鑰屽湪oracle涓嬪簲璇ヤ負
select password from user_login where username=? and enabled=1
涓昏鐢變簬oralce鍜宮ysql瀵筨oolean瀛楁鐨勫鐞嗕笉涓鑷村鑷寸殑銆?br />
]]>
棣栧厛錛屾垜鍦ㄨ繖閲岀畝鍗曡В閲婁竴涓嬶細
絎?縐嶄笉鑳絣ogout鐨勬儏鍐碉細
1錛夌櫥褰曚簡WebApp1錛宺edirect鍒癱aserver
casserver璁よ瘉鍚庯紝鍐峳edirect鍒皐ebapp1錛宱k錛?br /> 2錛塰ttp鏂瑰紡 lougout casserver1錛屽嵆http://yale_casserver:8080/cas/lougout
鏄劇ずlogout鎴愬姛
3錛夎闂畐ebapp2錛岃繕鑳借闂紒
榪欐槸闈炲父姝ｅ父鐨勪竴縐嶆儏鍐碉紝鍥犱負浣犱笉閫氳繃https鏉ユ敞閿錛宑asserver鎬庝箞"鏉"鎺?br /> 瀹冮氳繃https鍙戠粰浣犵殑TGC Cookie?
絎?縐嶄笉鑳絣ogout鐨勬儏鍐碉細
1錛夌櫥褰曚簡WebApp1錛宺edirect鍒癱aserver
casserver璁よ瘉鍚庯紝鍐峳edirect鍒皐ebapp1錛宱k錛?br /> 2錛塰ttps鏂瑰紡 lougout casserver1錛屽嵆https://yale_casserver:8443/cas/lougout
鏄劇ずlogout鎴愬姛
3錛夎闂畐ebapp1錛岃繕鑳借闂紒璁塊棶webapp2錛屼笉鑳借闂紝閲嶅畾鍚戝埌casserver瑕佹眰鐧誨綍錛?br /> 榪欎篃鏄潪甯告甯哥殑涓縐嶆儏鍐碉紝鍥犱負浣犲凡緇忚兘澶熻闂紝浣犵戶緇彲浠ョ戶緇闂紝
CASLogout涓嶈兘闃繪浣犺闂畐ebapp1錛屽畠鍙兘闃繪浣犺闂畐ebapp2錛屽洜涓轟綘宸茬粡
琚厑璁歌闂畐ebapp1錛岃寃ebapp2鍒欒繕娌℃湁錛屽鏋滀綘鍦?1)鐨勬椂鍊欙紝欏哄甫涔熻闂?br /> webapp2錛岄偅涔堜綘鐨勬敞閿灝嗘鏃犱綔鐢ㄤ簡錛孋AS鏃犳硶闃繪浣犺闂繖涓や釜webapp錛?br /> 鍥犱負浣犳湁Service Ticket銆?br />
濡傛灉浣犲姝よ垂瑙ｏ紝閭ｆ椂鍥犱負浣犲凡涓篖ogout灝辨槸閫鍑虹郴緇燂紝閭ｆ垜鍙兘琛ㄧず閬楁喚錛?br /> 鍥犱負CAS Logout鐨勪綔鐢ㄤ笉鏄繖鏍鳳紝瀹冪殑浣滅敤鏄樆姝綘緇х畫閫氳繃TGC錛堝畠綆鍗曞湴
娓呮浜咺E鐨凾GC Cookie錛夋潵鑾峰彇ST錛岄樆姝綘鑾峰彇閫氬悜鍏朵粬web搴旂敤鐨凾icket銆?br />
鎵浠ワ紝鐢ㄥ畬webapp1鐨勬椂鍊欙紝娉ㄩ攢錛岀劧鍚庡啀鍏抽棴鎺塈E灝卞交搴昄ogout浜嗐?br />
Trackback: http://tb.blog.csdn.net/TrackBack.aspx?PostId=1503551
]]>
cas server 鍦ㄤ竴鍙癓inux鏈嶅姟鍣紝cas client鍦ㄥ彟澶栦竴鍙發inux鏈嶅姟鍣?br /> 搴旂敤鏈嶅姟鍣ㄤ負tomcat5.5.26
鍒濇鐨勯厤緗疄鐢ㄨ繃紼嬪弬鑰冧簡http://www.tkk7.com/yida/archive/2007/04/03/55466.html鐨勬弿榪幫紝鍚勪綅浜﹀彲浠ヨ闂樋鏈ㄧ殑blog銆傛暣鐞嗗涓嬶細
1.璇蜂笅杞藉埌cas鐨勫畼鏂圭綉绔欎笅杞絚as-server錛堟垜鐢ㄧ殑鏄?.2錛夊拰cas-client錛?.0.11錛夛紝tomcat5.5.26
cas鐨勫畼鏂圭綉绔欙細http://www.ja-sig.org/products/cas/
