Advertisement
Guest User

Untitled

a guest
Oct 7th, 2017
106
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.78 KB | None | 0 0
  1. cas.server.name: https://localhost:8080
  2. cas.server.prefix: https://localhost:8080/cas
  3.  
  4. logging.config: file:/etc/cas/config/log4j2.xml
  5. cas.serviceRegistry.config.location:file:/etc/cas/services
  6.  
  7. server.port = 8080
  8. cas.authn.oidc.issuer=https://localhost:8080/cas/oidc
  9.  
  10. server.ssl.keyStore=file:/home/.keystore
  11. server.ssl.keyStorePassword=changeit
  12. server.ssl.keyPassword=changeit
  13. server.ssl.keyAlias=tomcat
  14.  
  15. cas.authn.accept.users =
  16.  
  17.  
  18.  
  19. #Themes properties
  20. cas.theme.defaultThemeName=ajman
  21. cas.theme.paramName=ajman
  22.  
  23. #Services registry section
  24.  
  25. #cas.serviceRegistry.initFromJson=true
  26. #cas.serviceRegistry.jpa.healthQuery=SELECT 1
  27. #cas.serviceRegistry.jpa.url=jdbc:mysql://localhost:3306/CAS
  28. #cas.serviceRegistry.jpa.dialect=org.hibernate.dialect.MySQL5Dialect
  29. #cas.serviceRegistry.jpa.user=root
  30. #cas.serviceRegistry.jpa.ddlAuto=update
  31. #cas.serviceRegistry.jpa.password=Pr0xym-1T
  32. #cas.serviceRegistry.jpa.driverClass=com.mysql.cj.jdbc.Driver
  33. #cas.serviceRegistry.jpa.isolateInternalQueries=false
  34. #cas.serviceRegistry.jpa.failFast=true
  35. #cas.serviceRegistry.jpa.leakThreshold=10
  36. #cas.serviceRegistry.jpa.batchSize=1
  37. #cas.serviceRegistry.jpa.defaultCatalog=
  38. #cas.serviceRegistry.jpa.defaultSchema=
  39. #cas.serviceRegistry.jpa.autocommit=true
  40. #cas.serviceRegistry.jpa.idleTimeout=5000
  41. cas.serviceRegistry.jpa.idleTimeout=30000
  42. cas.serviceRegistry.initFromJson=true
  43. cas.serviceRegistry.jpa.healthQuery=select 1
  44. cas.serviceRegistry.jpa.url=jdbc:sqlserver://172.16.20.8;useNTLMv2=true;database=CASDatabase;
  45. cas.serviceRegistry.jpa.dialect=org.hibernate.dialect.SQLServer2012Dialect
  46. cas.serviceRegistry.jpa.user=sa
  47. cas.serviceRegistry.jpa.ddlAuto=update
  48. cas.serviceRegistry.jpa.password=Pr0xym-1T
  49. cas.serviceRegistry.jpa.driverClass=com.microsoft.sqlserver.jdbc.SQLServerDriver
  50.  
  51. cas.authn.rest.uri=http://ajec.proxym-it.tn:8090/Cas-Api-Auth/Ajec_sso_api_auth/casAuth
  52.  
  53. #Synchronize and resolve attributes
  54. cas.authn.attributeRepository.ldap[0].attributes.uid=userName
  55. cas.authn.attributeRepository.ldap[0].attributes.displayName=displayName
  56. cas.authn.attributeRepository.ldap[0].attributes.cn=emailAjecUser
  57. cas.authn.attributeRepository.ldap[0].attributes.affiliation=groupMembership
  58. #cas.authn.attributeRepository.ldap[0].attributes.cn=cn
  59. cas.authn.attributeRepository.ldap[0].attributes.emailAjecUser=emailAjecUser
  60. cas.authn.attributeRepository.ldap[0].attributes.sAMAccountName=sAMAccountName
  61. cas.authn.attributeRepository.ldap[0].attributes.userName=userName
  62. cas.authn.attributeRepository.ldap[0].attributes.accountTypeAjecUser=accountTypeAjecUser
  63. cas.authn.attributeRepository.ldap[0].attributes.trustLevel=trustLevel
  64. cas.authn.attributeRepository.ldap[0].attributes.passportNumberAjecUser=passportNumberAjecUser
  65. cas.authn.attributeRepository.ldap[0].attributes.countryCodeAjecUser=countryCodeAjecUser
  66. cas.authn.attributeRepository.ldap[0].attributes.tradeLicenseNumberAjecUser=tradeLicenseNumberAjecUser
  67. cas.authn.attributeRepository.ldap[0].attributes.emirateAjecUser=emirateAjecUser
  68. cas.authn.attributeRepository.ldap[0].attributes.companyNameAjecUser=companyNameAjecUser
  69. cas.authn.attributeRepository.ldap[0].attributes.mobileNumber=mobileNumber
