# \[ANN\] CAS Authentication filter **URL:** \ **Category:** Rails\ **Created:** [July 14, 2006, 11:28am UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393 "2006-07-14T11:28:02Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 14, 2006, 11:28am UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/1 "2006-07-14T11:28:02Z")
Hi CAS is a centralized authentication service, and the cas\_auth filter can be installed to automatically make your web application authenticate against a CAS server. The SVN path to the plugin is [http://svn.ki.se/rails/plugins/cas\_auth](http://svn.ki.se/rails/plugins/cas_auth) and a homepage with some information can be found at [http://opensource.ki.se/casauth.html](http://opensource.ki.se/casauth.html) For use, just install the plugin in your application and set these attributes in your environment.rb CAS::Filter.login\_url CAS::Filter.validate\_url CAS::Filter.server\_name – Ola B. ([http://ola-bini.blogspot.com](http://ola-bini.blogspot.com)) JvYAML, RbYAML, JRuby and Jatha contributor System Developer, Karolinska Institutet ([http://www.ki.se](http://www.ki.se)) OLogix Consulting ([http://www.ologix.com](http://www.ologix.com)) “Yields falsehood when quined” yields falsehood when quined. ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 14, 2006, 2:38pm UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/2 "2006-07-14T14:38:58Z")
Ola: This is very nice. We’ve been using our own drop-in controller for this but I like what you’ve done. We’ll try your plugin on a couple of our systems and report back to you if there are errors. ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 14, 2006, 7:07pm UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/3 "2006-07-14T19:07:08Z")
To use this plugin, would I need to setup a CAS server for my company? -Larry ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 14, 2006, 7:58pm UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/4 "2006-07-14T19:58:03Z")
Larry K. wrote: > To use this plugin, would I need to setup a CAS server for my company? > -Larry Yes, this is only the client part of such a system. There are many available implementations, though. (But I’m sorry to say that most are in Java, so you’ll have to have at least one Java server in your enterprise. But OTOH, are there any enterprises without Java at this stage?) – Ola B. ([http://ola-bini.blogspot.com](http://ola-bini.blogspot.com)) JvYAML, RbYAML, JRuby and Jatha contributor System Developer, Karolinska Institutet ([http://www.ki.se](http://www.ki.se)) OLogix Consulting ([http://www.ologix.com](http://www.ologix.com)) “Yields falsehood when quined” yields falsehood when quined. ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 14, 2006, 8:14pm UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/5 "2006-07-14T20:14:50Z")
snacktime wrote: > > stage?) > > If you just implement CAS 1.0 it’s pretty straight forward. We did > our own implementation in mod perl in a couple of days. > > * * * > > Rails mailing list > removed\_email\_address@domain.invalid > [http://lists.rubyonrails.org/mailman/listinfo/rails](http://lists.rubyonrails.org/mailman/listinfo/rails) Hi! Yes, it’s only CAS 1.0, the most rudimentary parts needed to actually get the authentication bits working correctly. And as you say, I know it’s very simple and could probably be done in a Good ™ language in one or two days. But it’s still a question of time as DM so succinctly sang 20 years ago. – Ola B. ([http://ola-bini.blogspot.com](http://ola-bini.blogspot.com)) JvYAML, RbYAML, JRuby and Jatha contributor System Developer, Karolinska Institutet ([http://www.ki.se](http://www.ki.se)) OLogix Consulting ([http://www.ologix.com](http://www.ologix.com)) “Yields falsehood when quined” yields falsehood when quined. ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 14, 2006, 8:07pm UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/6 "2006-07-14T20:07:59Z")
On 7/14/06, Ola B. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote: > Larry K. wrote: > > > To use this plugin, would I need to setup a CAS server for my company? > > -Larry > > Yes, this is only the client part of such a system. There are many > available implementations, though. (But I’m sorry to say that most are > in Java, so you’ll have to have at least one Java server in your > enterprise. But OTOH, are there any enterprises without Java at this stage?) If you just implement CAS 1.0 it’s pretty straight forward. We did our own implementation in mod perl in a couple of days. ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 15, 2006, 5:31am UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/7 "2006-07-15T05:31:37Z")
You rock. Now I can replace my own half-ass hack of the code from case-western. FYI if you are looking for good stuff on CAS integration of open source stuff do a search on google for " site:case.edu CAS " ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 15, 2006, 2:39pm UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/8 "2006-07-15T14:39:55Z")
Does the CAS filter work with any of the RBAC plugins/engines? I whipped up my own additions to ActiveRBAC to have CAS (1.0) work with it. Jason E. ---
**Author:** ![Ola\_B](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/o/858c86/32.png) [@Ola\_B](https://www.ruby-forum.com/u/Ola_B)\ **Post date:** [July 15, 2006, 2:47pm UTC](https://www.ruby-forum.com/t/ann-cas-authentication-filter/98393/9 "2006-07-15T14:47:15Z")
Jason E. wrote: > Does the CAS filter work with any of the RBAC plugins/engines? > > I whipped up my own additions to ActiveRBAC to have CAS (1.0) work with it. > > Jason E. No, not as of now. I would really like to decouple authentication and authorization as completely as possible. I’m going around planning for an authorization plugin that will work with SpocP, though. (SpocP is a centralized generic authorization server, where you can specify rules in almost any way you want to. Somewhat like XACML actually. [http://www.spocp.org](http://www.spocp.org) for more info) – Ola B. ([http://ola-bini.blogspot.com](http://ola-bini.blogspot.com)) JvYAML, RbYAML, JRuby and Jatha contributor System Developer, Karolinska Institutet ([http://www.ki.se](http://www.ki.se)) OLogix Consulting ([http://www.ologix.com](http://www.ologix.com)) “Yields falsehood when quined” yields falsehood when quined.