CAS 服务端3.5.2与客户端3.2.1配置

CAS服务端3.5.2 HTTP SSO 配置四、数据库验证配置在deployerConfigContext.xml中添加配置数据源：<bean id="casDataSource" class="mons.dbcp.BasicDataSource"> <property name="driverClassName" value="com.mysql.jdbc.Driver"></property><property name="url" value="jdbc:mysql://192.168.1.194:3306/authority"></property> <property name="username" value="root"></property><property name="password" value="123456"></property><property name="maxActive" value="50"></property><property name="maxIdle" value="30"></property><property name="maxWait" value="500"></property><property name="defaultAutoCommit" value="true"></property></bean>authenticationHandlers里添加<bean class="org.jasig.cas.adaptors.jdbc.SearchModeSearchDatabaseAuthenticationHandler"><property name="dataSource" ref="casDataSource" /> 数据源<property name="tableUsers" value="user" /> 表名<property name="fieldUser" value="user_name"/> 用户名字段<property name="fieldPassword" value="psw"/>密码字段<property name="passwordEncoder" ref="passwordEncoder"/> 密码加密</bean><bean id="passwordEncoder"class="org.jasig.cas.authentication.handler.DefaultPasswordEncoder" autowire="byName"><constructor-arg value="MD5"/></bean>五，返回用户多个信息<bean id="attributeRepository"class="org.jasig.services.persondir.support.jdbc.SingleRowJdbcPersonAttributeDao"><constructor-arg index="0" ref="casDataSource"/><constructor-arg index="1" value="select user_code,user_name,name real_name,unit_code from user where user_name=?"/><property name="queryAttributeMapping"><map><entry key="username" value="user_name" /> 前面的key一定要是username,后面的user_name就是where后面的</map></property><property name="resultAttributeMapping"><map><!--key为对应的数据库字段名称，value为提供给客户端获取的属性名字，系统会自动填充值--><entry key="user_code" value="user_code"/> 前面是返回的，后面对应的字段名<entry key="user_name" value="user_name"/><entry key="real_name" value="real_name"/><entry key="unit_code" value="unit_code"/></map></property></bean>修改<bean class="org.jasig.cas.services.RegexRegisteredService"><property name="id" value="0" /><property name="name" value="HTTP and IMAP" /><property name="description" value="Allows HTTP(S) and IMAP(S) protocols" /><property name="serviceId" value="^(https?|imaps?)://.*" /><property name="evaluationOrder" value="10000001" /><property name="allowedAttributes"><list><value>user_code</value><value>real_name</value><value>unit_code</value></list></property></bean>六．修改JSP文件增加<c:iftest="${fn:length(assertion.chainedAuthentications[fn:length(assertion.chainedAuthentications)-1].principal.attri butes) > 0}"><cas:attributes><c:forEach var="attr"items="${assertion.chainedAuthentications[fn:length(assertion.chainedAuthentications)-1].principal.attributes}"><cas:${fn:escapeXml(attr.key)}>${fn:escapeXml(attr.value)}</cas:${fn:escapeXml(attr.key)}></c:forEach></cas:attributes></c:if>客户端配置：客户端WEB.XML配置<!-- cas client configure start --><filter><filter-name>CAS Authentication Filter</filter-name><filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</f ilter-class><init-param><param-name>casServerLoginUrl</param-name><param-value>http://192.168.1.144:8000/cas</param-value> </init-param><init-param><param-name>serverName</param-name><param-value>http://192.168.1.111:8080</param-value></init-param><init-param><param-name>renew</param-name><param-value>false</param-value></init-param><init-param><param-name>gateway</param-name><param-value>false</param-value></init-param></filter><filter><filter-name>CAS Validation Filter</filter-name><filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketVa lidationFilter</filter-class><init-param><param-name>casServerUrlPrefix</param-name><param-value>http://192.168.1.144:8000/cas/</param-value> </init-param><init-param><param-name>serverName</param-name><param-value>http://192.168.1.111:8080</param-value></init-param><init-param><param-name>encoding</param-name><param-value>UTF-8</param-value></init-param></filter><filter><filter-name>CAS HttpServletRequest Wrapper Filter</filter-name><filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</ filter-class></filter><filter><filter-name>CAS Assertion Thread Local Filter</filter-name><filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter</filte r-class></filter><filter-mapping><filter-name>CAS Authentication Filter</filter-name><url-pattern>/*</url-pattern></filter-mapping><filter-mapping><filter-name>CAS Validation Filter</filter-name><url-pattern>/*</url-pattern></filter-mapping><filter-mapping><filter-name>CAS HttpServletRequest Wrapper Filter</filter-name><url-pattern>/*</url-pattern></filter-mapping><filter-mapping><filter-name>CAS Assertion Thread Local Filter</filter-name><url-pattern>/*</url-pattern></filter-mapping><!-- cas client configure end -->页面获取用户相关信息<%Assertionassertion=(Assertion)session.getAttribute(AbstractCasFilter.CONST_CAS_ASSERT ION);AttributePrincipal principal=assertion.getPrincipal();String name=principal.getName();Map<String,Object> attributes=principal.getAttributes();Object real_name=attributes.get("real_name");%>。