Service Management Web App - Authenticating with client certificates

[Andy Cowling-2]

Some javascript/style in this post has been disabled (why?)

Hi there

Our CAS installation requires client certificates from end users and applications. A user can only authenticate with cas if they provide a valid username and password _and_ client certificate. Consequently our CAS installation will not answer any ticket validation requests from applications (services) that do not provide a client certificate. In order to use the Service Management web app, that too will need its own client certificate. Where can we configure that?

Cheers
Andy

[Marvin Addison]

> In order
> to use the Service Management web app, that too will need its own client
> certificate. Where can we configure that?

Certificate configuration for a Java Web application happens at the
container level, e.g. Tomcat.  Here's the link to the Tomcat 6 HTTP
connector configuration guide,
http://tomcat.apache.org/tomcat-6.0-doc/config/http.html, which is the
default setup for Tomcat.  If you're fronting with Apache, you would
use the mod_ssl directives to configure Apache to request a cert from
the client.

M

--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user