Did you read through the CAS documentation?<div><br></div><div>It's extensive (which means it's extensible and includes all manner of clients so your work won't be a "one man' show" or "unsupportable hack" [which is why we are all hanging off the open source wagon in the first place]).</div>
<div><br></div><div>This might bring compatibility issues into clear focus: <a href="https://wiki.jasig.org/display/CASC/AuthCAS">https://wiki.jasig.org/display/CASC/AuthCAS</a></div><div><br></div><div>If you don't use CAS, you might look at the code they used in this piece. </div>
<div><br></div><div>After all, we don't go into a little room and pull code out of our armpits, do we? It's cut, splice, modify for our purposes and debug; is it not?<br><div><br></div><div><br></div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Sat, Dec 29, 2012 at 9:39 AM, Kevin Brown <span dir="ltr"><<a href="mailto:kevinbrownbdc@gmail.com" target="_blank">kevinbrownbdc@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I need it to work with the environment that the company already has in existence. Everything they use is Apache 1 with mod_perl.<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Hi Kevin,<br>
<br>
Why recreate the wheel?<br>
<br></div>
CAS <%20<a href="https://wiki.jasig.org/display/CASUM" target="_blank">https://wiki.jasig.org/<u></u>display/CASUM</a>><br>
<br>
If you determine you really don't need CAS, perhaps this discussion of CAS <%20<a href="https://wiki.jasig.org/display/CASUM" target="_blank">https://wiki.jasig.org/<u></u>display/CASUM</a>> implementation and SAML+1.1 ticket validation: <a href="https://wiki.jasig.org/display/CASUM/SAML+1.1" target="_blank">https://wiki.jasig.org/<u></u>display/CASUM/SAML+1.1</a> might help?<div class="im">
<br>
<br>
<br>
<br>
<br>
<br>
On Fri, Dec 28, 2012 at 2:48 PM, Kevin Brown <<a href="mailto:kevinbrownbdc@gmail.com" target="_blank">kevinbrownbdc@gmail.com</a> <mailto:<a href="mailto:kevinbrownbdc@gmail.com" target="_blank">kevinbrownbdc@gmail.<u></u>com</a>>> wrote:<br>
<br>
So, new job... I've been tasked with implementing SSO using SAML<br>
1.1. The client provided a document that gives an example of the<br>
Response object that will be forwarded into our site when a user<br>
goes to login. I'm trying to figure out how to validate the XML<br>
that I'm given so that I don't blindly trust that the document<br>
hasn't been modified in some way or just faked.<br>
I have the keys (DigestValue and SignatureValue), but when I try<br>
to do a sha1 of the xml (minus all the parts in the<br>
<Signature></Signature> section, the hash doesn't match.<br>
Does anyone have any experience with this that they might be able<br>
to point me in the right direction?<br>
<br>
------------------------------<u></u>---------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.<u></u>org</a><br></div>
<mailto:<a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.<u></u>phxlinux.org</a>><div class="im"><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/<u></u>mailman/listinfo/plug-discuss</a><br>
<br>
<br>
<br>
<br>
-- <br>
<br>
<a href="tel:%28503%29%20754-4452" value="+15037544452" target="_blank">(503) 754-4452</a> Android<br>
<a href="tel:%28623%29%20239-3392" value="+16232393392" target="_blank">(623) 239-3392</a> Skype<br>
<a href="tel:%28623%29%20688-3392" value="+16236883392" target="_blank">(623) 688-3392</a> Google Voice<br>
**<br>
</div><a href="http://it-clowns.com" target="_blank">it-clowns.com</a> <<a href="http://it-clowns.com" target="_blank">http://it-clowns.com</a>><br>
Chief Clown<div class="im"><br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
------------------------------<u></u>---------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.<u></u>org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/<u></u>mailman/listinfo/plug-discuss</a><br>
</div></blockquote><div class="HOEnZb"><div class="h5">
<br>
------------------------------<u></u>---------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.<u></u>org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/<u></u>mailman/listinfo/plug-discuss</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><br></div>(503) 754-4452 Android<br>(623) 239-3392 Skype<br>(623) 688-3392 Google Voice<br>**<br><a href="http://it-clowns.com" target="_blank">it-clowns.com</a> <br>
Chief Clown<br><br><br><br><br><br><br><br><br><br><br><br><br><br>
</div>