CAS 服务端3.5.2与客户端3.2.1配置

CAS服务端3.5.2 HTTP SSO 配置

四、数据库验证配置

配置数据源：

<bean id="casDataSource" class="http://www.77cn.com.cnmons.dbcp.BasicDataSource">

<property name="driverClassName" value="com.mysql.jdbc.Driver"></property> <property name="url" value="jdbc:mysql://192.168.1.194:3306/authority"></property> <property name="username" value="root"></property> <property name="password" value="123456"></property> 在deployerConfigContext.xml中添加

<property name="maxActive" value="50"></property> <property name="maxIdle" value="30"></property> <property name="maxWait" value="500"></property> <property name="defaultAutoCommit" value="true"></property> </bean>

authenticationHandlers里添加

<bean class="org.jasig.cas.adaptors.jdbc.SearchModeSearchDatabaseAuthenticationHandler">

<property name="dataSource" ref="casDataSource" /> 数据源

<property name="tableUsers" value="user" /> 表名

<property name="fieldUser" value="user_name"/> 用户名字段

<property name="fieldPassword" value="psw"/>密码字段

</bean>

<bean id="passwordEncoder"

class="org.jasig.cas.authentication.handler.DefaultPasswordEncoder" autowire="byName"> <constructor-arg value="MD5"/>

五，返回用户多个信息

<bean id="attributeRepository"

class="org.jasig.services.persondir.support.jdbc.SingleRowJdbcPersonAttributeDao"> <constructor-arg index="0" ref="casDataSource"/> <constructor-arg index="1" value="select user_code,user_name,name real_name,unit_code from <property name="queryAttributeMapping"> </bean> <property name="passwordEncoder" ref="passwordEncoder"/> 密码加密 user where user_name=?"/>

<map>

<entry key="username" value="user_name" /> 前面的key一定要是username,后面的user_name就是where后面的

</map>

</property>

<property name="resultAttributeMapping">

<map>

<!--key为对应的数据库字段名称，value为提供给客户端获取的属性名字，系统会自动填充值-->

<entry key="user_code" value="user_code"/> 前面是返回的，后面对应的字段名

<entry key="user_name" value="user_name"/> <entry key="real_name" value="real_name"/> <entry key="unit_code" value="unit_code"/>

</map>

</property>

修改

<bean class="org.jasig.cas.services.RegexRegisteredService">

<property name="id" value="0" />

<property name="name" value="HTTP and IMAP" />

<property name="description" value="Allows HTTP(S) and IMAP(S) protocols" /> <property name="serviceId" value="^(https?|imaps?)://.*" />

<property name="evaluationOrder" value="10000001" />

六．修改JSP文件

增加

<c:if

test="${fn:length(assertion.chainedAuthentications[fn:length(assertion.chainedAuthentications)-1].principal.attributes) > 0}">

<cas:attributes>

<c:forEach var="attr"

items="${assertion.chainedAuthentications[fn:length(assertion.chainedAuthentications)-1].principal.attributes}">

<cas:${fn:escapeXml(attr.key)}>${fn:escapeXml(attr.value)}</cas:${fn:escapeXml(attr.key)}>

</c:forEach>

</cas:attributes>

</c:if>

<property name="allowedAttributes"> <list> <value>user_code</value> <value>real_name</value> <value>unit_code</value> </bean> </list> </property> </bean>

客户端配置：

客户端WEB.XML配置 <!-- cas client configure start -->

<filter> <filter-name>CAS Authentication Filter</filter-name>

<init-param> <param-name>casServerLoginUrl</param-name> <param-value>http://192.168.1.144:8000/cas</param-value> ilter-class> </init-param> <init-param> <param-name>serverName</param-name> <param-value>http://192.168.1.111:8080</param-value> </init-param> <init-param> <param-name>renew</param-name> <param-value>false</param-value> </init-param> <init-param> <param-name>gateway</param-name> <param-value>false</param-value> </init-param> </filter> <filter> <filter-name>CAS Validation Filter</filter-name> <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketVa <init-param> <param-name>casServerUrlPrefix</param-name> <param-value>http://192.168.1.144:8000/cas/</param-value> lidationFilter</filter-class> </init-param> <init-param> <param-name>serverName</param-name> <param-value>http://192.168.1.111:8080</param-value> </init-param> <init-param> <param-name>encoding</param-name> <param-value>UTF-8</param-value> </i …… 此处隐藏：2649字，全部文档内容请下载后查看。喜欢就下载吧 ……