  70. cas.authn.attributeRepository.ldap[0].attributes.genderAjecUser=genderAjecUser
  71. cas.authn.attributeRepository.ldap[0].attributes.birthDateAjecUser=birthDateAjecUser
  72. cas.authn.attributeRepository.ldap[0].attributes.contactLanguageAjecUser=contactLanguageAjecUser
  73. cas.authn.attributeRepository.ldap[0].attributes.contactMethodAjecUser=contactMethodAjecUser
  74. cas.authn.attributeRepository.ldap[0].attributes.addressAjecUser=addressAjecUser
  75. cas.authn.attributeRepository.ldap[0].attributes.password=password
  76. cas.authn.attributeRepository.ldap[0].attributes.eidAjecUser=eidAjecUser
  77. cas.authn.attributeRepository.ldap[0].attributes.accountExpires=accountExpires
  78. cas.authn.attributeRepository.ldap[0].attributes.accountTypeUser=accountTypeUser
  79. cas.authn.attributeRepository.ldap[0].attributes.tokenAjecUser=tokenAjecUser
  80. #cas.authn.attributeRepository.ldap[0].attributes.userPassword=userPassword
  81. cas.authn.attributeRepository.ldap[0].attributes.lastName=lastName
  82. cas.authn.attributeRepository.ldap[0].attributes.firstName=firstName
  83. #cas.authn.ldap[0].principalAttributeList=cn,sAMAccountName,sn,co,givenName,accountTypeUser,genderAjecUser,birthDateAjecUser
  84. cas.authn.attributeRepository.defaultAttributesToRelease=cn,sAMAccountName,sn,co,givenName,accountTypeUser,genderAjecUser,birthDateAjecUser,mobileNumber
  85.  
  86. # Map fixed claims to CAS attributes
  87. cas.authn.oidc.claimsMap.eidAjecUserClaim=eidAjecUser
  88. cas.authn.oidc.claimsMap.passportNumberAjecUserClaim=passportNumberAjecUser
  89. cas.authn.oidc.claimsMap.emailAjecUserClaim=emailAjecUser
  90. cas.authn.oidc.claimsMap.sAMAccountNameClaim=sAMAccountName
  91. cas.authn.oidc.claimsMap.userNameClaim=userName
  92. cas.authn.oidc.claimsMap.contactLanguageAjecUserClaim=contactLanguageAjecUser
  93. #cas.authn.oidc.claimsMap.passwordClaim=password
  94. #cas.authn.oidc.claimsMap.userPasswordClaim=userPassword
  95. cas.authn.oidc.claimsMap.lastNameClaim=lastName
  96. cas.authn.oidc.claimsMap.contactMethodAjecUserClaim=contactMethodAjecUser
  97. cas.authn.oidc.claimsMap.tokenAjecUserClaim=tokenAjecUser
  98. cas.authn.oidc.claimsMap.tradeLicenseNumberAjecUserClaim=tradeLicenseNumberAjecUser
  99. cas.authn.oidc.claimsMap.accountExpiresClaim=accountExpires
  100. cas.authn.oidc.claimsMap.accountTypeAjecUserClaim=accountTypeAjecUser
  101. cas.authn.oidc.claimsMap.trustLevelClaim=trustLevel
  102. cas.authn.oidc.claimsMap.companyNameAjecUserClaim=companyNameAjecUser
  103. cas.authn.oidc.claimsMap.addressAjecUserClaim=addressAjecUser
  104. cas.authn.oidc.claimsMap.countryCodeAjecUserClaim=countryCodeAjecUser
  105. cas.authn.oidc.claimsMap.emirateAjecUserClaim=emirateAjecUser
  106. cas.authn.oidc.claimsMap.mobileNumberClaim = mobileNumber
  107. cas.authn.oidc.claimsMap.firstNameClaim = firstName
  108. cas.authn.oidc.claims=firstNameClaim,mobileNumberClaim,passportNumberAjecUserClaim,addressAjecUserClaim,countryCodeAjecUserClaim,companyNameAjecUserClaim,emirateAjecUserClaim,emailAjecUserClaim,accountTypeAjecUserClaim,trustLevelClaim,accountExpiresClaim,tradeLicenseNumberAjecUserClaim,tokenAjecUserClaim,contactMethodAjecUserClaim,lastNameClaim,contactLanguageAjecUserClaim,userNameClaim,sAMAccountNameClaim,sub,name,preferred_username,family_name,given_name,middle_name,given_name,profile,picture,nickname,website,zoneinfo,locale,updated_at,birthdate,email,email_verified,phone_number,phone_number_verified,address,emailAjecUser,birthDateAjecUser,eidAjecUserClaim
  109. cas.authn.oidc.scopes=openid,profile,email,address,phone,offline_access,ajman_profile
  110.  