2.瀹夎cas-server錛屾垜浠亣瀹氬畨瑁卌as-server鐨勬湇鍔″櫒涓簊erver1
(1)璇峰湪server1鏈嶅姟鍣ㄤ笂瀹夎濂絡dk1.5鎴栦互涓婄増鏈殑jdk錛宼omcat5.5.26錛屽茍閰嶇疆鐜鍙橀噺JAVA_HOME
(2)灝哻as-server-3.2-release.zip瑙ｅ帇錛屽皢moudels鐩綍涓媍as-server-webapp-3.2.war鎷瘋礉鍒皌omcat鐨剋ebapps鐩綍涓嬶紝淇?nbsp; 鏀瑰悕縐頒負cas.war.
(3)鐢熸垚server1鐨勫畨鍏ㄨ瘉涔︼細
keytool -genkey -alias my-alias-name -keyalg RSA -keystore keystore-file
(4)鍦╯erver1閰嶇疆https
鍦?/span>$CATALINA_HOME/conf/server.xml閲屼慨鏀逛負涓涓嬮厤緗?br /> <Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="/path/keystore-file" keystorePass="your-password"
/>
(5)瀵煎嚭server1鐨勮瘉涔︼紝鐢ㄦ潵緇欐墍鏈夐渶瑕佺敤鍒扮殑瀹㈡埛绔鍏?br /> keytool -export -file myserver.cert -alias my-alias-name -keystore keystore-file
(6)灝嗗鍑虹殑璇佷功涓婁紶鐨刢lient1鏈嶅姟鍣ㄤ笂銆?br /> (7)鍚姩server1涓婄殑tomcat錛屾楠宑as閰嶇疆鏄惁鎴愬姛錛岃闂甴ttp://ip:8443/cas/login,濡傛灉鑳界湅鍒癱as鐨勭櫥褰曢〉闈㈠垯琛ㄧず閰?nbsp; 緗垚鍔熴?br /> 3.閰嶇疆 cas-client錛屾垜浠互tomcat涓嬭嚜甯︾殑servlet-example涓轟緥瀛愯繘琛岃鏄?
(1)璇峰湪client1鏈嶅姟鍣ㄤ笂瀹夎濂絡dk1.5鎴栦互涓婄増鏈殑jdk錛宼omcat5.5.26錛屽茍閰嶇疆鐜鍙橀噺JAVA_HOME
(2)灝哻as-client-2.0.11.zip瑙ｅ帇錛屾妸java/lib/casclient.jar鎷瘋礉鍒癱lient1鏈嶅姟鍣ㄤ笂鐨?br /> webapps/servlets-examples/WEB-INF/lib鐩綍涓嬶紙濡傛灉娌℃湁灝卞緩涓涓級
(3)鍦ㄨ浣跨敤CAS鐨勫鎴風client1閲岃緗紙浠ervlets-examples榪欎釜APP涓轟緥錛夛紝鎴戜滑浣跨敤ServletFilter(CAS client閲屾彁渚?nbsp; 鐨?鏉ュ疄鐜癝SO鐨勬鏌ワ紝淇敼servlets-examples/WEB-INF/web.xml錛屾坊鍔犱互涓嬪唴瀹癸細
<filter>
<filter-name>CASFilter</filter-name>
<filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
<param-value>https://your.cas.server.name(eg:server1):port/cas/login</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
<param-value>https://your.cas.server.name(eg:server1):port/cas/proxyValidate</param-value>
