Version 2.0.0 has been written to ease the
integration of new handlers, without any modification of the existing code.
No DTD is used any more for the XML configuration. Authentication
is configured by a list of handlers, specified by a class and a specific
handler configuration. For instance, people relying on LDAP authentication may
now use something like:
<authentication>
<handler>
<classname>
org.esupportail.cas.server.handlers.ldap.FastBindLdapHandler
</classname>
<config>
<filter>uid=%u,ou=people,dc=esup-portail,dc=org</filter>
<server>
<url>ldap://ldap.esup-portail.org</url>
</server>
<server>
<url>ldap://replica.esup-portail.org</url>
</server>
</config>
</handler>
</authentication>
This stands for people using low-level configuration;
people using high-level configuration won't see any change.
It is highly recommended that users of 1.0.x LDAP
handlers upgrade to 2.0.0 because of a bug fix. Version 2.0.0 also brings many
enhancements and new features.
For more information, please refer to http://esup-casgeneric.sourceforge.net.
Changes
in version 2.0.0
Bug
fix
- LDAP connections were not closed (Pascal Aubry,
pointed out by Vincent Mathieu).
New
features
- Any handler can be added without modifying the
code (Pascal Aubry, requested by Vincent Mathieu, Julien Marchal and Todd
Runstein). As a consequence, no DTD is used anymore.
- Several-in-one LDAP URLs can be used with the
LDAP handlers (Pascal Aubry).
- The QueryDatabaseHandler allows complex queries
to extract users' passwords from databases (Arunas Stockus).
- Added new authentication templates: ldap-search,
ldap-search-rep, file, database-bind, database-search and database-query
(Pascal Aubry, requested by Vincent Mathieu).
Enhancements
- Now includes jakarta-tomcat 5.0.25 (Pascal
Aubry).
- Added few controls on externals classes, such as
NIS JNDI provider, JDBC drivers, ... (Pascal Aubry).
- Pages have been added to the documentation:
debugging, writing a new handler and some explanations on the Logout.java
patch (Pascal Aubry).
- Login pages have been improved with some _javascript_
to set focus onto the username text input and to avoid browser autocompletion
of the username and password inputs (Julien Marchal, requested by Raymond Bourges).
PA
--
http://perso.univ-rennes1.fr/pascal.aubry