CAS FrontEnd

All Plugins / Authfront / Cas

Identity Card

StatusCore
Plugin LabelCAS FrontEnd
Short DescriptionAuthentication by CAS
Plugin Identifierauthfront.cas
AuthorCharles du Jeu
Urldocs/references/plugins/authfront/cas
Dependencies

Documentation

Authenticate user using CAS.

Authfront.cas is based on phpCAS library of JASIG that turns Pydio to be able be integrated into a SSO system. It can do the authentication on a remote server CAS by using two mode: client and proxy * In mode client, authfront.cas runs as a cas client to authenticate given user's credential to remote server CAS. * In mode proxy, it can provide additionally authentication service to another service such as smb/cifs or imap ... Note: The connection between pydio and cas normally is an ssl connection. Administrator must take attention on configuration of certificate and trusted relationship of two direction between Pydio server and CAS.

Plugin parameters

LabelDescriptionTypeDefault
Order *
ORDER
Order this plugin with other auth frontendsInteger11
Create User
CREATE_USER
Automatically create user if it does not already existsBooleantrue

casmode
Hiddenclient

casmode
Hiddenproxy
Proxied Service
PROXIED_SERVICE_SMB
Proxied service who uses Proxy Ticket provided by this CAS Proxy.Ex smb://pydio.comString
Set Fixed Callback Url
FIXED_CALLBACK_URL
CAS will call this url to pass pgtID and pgtIOU. It's very useful when you deploy Pydio in several nodesString
PTG store mode
PTG_STORE_MODE
Config for Proxy Granting Ticket Storage. If is file option, location for storate is session_save_path()Select (file, db)file
MySQL Tables
INSTALL_SQL
Install SQL Table (support only mysql)Button
General
Protocol Type *
PROTOCOL_TYPE
Enable/disable automatically based on the protocol usedSelect (session_only)session_only
CAS Server *
CAS_SERVER
CAS server addressString
CAS Port
CAS_PORT
Port where CAS server is running on. Default: 443Integer
CAS URI
CAS_URI
URI for CAS service (without / at the end). Default: /String
Logout URL
LOGOUT_URL
Redirect to the given URL on loggin outString
Modify login page
MODIFY_LOGIN_SCREEN
Login page will be modified to give user a link to authenticate via CAS manually. Otherwise Pydio will redirect automatically to CAS login page.Booleantrue
String for CAS auth
AUTH_CAS_MESS_STRING
This message will be appeared in login page. Ex: Use CAS credentialStringUse CAS credential
String for Pydio auth
AUTH_PYD_MESS_STRING
This message will be appeared in login page. Ex: Use Pydio credentialStringUse Pydio credential
String for button click here
AUTH_CLICK_MESS_STRING
StringClick Here
Additional roles for user logged in by CAS
ADDITIONAL_ROLE
Additional roles for user logged in by CASString
Certificate path
CERTIFICATE_PATH
Path to the ca chain that issued the cas server certificateString
Debug mode
DEBUG_MODE
Set phpCAS in debug modeBooleanfalse
Debug file
DEBUG_FILE
Log to file. If null, use yyyy-mm-dd.txtString
phpCAS mode
phpCAS mode *
PHPCAS_MODE
In mode proxy, phpCAS works as a CAS Proxy who provides Proxy ticket for others services such as SMB, IMAPGroup_switch:casmodeclient