</init-param>
<init-param>
<param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
<param-value>your.client.server.name(eg:client1):port</param-value>
</init-param>
</filter>
<filter-mapping>
<filter-name>CASFilter</filter-name>
<url-pattern>/servlet/*</url-pattern>
</filter-mapping>
(4)鍦ㄥ鎴風鐨凧VM閲屽鍏ヤ俊浠葷殑SERVER鐨勮瘉涔?鏍規嵁鎯呭喌鏈夊彲鑳介渶瑕佺鐞嗗憳鏉冮檺)
keytool -import -keystore $JAVA_HOME/jre/lib/security/cacerts -file myserver.cert -alias my-alias-name
姝ゆ椂闇瑕佽緭鍏ュ瘑鐮侊紝榛樿瀵嗙爜涓篶hangeit
閫氳繃浠ヤ笂閰嶇疆錛屽熀鏈畬鎴恈as-server鍜宑as-client鐨勯厤緗紝浣嗘槸榪樻湁浠ヤ笅闂闇瑕佹敞鎰忓拰瑙ｅ喅
鐢變簬cas鐨勮瘉涔﹂渶瑕佸煙鍚嶆墠鑳芥紜殑榪涜璁よ瘉淇℃伅鐨勪氦浜掞紝涓嶆敮鎸乮p錛屽鏋渟erver鍜宑lient鍦ㄥ悓涓鍙版満鍣ㄤ笂錛屽彲浠ヤ嬌鐢╨ocalhost錛屽鏋滃儚鎴戜滑涓婇潰鎻忚堪鐨勪笁鍙版湇鍔″櫒榪欐牱鐨勭幆澧冿紝浣跨敤localhost鎴栬卛p鏄笉鑳芥甯歌繍琛岀殑銆傚鏋滀嬌鐢╥p錛岃繍琛屾椂浼氭姏鍑?/span> HTTPS hostname wrong 鐨勯敊璇紝瑙ｅ喅鐨勬柟娉曞涓嬶細
鍋囪server1鐨刬p涓猴細192.168.10.1錛宑lient1鐨刬p涓?92.168.10.2錛屽紑鍙戞満鍣?xp)鐨刬p涓猴細192.168.10.3
鍦╯erver1鍜宑lient1涓婅緗湰鏈虹殑鍩熷悕鏄犲皠錛?br /> vi /etc/hosts 娣誨姞浠ヤ笅琛?br /> 192.168.10.1 cas.server
鍦ㄥ紑鍙戞満鍣?xp)涓嬶紝鍦–:\WINDOWS\system32\drivers\etc鐩綍涓嬶紝緙栬緫hosts鏂囦歡錛屾坊鍔犱互涓嬭
192.168.10.1 cas.server
閲嶆柊鐢熸垚cas-sever鐨勬湇鍔″櫒绔殑璇佷功錛屽湪寮濮嬮棶“浣犵殑鍚嶅瓧”鎴?#8220;DName”鐨勬椂鍊欙紝蹇呴』濉啓浣犳湇鍔″櫒鎵鍦ㄥ煙鍚嶏紙cas.server錛?br /> 鐒跺悗閲嶆柊鍒板鏈嶅姟鍣ㄥ櫒绔殑璇佷功錛屽茍灝嗗叾瀵煎叆鍒癱lient1鏈嶅姟鍣ㄧ殑jvm
鏈鍚庝慨鏀?/span>淇敼servlets-examples/WEB-INF/web.xml涓叧浜巆as榪囨護鍣ㄧ殑閰嶇疆錛氳灝唝our.cas.server.name(eg:server1)淇敼涓篶as.server鍗沖彲銆傞噸鏂板惎鍔╯erver1鍜宑lient1鐨勬湇鍔″櫒涓婄殑tomcat灝卞彲姝ｅ父榪愯銆?br />
ttp://client1:8080/servlets-examples/servlet/HelloWorldExample
緋葷粺浼氳嚜鍔ㄨ煩杞埌涓涓獙璇侀〉闈紝闅忎究杈撳叆涓涓浉鍚岀殑璐﹀彿,瀵嗙爜錛屼弗姝ｉ氳繃涔嬪悗灝變細璁塊棶
鍒扮湡姝ｇ殑HelloWorldExample榪欎釜servlet浜?/span>
]]>