CAS单点登陆Word文档格式.docx

1、 p: p: /代理端与被代理端都要进行配置（配置较长，不一一介绍）有需要留下联系地址，我发过去,代理性能问题解决：如以上问题所述,系统2变成了被代理的系统,代理系统1每次要到被代理服务器去取一次票据之后,传到系统2去,这时系统2也要到服务器去取下验证的代理票据,进行比对,这样一来,每次都要与服务器通信两次,性能耗费很大,在不考虑安全性的前提下,可以对双方进行保存一个票据,这样一来,不管访问多少次,只在服务器通信了两次.我对以上的代理与被代理系统进行了扩展，一样）有需要留下联系地址，我发过去8，客户端可以返回更多的用户数据,这个有两处要进行配置以下提供一个较完整的deployerConfigC

2、ontext.xml的配置，一般有用到都在这里面1. !- |deployerConfigContext.xmlcentralizesintoonefilesomeofthe 3. declarativeconfigurationthatallCASdeployerswillneedto modify.ThisdeclarestheSpring-managedJavaBeans makeupadeployment.Thebeansdeclaredinthisare 6. instantiatedatcontextinitializationtimebySpring| 7. ContextLoa

3、derListenerweb.xml.Itfindsbecause 8. isamongthoseparameter 9. contextConfigLocation.Byfarmostcommonchangeyouwill 10. tolastbeandeclaration11. replacedefaultSimpleTestUsernamePasswordAuthenticationHandler 12. withimplementingyourapproachforauthenticatingusernamesand 13. passwords.+ 14. -15. 16. net.s

4、ourceforge.jtds.jdbc.Driver25. /property26. url27. jdbc:jtds:sqlserver:/192.168.4.22:3433/db28. 29. username30. *36. 37. 38. passwordEncoder39. org.jasig.cas.authentication.handler.DefaultPasswordEncoder40. autowire=byName41. constructor-argvalue=MD542. 43. 44. passwordEncoder245. org.jasig.cas.auth

5、entication.handler.PlainTextPasswordEncoder46. 47. 48. 49. ourAuthenticationManager.The 50. CentralAuthenticationServiceservicein 51. applicationContext.xmlpicksAuthenticationManagerby 52. referenceitsid,authenticationManagerMostbe 53. ableuseimplementationandso 54. donotclassbean.Weincludewhole55.

6、hereuserConfigContext.xmlsoyou 56. canseethingscontext.57. 58. org.jasig.cas.authentication.AuthenticationManagerImpl59. 60. ListCredentialToPrincipalResolversidentify 61. whatPrincipaltryingauthenticate.62. AuthenticationManagerImplconsidersthemorder,findinga 63. CredentialToPrincipalResolverwhichs

7、upportspresented 64. credentials.usestheseresolvers65. twopurposes.First,itidentify66. attemptingauthenticate/loginIn67. configuration,DefaultCredentialsToPrincipalResolverthat 68. fillsrole.Ifareusingotherkindcredentialsthan 69. UsernamePasswordCredentials,70. 71. CredentialsToPrincipalResolver72.

8、using.Second,resolvers 73. requestingproxygrantingticket.74. 75. HttpBasedServiceCredentialsToPrincipalResolverserves76. purpose.Youlistifidentifying 77. servicessomethingmoreorthantheircallbackURL.78. 79. credentialsToPrincipalResolvers80. list81. 82. 83. UsernamePasswordCredentialsToPrincipalResol

9、ver84. UsernamePasswordCredentialswe85. producesSimplePrincipalinstancesconveyingusernamefrom86. youvechangedLoginFormActionuse 87. then88. also（oraddadditional 89. declarations）declare90. Credentials91. 92. 93. org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver94.

10、 attributeRepository95. reflocal=96. 97. 98. 99. supports 100. HttpBasedCredentials.2.0101. SSLcallback,extractingcallback 102. URLrepresentingasSimpleService 103. identifiedrepresenting 104. anHTTPSwhereatthey 105. receivechange 106. additionaldeclarations）.107. 108. 109. org.jasig.cas.authenticati

11、on.principal.HttpBasedServiceCredentialsToPrincipalResolver110. /list111. 112. 113. 114. WhereasCredentialsToPrincipalResolverswhosome 115. mightauthenticate,AuthenticationHandlersactually 116. HereAuthenticationHandlers 117. Principals118. identified.trythese 119. handlersturnuntilboth120. presentedsucceedsauthenticating.121. 122. authenticationHandlers123. 124. -这里面的用户表验证，可以配置多个，由上向下的表验证，只要有一个成功就退出-125. -supportEAPdatabase126. 127. org.jasig.cas.adaptors.jdbc.QueryDatabaseAuthenticationHandler128. dataSourceref=129. sql130. va