  111. cas.authn.oidc.userDefinedScopes.ajman_profile=firstNameClaim,mobileNumberClaim,passportNumberAjecUserClaim,companyNameAjecUserClaim,countryCodeAjecUserClaim,addressAjecUserClaim,emirateAjecUserClaim,companyNameAjecUser,countryCodeAjecUser,accountExpiresClaim,cn,accountTypeAjecUserClaim,trustLevelClaim,tradeLicenseNumberAjecUserClaim,tradeLicenseNumberAjecUserClaim,userNameClaim,tokenAjecUserClaim,contactMethodAjecUserClaim,lastNameClaim,passportNumberAjecUserClaim,contactLanguageAjecUserClaim,userPasswordClaim,passwordClaim,sAMAccountNameClaim,emailAjecUserClaim,birthDateAjecUser,eidAjecUserClaim
  112.  
  113.  
  114.  
  115. cas.authn.attributeRepository.ldap[0].ldapUrl=ldap://172.16.20.21:389
  116. # cas.authn.attributeRepository.ldap[0].connectionStrategy=
  117. cas.authn.attributeRepository.ldap[0].order=0
  118. cas.authn.attributeRepository.ldap[0].useSsl=false
  119. cas.authn.attributeRepository.ldap[0].useStartTls=false
  120. cas.authn.attributeRepository.ldap[0].connectTimeout=5000
  121. cas.authn.attributeRepository.ldap[0].baseDn=cn=Users,dc=uib,dc=dev
  122. cas.authn.attributeRepository.ldap[0].userFilter=(|(sAMAccountName={user})(emailAjecUser={user}))
  123. cas.authn.attributeRepository.ldap[0].subtreeSearch=true
  124. cas.authn.attributeRepository.ldap[0].bindDn=cn=Administrator,cn=Users,dc=uib,dc=dev
  125. cas.authn.attributeRepository.ldap[0].bindCredential=Pr0xym-1T
  126. # cas.authn.attributeRepository.ldap[0].trustCertificates=
  127. # cas.authn.attributeRepository.ldap[0].keystore=
  128. # cas.authn.attributeRepository.ldap[0].keystorePassword=
  129. # cas.authn.attributeRepository.ldap[0].keystoreType=JKS|JCEKS|PKCS12
  130. # cas.authn.attributeRepository.ldap[0].poolPassivator=NONE|CLOSE|BIND
  131. cas.authn.attributeRepository.ldap[0].minPoolSize=3
  132. cas.authn.attributeRepository.ldap[0].maxPoolSize=10
  133. # cas.authn.attributeRepository.ldap[0].validateOnCheckout=true
  134. # cas.authn.attributeRepository.ldap[0].validatePeriodically=true
  135. # cas.authn.attributeRepository.ldap[0].validatePeriod=600
  136. # cas.authn.attributeRepository.ldap[0].validateTimeout=5000
  137. # cas.authn.attributeRepository.ldap[0].failFast=true
  138. # cas.authn.attributeRepository.ldap[0].idleTime=500
  139. # cas.authn.attributeRepository.ldap[0].prunePeriod=600
  140. # cas.authn.attributeRepository.ldap[0].blockWaitTime=5000
  141. # cas.authn.attributeRepository.ldap[0].providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider
  142.  
  143. # cas.authn.attributeRepository.ldap[0].validator.type=NONE|SEARCH|COMPARE
  144. # cas.authn.attributeRepository.ldap[0].validator.baseDn=
  145. # cas.authn.attributeRepository.ldap[0].validator.searchFilter=(objectClass=*)
  146. # cas.authn.attributeRepository.ldap[0].validator.scope=OBJECT|ONELEVEL|SUBTREE
  147. # cas.authn.attributeRepository.ldap[0].validator.attributeName=objectClass
  148. # cas.authn.attributeRepository.ldap[0].validator.attributeValues=top
  149. # cas.authn.attributeRepository.ldap[0].validator.dn=
  150.  
  151.  
  152.  
  153.  
  154. #Rest Access Properties
  155. cas.rest.attributeName=cn
  156. cas.rest.attributeValue=Administrator
  157. cas.rest.throttler=neverThrottle
  158.  
  159. cas.serviceRegistry.watcherEnabled=true
  160. cas.serviceRegistry.repeatInterval=120000
  161.  
  162. # IP address may be enough to protect all endpoints.
  163. # If you wish to protect the admin pages via CAS itself, configure the rest.
  164. #cas.adminPagesSecurity.ip=127\.0\.0\.1
  165. cas.adminPagesSecurity.loginUrl=https://localhost:8080/cas/login
  166. cas.adminPagesSecurity.service=https://localhost:8080/cas/status/dashboard
  167. cas.adminPagesSecurity.users=file:/etc/cas/config/adminusers.properties
  168. cas.adminPagesSecurity.adminRoles=ROLE_ADMIN
  169.  
