Hello, I'm trying to to use multiple jaas realms, one for my development 
environment and one for my production environment. If my first jaas realm 
fails to authenticate (cas.authn.jaas[0]) I want it to try my other realm 
(cas.authn.jaas[1]).  However when testing, my second realm is never 
evaluated.  Is it possible to fallback to cas.authn.jaas[1] if 
cas.authn.jaas[0] fails to authenticate?

Thanks in advance!


cas.properties:
#JAAS DEV
cas.authn.jaas[0].realm=DevLogin
cas.authn.jaas[0].login-config-type=JavaLoginConfig
cas.authn.jaas[0].login-configuration-file=/opt/apache-tomcat-9.0.60/conf/jaas.conf
cas.authn.jaas[0].password-encoder.encoding-algorithm=MD5
cas.authn.jaas[0].password-encoder.type=NONE

#JAAS PROD
cas.authn.jaas[1].realm=ProdLogin
cas.authn.jaas[1].login-config-type=JavaLoginConfig
cas.authn.jaas[1].login-configuration-file=/opt/apache-tomcat-9.0.60/conf/jaas.conf
cas.authn.jaas[1].password-encoder.encoding-algorithm=MD5
cas.authn.jaas[1].password-encoder.type=NONE



jaas.conf:
//DEV ENV
DevLogin {
        someorg.auth.dev.MyLogin required
                debug="true"
                DataSourceName="jdbc/DEVDB" ;
} ;

//PROD ENV
ProdLogin {
        someorg.auth.prod.MyLogin required
        debug="true"
        DataSourceName="jdbc/PRODDB" ;
} ;

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/ad6838ec-e247-4d3a-928a-26cdddc10d50n%40apereo.org.

Reply via email to