## ./app/model/user.rb
require 'casserver/authenticators/sql_encrypted'

class User < ActiveRecord::Base
  include CASServer::Authenticators::SQLEncrypted::EncryptedPassword

end

## config.yml for rubycas-server
authenticator:
  class: CASServer::Authenticators::SQLEncrypted
  database:
    adapter: mysql
    database: mwp_cas
    username: root
    password: foo
    server: localhost
  user_table: users
  username_column: username

## logging output enabled in .../gems/rubycas-server-0.7.0/lib/casserver/authenticators/sql_encrypted.rb
    def encrypt(str)
      #Digest::SHA256.hexdigest("#{encryption_salt}::#{str}")
      enc = Digest::SHA256.hexdigest("#{encryption_salt}::#{str}")
      $LOG.debug("Password #{str.inspect} encrypted to '#{enc.inspect}")
      return enc
    end

## active record for user in users table
<User id: 1, username: "admin", encrypted_password: "62949da7014ce57be8ddc974eeb0645a036adebeaa6b1ea4172...", encryption_salt: "ea854bd45dd8e17f4bb7f4bb7972512a7c9dedbf", created_at: "2008-11-07 11:49:15", updated_at: "2008-11-07 11:49:15">

## casserver.log [plain_text]
D, [2008-11-07T13:23:39.431355 #16993] DEBUG -- : Processing CASServer::Controllers::Login::send {"service"=>"", "username"=>"admin", "lt"=>"LT-1226060589rB1106725A1CF36B418", "password"=>"******"}
D, [2008-11-07T13:23:39.431458 #16993] DEBUG -- : Validating login ticket 'LT-1226060589rB1106725A1CF36B418'
I, [2008-11-07T13:23:39.432419 #16993]  INFO -- : Login ticket 'LT-1226060589rB1106725A1CF36B418' successfully validated
D, [2008-11-07T13:23:39.445762 #16993] DEBUG -- : Generated login ticket 'LT-1226060619r9FF9ADF497D778F2D4' for client at 'localhost'
D, [2008-11-07T13:23:39.445970 #16993] DEBUG -- : Logging in with username: admin, lt: LT-1226060619r9FF9ADF497D778F2D4, service: , auth: #<CASServer::Authenticators::SQLEncrypted:0xb7433034>
D, [2008-11-07T13:23:39.451947 #16993] DEBUG -- : Password "admin" encrypted to '"988cd59bf157a36cbee07e348d0b93877d75838f938f1910d03e9444813e63d8"
W, [2008-11-07T13:23:39.452068 #16993]  WARN -- : Invalid credentials given for user 'admin'

##