Unicon / cas-mfa

CAS server overlay with support for multifactor authentication.
Apache License 2.0
24 stars 19 forks source link

if renew parameter is detected, proceed with normal flow #129

Closed alexkolson closed 8 years ago

alexkolson commented 8 years ago

Just invoke the requireTgt transition if a renew parameter is detected so that that portion of the cas protocol is honored. Right now if there is an existing CAS non-mfa session and a service sends back the authn_method=MFA-YOUR-METHOD-HERE in conjunction with renew=true the renew parameter is ignored and it just drops them on the second factor authentication screen. Only added renew as supporting gateway in conjunction with authn_method doesn't make sense in my head.

alexkolson commented 8 years ago

Errors are related to dependency resolution for radius.