使用CAS整合LDAP实现单点登录(SSO)-从0到1-搭建CAS服务器

接着上一篇文章 ： https://blog.youkuaiyun.com/lwlfox/article/details/106838154

 

1.配置cas-server，将下面的配置内容放入/etc/cas/config/cas.properties文件中(一定要是这个路径，SpringBoot也支持命令行指定配置文件，有兴趣的同学可以研究)

cas.server.name=https://mycas.yourdomain.cn:7998 #使用你的域名地址，这个端口号和下面的server.port保存一致
cas.server.prefix=${cas.server.name}/cas

logging.config=file:/data/cas/log4j2.xml
logging.level.org.apereo.cas=DEBUG

endpoints.enabled=true
endpoints.sensitive=false
cas.monitor.endpoints.enabled=true
cas.monitor.endpoints.sensitive=false

management.contextPath=/status
management.security.roles=ACTUATOR,ADMIN


endpoints.restart.enabled=true
endpoints.shutdown.enabled=true
endpoints.autoconfig.enabled=true
endpoints.beans.enabled=true
endpoints.bus.enabled=true
endpoints.configprops.enabled=true
endpoints.dump.enabled=true
endpoints.env.enabled=true
endpoints.health.enabled=true
endpoints.features.enabled=true
endpoints.info.enabled=true
endpoints.loggers.enabled=true
endpoints.logfile.enabled=true
endpoints.trace.enabled=true
endpoints.docs.enabled=true
endpoints.heapdump.enabled=true

cas.adminPagesSecurity.ip=^10\\.64\\.1\\.[0-9]{1,3}$
cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
cas.adminPagesSecurity.users=file:/etc/cas/config/adminusers.properties
cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN

cas.adminPagesSecurity.actuatorEndpointsEnabled=true


cas.serviceRegistry.watcherEnabled=true
cas.serviceRegistry.schedule.repeatInterval=120000
cas.serviceRegistry.schedule.startDelay=150000
cas.serviceRegistry.initFromJson=true

server.contextPath=/cas

server.port=7998

server.ssl.keyStore=file:/data/cas/server.keystore  #这个文件是生成的新的JKS格式的阿里云证书路径
server.ssl.keyStorePassword=Password123! #<你的密码>
server.ssl.keyPassword=Password123! #<你的密码>
server.ssl.ciphers=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_RC4_128_SHA
server.ssl.enabled=true
server.ssl.keyAlias=cas
server.ssl.keyStoreType=jks
server.ssl.protocol=TLS

server.maxHttpHeaderSize=2097152
server.useForwardHeaders=true
server.connectionTimeout=20000

cas.tgc.secure=true
cas.tgc.httpOnly=true
cas.tgc.rememberMeMaxAge=1209600

cas.ticket.tgt.maxTimeToLiveInSeconds=1296000
cas.ticket.tgt.timeToKillInSeconds=43200

cas.ticket.tgt.rememberMe.enabled=true
cas.ticket.tgt.rememberMe.timeToKillInSeconds=1209600

cas.messageBundle.encoding=UTF-8
cas.messageBundle.commonNames=file:/data/cas/messages_zh_CN.properties #文件内容在下面

cas.tgc.crypto.encryption.key=UNkH3oyQiotvxZlEoKuN68PmeZdhSJgNxVoLNtsCVd0
cas.tgc.crypto.signing.ke