's not obvious to me how you map this.
 
If not yet documented, if you email me, I will test it and get it on the wiki.
 
Thanks,
 
Johan
 
 

----- Original Message -----
Sent: Monday, November 09, 2009 6:59 AM
Subject: [cas-user] CAS Server 3.3.5 Release

Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Johan Reinalda

Re: CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
In reply to this post by Scott Battaglia-2
Some javascript/style in this post has been disabled (why?)
Scott,
 
I found the answer in the original ticket I put in with the mods.
However, when I modify in my overlay
 
    src/main/webapp/WEB-INF/spring-configuration/argumentExtractorsConfiguration.xml
 
with this
 
<bean
        name="googleAccountsArgumentExtractor"
        class="org.jasig.cas.web.support.GoogleAccountsArgumentExtractor"
        p:privateKey-ref="privateKeyFactoryBean"
        p:publicKey-ref="publicKeyFactoryBean"
        p:alternateUsername="mail" />
 
 
I get the following error starting the app.
 
Caused by: org.springframework.beans.NotWritablePropertyException: Invalid property 'alternateUsername' of bean class [org.jasig.cas.web.support.GoogleAccountsArgumentExtractor]: Bean property 'alternateUsername' is not writable or has an invalid setter method. Does the parameter type of the setter match the return type of the getter?
        at org.springframework.beans.BeanWrapperImpl.setPropertyValue(BeanWrapperImpl.java:801)
What am I missing ?
 
Johan
 
 
----- Original Message -----
Sent: Tuesday, November 10, 2009 11:09 AM
Subject: Re: [cas-user] CAS Server 3.3.5 Release

Scott,
thanks for 3.3.5
I see:
>* Customizable attribute can  be used for Google Apps login
 
Is this documented somewhere ?
Just starting to look at the code, and it's not obvious to me how you map this.
 
If not yet documented, if you email me, I will test it and get it on the wiki.
 
Thanks,
 
Johan
 
 

----- Original Message -----
Sent: Monday, November 09, 2009 6:59 AM
Subject: [cas-user] CAS Server 3.3.5 Release

Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Scott Battaglia-2

Re: CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
I just replied to the ticket.  Your bean should work.  Can you double check that the right CAS jars are in your WAR?



On Tue, Nov 10, 2009 at 3:52 PM, Johan Reinalda <[hidden email]> wrote:
Scott,
 
I found the answer in the original ticket I put in with the mods.
However, when I modify in my overlay
 
    src/main/webapp/WEB-INF/spring-configuration/argumentExtractorsConfiguration.xml
 
with this
 
<bean
        name="googleAccountsArgumentExtractor"
        class="org.jasig.cas.web.support.GoogleAccountsArgumentExtractor"
        p:privateKey-ref="privateKeyFactoryBean"
        p:publicKey-ref="publicKeyFactoryBean"
        p:alternateUsername="mail" />
 
 
I get the following error starting the app.
 
Caused by: org.springframework.beans.NotWritablePropertyException: Invalid property 'alternateUsername' of bean class [org.jasig.cas.web.support.GoogleAccountsArgumentExtractor]: Bean property 'alternateUsername' is not writable or has an invalid setter method. Does the parameter type of the setter match the return type of the getter?
        at org.springframework.beans.BeanWrapperImpl.setPropertyValue(BeanWrapperImpl.java:801)
What am I missing ?
 
Johan
 
 
----- Original Message -----
Sent: Tuesday, November 10, 2009 11:09 AM
Subject: Re: [cas-user] CAS Server 3.3.5 Release

Scott,
thanks for 3.3.5
I see:
>* Customizable attribute can  be used for Google Apps login
 
Is this documented somewhere ?
Just starting to look at the code, and it's not obvious to me how you map this.
 
If not yet documented, if you email me, I will test it and get it on the wiki.
 
Thanks,
 
Johan
 
 

----- Original Message -----
Sent: Monday, November 09, 2009 6:59 AM
Subject: [cas-user] CAS Server 3.3.5 Release

Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Johan Reinalda

Re: CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
Some javascript/style in this post has been disabled (why?)
I feel very dumb; my pom file was still refercing 3.3.4 for all the core modules :-(
 
Sorry about that; it now works,, and I will add some information on the wiki about this.
 
Thanks a lot!!!
 
Johan
 
----- Original Message -----
Sent: Tuesday, November 10, 2009 9:00 PM
Subject: Re: [cas-user] CAS Server 3.3.5 Release

I just replied to the ticket.  Your bean should work.  Can you double check that the right CAS jars are in your WAR?



On Tue, Nov 10, 2009 at 3:52 PM, Johan Reinalda <[hidden email]> wrote:
Scott,
 
I found the answer in the original ticket I put in with the mods.
However, when I modify in my overlay
 
    src/main/webapp/WEB-INF/spring-configuration/argumentExtractorsConfiguration.xml
 
with this
 
<bean
        name="googleAccountsArgumentExtractor"
        class="org.jasig.cas.web.support.GoogleAccountsArgumentExtractor"
        p:privateKey-ref="privateKeyFactoryBean"
        p:publicKey-ref="publicKeyFactoryBean"
        p:alternateUsername="mail" />
 
 
I get the following error starting the app.
 
Caused by: org.springframework.beans.NotWritablePropertyException: Invalid property 'alternateUsername' of bean class [org.jasig.cas.web.support.GoogleAccountsArgumentExtractor]: Bean property 'alternateUsername' is not writable or has an invalid setter method. Does the parameter type of the setter match the return type of the getter?
        at org.springframework.beans.BeanWrapperImpl.setPropertyValue(BeanWrapperImpl.java:801)
What am I missing ?
 
