安装JA-SIG SSO系统笔记1

安装JA-SIG SSO系统笔记1

(关于配置访问数据库的用户表见安装JA-SIG SSO系统笔记2)
(与acegi结合配置见安装JA-SIG SSO系统笔记3)
(ASP.NET client端的设置见安装JA-SIG SSO系统笔记4)

ps:配置中的文件路径根据自己的实际情况的设定

1.安装JA-SIG 到 TOMCAT;
JA-SIG下载地址:
http://www.ja-sig.org/products/cas/downloads/index.html

2.生成数字证书,见批处理文件"cas 生成数字证书.bat";

3.配置Tomcat的HTTPS服务,修改server.xml

<Connector protocol="org.apache.coyote.http11.Http11Protocol"
         port="8443" minSpareThreads="5" maxSpareThreads="75"
         enableLookups="true" disableUploadTimeout="true"
         acceptCount="100"  maxThreads="200"
         scheme="https" secure="true" SSLEnabled="true"
         keystoreFile="C:/Documents and Settings/Administrator/.keystore" keystorePass="changeit"
         truststoreFile="D:/Java/jdk1.6.0_02/jre/lib/security/cacerts"
         clientAuth="false" sslProtocol="TLS"/>

		<Connector protocol="org.apache.coyote.http11.Http11Protocol"
           port="8443" minSpareThreads="5" maxSpareThreads="75"
           enableLookups="true" disableUploadTimeout="true" 
           acceptCount="100"  maxThreads="200"
           scheme="https" secure="true" SSLEnabled="true"
           keystoreFile="C:/Documents and Settings/Administrator/.keystore" keystorePass="changeit"
           truststoreFile="D:/Java/jdk1.6.0_02/jre/lib/security/cacerts"
           clientAuth="false" sslProtocol="TLS"/>

4.导出 SERVER 的证书，用来给所有需要用到的客户端导入,见"导出 cas 数字证书.bat"

5.在客户端的 JVM 里导入信任的 SERVER 的证书 ( 根据情况有可能需要管理员权限 ),见"导入 cas 证书.bat"；

5.修改客户端服务程序,加入cas过滤器,修改web.xml

<!-- CAS -->
<filter>
 <filter-name>CAS Filter</filter-name>
 <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
 <init-param>
  <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
  <param-value>https://sso.gzps.net:8443/cas/login</param-value>
 </init-param>
 <init-param>
  <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
  <param-value>https://sso.gzps.net:8443/cas/serviceValidate</param-value>
 </init-param>
 <init-param>
  <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
  <param-value>88.148.29.54:8080</param-value>
 </init-param>
</filter>
<filter-mapping>
    <filter-name>CAS Filter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>