JA-SIG Day2: Using Spring Security and CAS

This is my notes. The official presentation slides will be at:

http://www.ja-sig.org/wiki/display/JCON/Denver+2007+presentations

Spring Security

1. Authentication Features: LDAP, DAO, JAAS, Run-As replacement, .. write your own
2. Technical Details:
1. USe Spring IoC
2. Interface Driven
3. Cohesion high, loosely coupled
4. Encourage customization and extension
5. Java 1.3+
3. Servlet container > Filter To Bean Proxy (Chain)> Filter X > Servlet
4. HtpSessionContext; Logout; Authentication Mechanism -- LDAP and so on; Exception; FilterSecurity Interceptor
5. http://www.acegisecurity.org/petclinic-tutorial.html
   

CAS -- see yesterday's