Johan
 
 
----- Original Message -----
Sent: Tuesday, November 10, 2009 11:09 AM
Subject: Re: [cas-user] CAS Server 3.3.5 Release

Scott,
thanks for 3.3.5
I see:
>* Customizable attribute can  be used for Google Apps login
 
Is this documented somewhere ?
Just starting to look at the code, and it's not obvious to me how you map this.
 
If not yet documented, if you email me, I will test it and get it on the wiki.
 
Thanks,
 
Johan
 
 

----- Original Message -----
Sent: Monday, November 09, 2009 6:59 AM
Subject: [cas-user] CAS Server 3.3.5 Release

Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Scott Battaglia-2

Re: CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
Thanks!


On Thu, Nov 12, 2009 at 11:30 AM, Johan Reinalda <[hidden email]> wrote:
I feel very dumb; my pom file was still refercing 3.3.4 for all the core modules :-(
 
Sorry about that; it now works,, and I will add some information on the wiki about this.
 
Thanks a lot!!!
 
Johan
 
----- Original Message -----
Sent: Tuesday, November 10, 2009 9:00 PM
Subject: Re: [cas-user] CAS Server 3.3.5 Release

I just replied to the ticket.  Your bean should work.  Can you double check that the right CAS jars are in your WAR?



On Tue, Nov 10, 2009 at 3:52 PM, Johan Reinalda <[hidden email]> wrote:
Scott,
 
I found the answer in the original ticket I put in with the mods.
However, when I modify in my overlay
 
    src/main/webapp/WEB-INF/spring-configuration/argumentExtractorsConfiguration.xml
 
with this
 
<bean
        name="googleAccountsArgumentExtractor"
        class="org.jasig.cas.web.support.GoogleAccountsArgumentExtractor"
        p:privateKey-ref="privateKeyFactoryBean"
        p:publicKey-ref="publicKeyFactoryBean"
        p:alternateUsername="mail" />
 
 
I get the following error starting the app.
 
Caused by: org.springframework.beans.NotWritablePropertyException: Invalid property 'alternateUsername' of bean class [org.jasig.cas.web.support.GoogleAccountsArgumentExtractor]: Bean property 'alternateUsername' is not writable or has an invalid setter method. Does the parameter type of the setter match the return type of the getter?
        at org.springframework.beans.BeanWrapperImpl.setPropertyValue(BeanWrapperImpl.java:801)
What am I missing ?
 
Johan
 
 
----- Original Message -----
Sent: Tuesday, November 10, 2009 11:09 AM
Subject: Re: [cas-user] CAS Server 3.3.5 Release

Scott,
thanks for 3.3.5
I see:
>* Customizable attribute can  be used for Google Apps login
 
Is this documented somewhere ?
Just starting to look at the code, and it's not obvious to me how you map this.
 
If not yet documented, if you email me, I will test it and get it on the wiki.
 
Thanks,
 
Johan
 
 

----- Original Message -----
Sent: Monday, November 09, 2009 6:59 AM
Subject: [cas-user] CAS Server 3.3.5 Release

Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
HansDB

Re: CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
In reply to this post by Scott Battaglia-2
Some javascript/style in this post has been disabled (why?)
Hi Scott,

I'm particularly interested in this feature:
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
Is there any documentation on this? If not, can I assume the AuthenticationManager in question is "LinkedAuthenticationHandlerAndCredentialsToPrincipalResolverAuthenticationManager.java"? I'd be more then willing to figure out exactly how it works and provide a little documentation for it.

Cheers,
Hans

Scott Battaglia schreef:
Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Scott Battaglia-2

Re: CAS Server 3.3.5 Release

Reply Threaded More More options
Print post
Permalink
There isn't any yet.  But you're looking at the right class.  Its pretty simple.  The constructor takes a map with the keys being the AuthenticationHandler and the values being the CredentialsToPrincipalResolver to call if the authentication handler succeeds.

Cheers.
Scott


On Thu, Nov 12, 2009 at 12:22 PM, Hans De Bisschop <[hidden email]> wrote:
Hi Scott,

I'm particularly interested in this feature:

* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
Is there any documentation on this? If not, can I assume the AuthenticationManager in question is "LinkedAuthenticationHandlerAndCredentialsToPrincipalResolverAuthenticationManager.java"? I'd be more then willing to figure out exactly how it works and provide a little documentation for it.

Cheers,
Hans

Scott Battaglia schreef:
Dear CAS Community,

We're pleased to announce the 3.3.5 release of the CAS Server.  Recent additions include:

* Expired tickets will not trigger global logout when removed (note, this only works for registries that use the TicketRegistry Cleaners)
* Improved messages for SAML ticket validation failures
* All service authorization failures are logged at WARN level
* Upgrade to JBoss Cache 2.2.1.GA
* new AuthenticationManager that maps AuthenticationHandlers and CredentialsToPrincipalResolvers such that a successful authentication handler triggers a specific CredentialsToPrincipalResolver (sponsored by Pepperdine University)
* Upgrade to XMLSec 1.4.3
* Improved m2Eclipse support
* Upgrade to Spring Web Flow 1.0.6
* Customizable attribute can  be used for Google Apps login
* Upgrade to Spring 2.5.6.SEC01
* Removed whitespace from SAML responses
* Fixed that misconfigured TicketExpirationPolicies can cause stack overflow errors.
* Enhancements to failed login attempt throttling (addition of Inspektr-backed version, in-memory IpAddress+NetId version) (sponsored by Unicon's CAS Cooperative Support Program)

The release is available in the Jasig Maven2 Repositories under the groupId org.jasig.cas

The releases are also available from the Jasig Download Center:
* http://www.ja-sig.org/downloads/cas/

Thanks to everyone who helped prepare this release.

Cheers,
Scott
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user