CAS 5.3服务器搭建

灰太狼 2022-09-17 04:18 223阅读 0赞

# CAS5.3 下载 #

**下载地址**

GitHub下载地址：[https://github.com/apereo/cas-overlay-template][https_github.com_apereo_cas-overlay-template]

**版本选择**

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16][]

**点击下载**

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 1][]

**下载完成后解压ZIP文件，文件内容如下：**

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 2][]

# CAS5.3 编译 #

**运行构建脚本**

切换至cas5.3 源码地址(D:\\cas\\cas-overlay-template-5.3)，执行如下指令：.\\build.cmd run

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 3][]

**备注说明:**Windows环境运行build.cmd，Linux环境运行build.sh

**运行构建提示错误信息：**Caused by: java.io.FileNotFoundException:\\etc\\cas\\thekeystore (系统找不到指定的文件)

错误信息:

Caused by: java.io.FileNotFoundException: \etc\cas\thekeystore (系统找不到指定的文件。)
            at java.io.FileInputStream.open0(Native Method) ~[?:1.8.0_211]
            at java.io.FileInputStream.open(Unknown Source) ~[?:1.8.0_211]
            at java.io.FileInputStream.<init>(Unknown Source) ~[?:1.8.0_211]
            at java.io.FileInputStream.<init>(Unknown Source) ~[?:1.8.0_211]
            at sun.net.www.protocol.file.FileURLConnection.connect(Unknown Source) ~[?:1.8.0_211]
            at sun.net.www.protocol.file.FileURLConnection.getInputStream(Unknown Source) ~[?:1.8.0_211]
            at org.apache.tomcat.util.file.ConfigFileLoader.getInputStream(ConfigFileLoader.java:89) ~[tomcat-embed-core-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.SSLUtilBase.getStore(SSLUtilBase.java:197) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.SSLHostConfigCertificate.getCertificateKeystore(SSLHostConfigCertificate.java:206) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.SSLUtilBase.getKeyManagers(SSLUtilBase.java:282) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.SSLUtilBase.createSSLContext(SSLUtilBase.java:246) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:98) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:72) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:244) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.tomcat.util.net.AbstractEndpoint.start(AbstractEndpoint.java:1191) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.coyote.AbstractProtocol.start(AbstractProtocol.java:591) ~[tomcat-coyote-8.5.47.jar!/:8.5.47]
            at org.apache.catalina.connector.Connector.startInternal(Connector.java:1018) ~[tomcat-catalina-8.5.47.jar!/:8.5.47]
            ... 21 more

> 错误产生原因：\\etc\\cas\\thekeystore是生成的密钥文件的，因为这里不使用加密，所以需要将cas的https协议忽略并将http协议设置为允许

**解决办法：支持http协议配置**

1）在cas-overlay-template-5.3目录下创建src文件夹

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 4][]

2）在src文件夹中，依次创建main\\resources目录，最终结果如下

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 5][]

3）拷贝所需文件

进入cas-overlay-template-5.3\\target\\cas\\WEB-INF\\classes目录将services文件夹与application.properties文件复制到上一步的cas-overlay-template-5.3\\src\\main\\resources文件中，如下截图:

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 6][]

4）修改复制后的application.properties文件

注释ssl 协议相关配置：

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_13_color_FFFFFF_t_70_g_se_x_16][]

文件最末尾加入以下2个配置项，如下图

cas.tgc.secure=false
    cas.serviceRegistry.initFromJson=true

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_15_color_FFFFFF_t_70_g_se_x_16][]

修改services\\HTTPSandIMAPS-10000001.json

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 7][]

增加http协议配置

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 8][]

**再次执行构建脚本**

.\\build.cmd run

# CAS验证 #

## 浏览器访问CAS ##

打开[http://localhost:8443/cas][http_localhost_8443_cas]

> 右边的两个提示框，黄色代表cas server没有使用密钥加密，蓝色提示当前登录账户是静态验证，不影响测试

## ![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 9][] ##

## 测试使用默认用户名密码进行登录验证 ##

输入默认用户名casuser与密码Mellon，点击登录按钮

>  备注说明:默认用户名与密码存储在cas-overlay-template-5.3\\src\\main\\resources\\application.properties文件，cas.authn.accept.users=casuser::Mellon

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 10][]![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 11][]

至此，cas 5.3 服务端搭建成功

[https_github.com_apereo_cas-overlay-template]: https://github.com/apereo/cas-overlay-template
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16]: /images/20220828/eed220b9706c4331940c35dfd606453c.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 1]: /images/20220828/d304836432c14b75bbaabd22f70c7ac3.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 2]: /images/20220828/02feb7f464e34eef9bf373e1247b06dd.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 3]: /images/20220828/3df2071c71144527be4a5246938b46cd.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 4]: /images/20220828/ce93ed937bf44d16b910c2d883021beb.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 5]: /images/20220828/badec3bef0b74e97824dce7e79092d33.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 6]: /images/20220828/7c442b40ca864825b6e13871aa345ca9.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_13_color_FFFFFF_t_70_g_se_x_16]: /images/20220828/fa3bfe5846174ba4afc224ecf58d4629.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_15_color_FFFFFF_t_70_g_se_x_16]: /images/20220828/10615009e78d49d6b511c46685fad331.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 7]: /images/20220828/c051bcb964d046dcbda1b2733dcf6770.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 8]: /images/20220828/958703b9847d4769af86e6949af877ba.png
[http_localhost_8443_cas]: http://localhost:8443/cas
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 9]: /images/20220828/c8c96db147464e4a8ea784e4a672b391.png
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 10]: https://img-blog.csdnimg.cn/5855939a1d8e404dbf126f84208ae86e.png?x-oss-process=image/watermark,type_ZHJvaWRzYW5zZmFsbGJhY2s,shadow_50,text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT,size_20,color_FFFFFF,t_70,g_se,x_16
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA5Zyo5aWL5paX55qE5aSn6YGT_size_20_color_FFFFFF_t_70_g_se_x_16 11]: /images/20220828/0475dc51c8b34d1ba5866d39de57dda9.png