Conventions

1
export REDIS_PASSWORD=`pwgen 32 1`
2
export REDIS_SERVER=192.0.2.10
3
export CAS_SRC_DIR=`pwd` # somewhere

Yes, I assume we are on root directory of our CAS Gradle overlay.

Setup Redis Server

1
sudo apt install redis-server

Disable bind to localhost only: (default Debian Stretch install)

1
sudo sed -i 's/^bind/#bind/'

Add Redis access password:

1
echo "requirepass $REDIS_PASSWORD" | sudo tee -a /etc/redis/redis.conf

Restart Redis:

1
sudo /etc/init.d/redis-server restart

Setup CAS Dependency

Add to cas’ build.gradle CAS Redis dependency.

1
compile "org.apereo.cas:cas-server-support-redis-ticket-registry:${project.'cas.version'}"

So, file becomes $CAS_SRC_DIR/cas/build.gradle:

1
// ...
2
dependencies {
3
    compile "org.apereo.cas:cas-server-webapp-jetty:${project.'cas.version'}@war"
4
    compile "org.apereo.cas:cas-server-support-redis-ticket-registry:${project.'cas.version'}"
5
    if (!project.hasProperty('bootiful')) {
6
        // Other dependencies may be listed here...
7
    } else {
8
        println "Running CAS in Bootiful mode; all dependencies except the CAS web application are ignored."
9
    }
10
}
11
// ...

Rebuild CAS:

1
./build clean build

Setup CAS configuration

Append to CAS configuration:

1
cat >> etc/cas/config/cas.properties << EOF
2
# Ticket granting
3
cas.tgc.crypto.encryption.key=wSQUZVGqXGzJJZYa89654xIf_U8mSughk8f9tlo6Zts
4
cas.tgc.crypto.signing.key=GmARoc8Ej2WnAhjAUadaNhjCKpif60M8MqfL-q4IymQo1KyutBulZGi_FB3ZZHieTi27ButDEtBB8wFxfvuGLA
5

6
# REDIS Ticket
7
cas.ticket.registry.redis.host=$REDIS_SERVER
8
cas.ticket.registry.redis.database=0
9
cas.ticket.registry.redis.port=6379
10
cas.ticket.registry.redis.password=$REDIS_PASSWORD
11

12
EOF

Move to CAS configuration directory:

1
./build copy

You could restart CAS, but CAS have an ability to read configuration change on-the-fly.

Run CAS if it isn’t run:

1
./build run

1
java -jar cas/build/libs/cas.war

Test

If doing it right

1
redis-cli
2
127.0.0.1:6379> AUTH nee8oohiNg3WiWoetapha3iwae9giej3
3
OK
4
127.0.0.1:6379> CLIENT LIST
5
id=86 addr=192.0.2.11:52512 fd=6 name= age=56 idle=29 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=0 qbuf-free=0 obl=0 oll=0 omem=0 events=r cmd=ping
6
id=87 addr=127.0.0.1:56782 fd=7 name= age=5 idle=0 flags=N db=0 sub=0 psub=0 multi=-1 qbuf=0 qbuf-free=32768 obl=0 oll=0 omem=0 events=r cmd=client

Reference

Redis Ticket Registry CAS Properties: Redis Ticket Registry

CAS Redis Ticket Storage

Conventions

Setup Redis Server

Setup CAS Dependency

Setup CAS configuration

Test

Reference

Related Articles

CAS Service Registry with PostgreSQL Backend

CAS with LDAP Authentication

CAS Case Study, Wordpress