Bypass CAS authentification

Hi,

To create an authentication form to perform a local wordpress authentication bypassing CAS auth, you can use this code below in a template :

<?php

        $args = array(
            'echo'           => true,
            'remember'       => true,
            'redirect' => site_url( '/?wp_cassify_bypass=bypass' ),
            'form_id'        => 'loginform',
            'id_username'    => 'user_login',
            'id_password'    => 'user_pass',
            'id_remember'    => 'rememberme',
            'id_submit'      => 'wp-submit',
            'label_username' => __( 'Username' ),
            'label_password' => __( 'Password' ),
            'label_remember' => __( 'Remember Me' ),
            'label_log_in'   => __( 'Log In' ),
            'value_username' => '',
            'value_remember' => false
        );

        wp_login_form( $args );
    ?>

If you want exclude page from CAS authentication you can add them into white list URL in Authorization rules options.

Best regards.

Hi,

You’re right. There is a bug on bypass. Please update to 1.8.9.

Best regards.

Hi,

Sorry about my late answer, priotities of my project changed so I don’t find the time to test last week.

I update to latest version 1.9.1, and now all works well.
Thank you very much !

Best regards.

Hi again,

I speak to fast : there is still a bug.
The local authentification with WordPress works well, but not the CAS Authentification.

Steps :
– I access to the CAS login page,
– After login, I back to the page of authentification WordPress “https://mysite/wp-login.php” and I have to validate again my ID and password
– Then, I arrived on my page but not my Home Page : “No result find”, URL looks like this : ‘https://mywebsite/?ticket=ST-11-J32JxbR9bf05bD0yh0eb-cas01.example.org’

Any idea ?

Thanks for your help.

I’ve made changes on last version. By default, authenticated user has no WordPress role.

Try to write a User Role Rule like this to push at least subscriber role to all authenticated users :

(CAS{cas_user_id} -NEQ “admin”) => role subscriber

Hi,

I do this but still have the same problem.

When I use the CAS Authentification, I have to authenticate two times (one with CAS interface, second with WP interface) and I’m not arrived on my home page, because the ticket created by CAS is passed in parameter of the URL of my home page (https://mywebsite/homepage/?ticketCAS).

I’m back to a classic authentification for now, but I will try again with the bypass.

Any other idea is welcome !
Thanks for any help

Hi,

Sorry about late answer. I moved my website on a different server (on Linux) and I try again with ByPass.

Everything works well now !
Don’t know if it’s due to the server or due to my configuration of CAS and LDAP…

Thanks for your help anyway ??