  170. cas.adminPagesSecurity.actuatorEndpointsEnabled=true
  171.  
  172.  
  173. #MYSQL CONFIGURATION
  174. # cas.ticket.registry.jpa.ticketLockType=NONE
  175. # cas.ticket.registry.jpa.jpaLockingTimeout=3600
  176. ##cas.ticket.registry.jpa.healthQuery=SELECT 1
  177. # cas.ticket.registry.jpa.isolateInternalQueries=false
  178. ##cas.ticket.registry.jpa.url=jdbc:mysql://localhost:3306/CAS
  179. # cas.ticket.registry.jpa.failFast=true
  180. ##cas.ticket.registry.jpa.dialect=org.hibernate.dialect.MySQL5Dialect
  181. # cas.ticket.registry.jpa.leakThreshold=10
  182. # cas.ticket.registry.jpa.jpaLockingTgtEnabled=true
  183. # cas.ticket.registry.jpa.batchSize=1
  184. # cas.ticket.registry.jpa.defaultCatalog=
  185. # cas.ticket.registry.jpa.defaultSchema=
  186. ##cas.ticket.registry.jpa.user=root
  187. ##cas.ticket.registry.jpa.ddlAuto=update
  188. ##cas.ticket.registry.jpa.password=Pr0xym-1T
  189. # cas.ticket.registry.jpa.autocommit=false
  190. ##cas.ticket.registry.jpa.driverClass=com.mysql.cj.jdbc.Driver
  191. # cas.ticket.registry.jpa.idleTimeout=5000
  192. # cas.ticket.registry.jpa.dataSourceName=
  193. # cas.ticket.registry.jpa.dataSourceProxy=false
  194.  
  195. # cas.ticket.registry.jpa.pool.suspension=false
  196. # cas.ticket.registry.jpa.pool.minSize=6
  197. # cas.ticket.registry.jpa.pool.maxSize=18
  198. # cas.ticket.registry.jpa.pool.maxWait=2000
  199.  
  200. # cas.ticket.registry.jpa.crypto.signing.key=
  201. # cas.ticket.registry.jpa.crypto.signing.keySize=512
  202. # cas.ticket.registry.jpa.crypto.encryption.key=
  203. # cas.ticket.registry.jpa.crypto.encryption.keySize=16
  204. # cas.ticket.registry.jpa.crypto.alg=AES
  205.  
  206.  
  207. #SQLSERVER CONFIGURATION
  208. # cas.ticket.registry.jpa.ticketLockType=NONE
  209. # cas.ticket.registry.jpa.jpaLockingTimeout=3600
  210. cas.ticket.registry.jpa.healthQuery=select 1
  211. # cas.ticket.registry.jpa.isolateInternalQueries=false
  212. cas.ticket.registry.jpa.url=jdbc:sqlserver://172.16.20.8;useNTLMv2=true;database=CASDatabase;
  213. # cas.ticket.registry.jpa.failFast=true
  214. cas.ticket.registry.jpa.dialect=org.hibernate.dialect.SQLServer2012Dialect
  215. # cas.ticket.registry.jpa.leakThreshold=10
  216. # cas.ticket.registry.jpa.jpaLockingTgtEnabled=true
  217. # cas.ticket.registry.jpa.batchSize=1
  218. # cas.ticket.registry.jpa.defaultCatalog=
  219. # cas.ticket.registry.jpa.defaultSchema=
  220. cas.ticket.registry.jpa.user=sa
  221. cas.ticket.registry.jpa.ddlAuto=update
  222. cas.ticket.registry.jpa.password=Pr0xym-1T
  223.  
  224. # cas.ticket.registry.jpa.autocommit=false
  225. cas.ticket.registry.jpa.driverClass=com.microsoft.sqlserver.jdbc.SQLServerDriver
  226. # cas.ticket.registry.jpa.idleTimeout=5000
  227. # cas.ticket.registry.jpa.dataSourceName=
  228. # cas.ticket.registry.jpa.dataSourceProxy=false
  229.  
  230. # cas.ticket.registry.jpa.pool.suspension=false
  231. # cas.ticket.registry.jpa.pool.minSize=6
  232. # cas.ticket.registry.jpa.pool.maxSize=18
  233. # cas.ticket.registry.jpa.pool.maxWait=2000
  234.  
  235. # cas.ticket.registry.jpa.crypto.signing.key=
  236. # cas.ticket.registry.jpa.crypto.signing.keySize=512
  237. # cas.ticket.registry.jpa.crypto.encryption.key=
  238. # cas.ticket.registry.jpa.crypto.encryption.keySize=16
  239. # cas.ticket.registry.jpa.crypto.alg=AES
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement