uPortal配置CAS,配置登陆、登出链接

最新推荐文章于 2022-06-06 19:41:11 发布

最新推荐文章于 2022-06-06 19:41:11 发布 · 486 阅读

文章标签：

#Configuring uPortal to use CAS

uPortal4 同时被 2 个专栏收录

3 篇文章

订阅专栏

cas

2 篇文章

订阅专栏

本文介绍如何配置uPortal以使用内置或外部CAS服务。主要内容包括修改配置文件web.xml和security.properties，以确保uPortal能够正确地与CAS进行交互。此外还提供了移除默认CAS服务并配置外部CAS的步骤。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

配置uPortal的cas

uPortal 4 默认绑定了一个cas服务. 这个cas 服务跟uPortal服务一起启动。

如果默认的cas有以下几项发生改变之后，要想uPortal继续能够使用默认绑定的cas，则uPortal也要修改两个文件才能继续使用cas：web.xml和security.properties。

server hostname cas
server port
SSL/non-SSL
application context name change
uPortal和cas不再用localhost访问，从其他地方用ip访问

修改：1.web.xml： CAS Validate Filter里面的"localhost"改成cas服务地址

2.security.properties： "logoutRedirect.root" 和 "org.jasig.portal.channels.CLogin.CasLoginUrl"对应的地址

Option 1: 修改默认自带的cas

Step 1: 修改filters/local.properties

1. NEW: 在filters文件夹, local.properties文件记录了cas服务器的配置，把“localhost:8080”改成cas修改后的地址即可。

# HSQL Configuration

environment.build.hsql.port=8887
 
# Database Connection Settings (Uncomment the Maven Filters section in rdbm.properties)
environment.build.hibernate.connection.driver_class=org.hsqldb.jdbc.JDBCDriver

environment.build.hibernate.connection.url=jdbc:hsqldb:hsql://localhost:${environment.build.hsql.port}/uPortal
environment.build.hibernate.connection.username=sa
environment.build.hibernate.connection.password=
environment.build.hibernate.dialect=org.hibernate.dialect.HSQLDialect
 
# uPortal server configuration properties

environment.build.uportal.server=localhost:8080
environment.build.uportal.protocol=http
environment.build.uportal.context=/uPortal

environment.build.uportal.email.fromAddress=portal@university.edu
 
# CAS server configuration properties

environment.build.cas.server=localhost:8080
environment.build.cas.protocol=http

Step 2: uportal-war/src/main/resources/properties/security.properties

如果你要修改uPortal首页的登录和登出连接，则找到security.properties文件,修改即可。

logoutRedirect.root 默认情况下登出是跳到了cas的登出页面.

如果你想用户点击“ logging out“跳转到你想要的页面

你就把登出超链接的"url="修改成"service="

logoutRedirect.root=${environment.build.cas.protocol}://${environment.build.cas.server}/cas/logout?

service=${environment.build.uportal.protocol}://${environment.build.uportal.server}${environment.build.uportal.context}/Login

uportal-war/src/main/resources/properties/security.properties

## This is the factory that supplies the concrete authentication class
root=org.jasig.portal.security.provider.UnionSecurityContextFactory
root.cas=org.jasig.portal.security.provider.cas.CasAssertionSecurityContextFactory
#root.cas=org.jasig.cas3.extensions.clearpass,integration.uportal.PasswordCachingCasAssertionSecurityContextFactory 
root.simple=org.jasig.portal.security.provider.SimpleSecurityContextFactory
 
## Answers what tokens are examined in the request for each context during authentication.

## A subcontext only needs to set its tokens if it differs from those of the root context.
principalToken.root=userName
credentialToken.root=password
credentialToken.root.cas=ticket
 
## Answers where the user will be redirected when log out occurs. Each security context can have one.

## (See comments in the LogoutServlet class)
## It would be better to escape the value of the url parameter, but since there are no parameters on the

## unescaped URL and since there are no further parameters on the logout URL, this does work.

logoutRedirect.root=${environment.build.cas.protocol}://${environment.build.cas.server}/cas/logout?url=${environment.build.uportal.protocol}://${environment.build.uportal.server}${environment.build.uportal.context}/Login
 
## This is the factory that supplies the concrete authorization class
authorizationProvider=org.jasig.portal.security.provider.AuthorizationServiceFactoryImpl
 
## Login URL, if specified the CLogin channel will display a Login link with

## this URL instead of the standard userName/password form.

org.jasig.portal.channels.CLogin.CasLoginUrl=${environment.build.cas.protocol}://${environment.build.cas.server}/cas/login?service=${environment.build.uportal.protocol}://${environment.build.uportal.server}${environment.build.uportal.context}/Login
 
## URL of the CAS cleartext password service

#org.jasig.cas3.extensions.clearpass.integration.uportal.PasswordCachingCasAssertionSecurityContextFactory.clearPassCasUrl=${environment.build.cas.protocol}://${environment.build.cas.server}/cas/clearPass
 
###
...

Step 3: Rebuild uPortal

这里是要先情况之前老的部署，cmd命令进入..\uPortal-4.0.5-quick-start\uPortal-4.0.5,不能会报出找不到clean这个目标

ant clean deploy-ear

Step 4: Restart Tomcat

Note: If you choose not to configure the CasLoginUrl parameter you will receive the following error, "Could not resolve property placeholder ${org.jasig.portal.channels.CLogin.CasLoginUrl}". This error stems from the CasLoginUrl parameter being referenced in two files: jsonRenderingPipelinContext.xml andrenderingPipelineContext.xml located in the directory path, uportal-war/src/main/resources/properties/contexts. Therefore, you will need to remove (comment out) the CasLoginUrl parameter reference in the two xml files.