Version 2.0.0 has been written to ease the integration of new handlers, without any modification of the existing code.

 

No DTD is used any more for the XML configuration. Authentication is configured by a list of handlers, specified by a class and a specific handler configuration. For instance, people relying on LDAP authentication may now use something like:

 

<authentication>

  <handler>

    <classname>
      org.esupportail.cas.server.handlers.ldap.FastBindLdapHandler
    </classname>

    <config>

      <filter>uid=%u,ou=people,dc=esup-portail,dc=org</filter>

      <server>

        <url>ldap://ldap.esup-portail.org</url>

      </server>

      <server>

        <url>ldap://replica.esup-portail.org</url>

      </server>

    </config>

  </handler>

</authentication>

 

This stands for people using low-level configuration; people using high-level configuration won't see any change.

 

It is highly recommended that users of 1.0.x LDAP handlers upgrade to 2.0.0 because of a bug fix. Version 2.0.0 also brings many enhancements and new features.

 

For more information, please refer to http://esup-casgeneric.sourceforge.net.

 

Changes in version 2.0.0

Bug fix

• LDAP connections were not closed (Pascal Aubry, pointed out by Vincent Mathieu).

New features

• Any handler can be added without modifying the code (Pascal Aubry, requested by Vincent Mathieu, Julien Marchal and Todd Runstein). As a consequence, no DTD is used anymore.
• Several-in-one LDAP URLs can be used with the LDAP handlers (Pascal Aubry).
• The QueryDatabaseHandler allows complex queries to extract users' passwords from databases (Arunas Stockus).
• Added new authentication templates: ldap-search, ldap-search-rep, file, database-bind, database-search and database-query (Pascal Aubry, requested by Vincent Mathieu).

Enhancements

• Now includes jakarta-tomcat 5.0.25 (Pascal Aubry).
• Added few controls on externals classes, such as NIS JNDI provider, JDBC drivers, ... (Pascal Aubry).
• Pages have been added to the documentation: debugging, writing a new handler and some explanations on the Logout.java patch (Pascal Aubry).
• Login pages have been improved with some _javascript_ to set focus onto the username text input and to avoid browser autocompletion of the username and password inputs (Julien Marchal, requested by Raymond Bourges).

 

 

PA

--

http://perso.univ-rennes1.fr/pascal.aubry