Merge branch 'master' of git://github.com/Jasig/cas

Author: battags

cas-server-documentation/installation/Configuring-Authentication-Throttling.md

@@ -112,7 +112,7 @@ It is convenient to place Spring configuration for login throttling components i
 
 <!-- A scheduler that drives all configured triggers is provided by default in applicationContext.xml. -->
 <bean id="loginThrottleTrigger"
-      class="org.springframework.scheduling.quartz.SimpleTriggerBean"
+      class="org.springframework.scheduling.quartz.SimpleTriggerFactoryBean"
       p:jobDetail-ref="loginThrottleJobDetail"
       p:startDelay="1000"
       p:repeatInterval="1000"/>

cas-server-documentation/installation/Logout-Single-Signout.md

@@ -37,16 +37,6 @@ The redirect behavior is turned off by default, and is activated via the followi
 
 The specified url must be registered in the service registry of CAS and enabled.
 
-##Web Session Termination
-By default, CAS comes with a `TerminateWebSessionListener` whose job is to expire the web session once the webflow has ended. The goal is to clean up the session as soon as possible to decrease memory consumption.
-
-The listener configures the maximum inactivity interval for the web session, which is the time, in seconds, between client requests before the servlet container will invalidate this session. An interval value of zero or less indicates that the session should never timeout. This value can be controlled via the following setting in `cas.properties`:
-
-{% highlight bash %}
-# Specifies the time, in seconds, to invalidate the web session.
-# terminate.web.session.timeout=2
-{% endhighlight %}
-
 ##Single Logout (SLO)
 CAS is designed to support single sign out: it means that it will be able to invalidate client application sessions in addition to its own SSO session.  
 Whenever a ticket-granting ticket is explicitly expired, the logout protocol will be initiated. Clients that do not support the logout protocol may notice extra requests in their access logs that appear not to do anything.

cas-server-documentation/planning/Security-Guide.md

@@ -196,6 +196,12 @@ The filters are configured to sanitize authentication request parameters and rej
 
 It is **STRONGLY** recommended that all CAS deployments be evaluated and include this configuration if necessary to prevent protocol attacks in situations where the CAS container and environment are unable to block malicious and badly-configured requests.
 
+### Spring Webflow Sessions
+The CAS project uses Spring Webflow to manage and orchestrate the authentication process. The conversational state of the
+webflow used by CAS is managed by the client which is then passed and tracked throughout various states of the authentication
+process. This state must be secured and encrypted to prevent session hijacking. While CAS provides default encryptions
+settings out of the box, it is **STRONGLY** recommended that [all CAS deployments](../installation/Webflow-Customization.html) be evaluated prior to production rollouts and regenerate this configuration to prevent attacks. 
+
 ## User-Driven Security Features
 The following features may be employed to afford some user control of the SSO experience.
 

cas-server-support-radius/pom.xml

@@ -36,8 +36,8 @@
         </dependency>
 
         <dependency>
-            <groupId>net.jradius</groupId>
-            <artifactId>jradius-core</artifactId>
+            <groupId>com.github.coova</groupId>
+            <artifactId>jradius</artifactId>
             <version>${radius.version}</version>
             <exclusions>
                 <exclusion>
@@ -48,34 +48,31 @@
                     <groupId>log4j</groupId>
                     <artifactId>log4j</artifactId>
                 </exclusion>
+                <exclusion>
+                    <artifactId>slf4j-api</artifactId>
+                    <groupId>org.slf4j</groupId>
+                </exclusion>
+                <exclusion>
+                    <artifactId>commons-collections</artifactId>
+                    <groupId>commons-collections</groupId>
+                </exclusion>
             </exclusions>
-        </dependency>
-
-        <dependency>
-            <groupId>net.jradius</groupId>
-            <artifactId>jradius-dictionary</artifactId>
-            <version>${radius.version}</version>
-        </dependency>
-        <!--
-                <dependency>
-                    <groupId>net.jradius</groupId>
-                    <artifactId>jradius-extended</artifactId>
-                    <version>1.0.0</version>
-                </dependency>
-        -->
-
+        </dependency>        
     </dependencies>
 
     <repositories>
+        <!-- 
+        The JRadius artifacts above are not available in Maven Central yet.
+        So the following alternative is provided.
+        -->
         <repository>
-            <id>coova</id>
-            <name>Coova Repository</name>
-            <url>http://coova-dev.s3.amazonaws.com/mvn</url>
+            <id>jitpack.io</id>
+            <url>https://jitpack.io</url>
         </repository>
     </repositories>
 
     <properties>
         <cs.dir>${project.parent.basedir}</cs.dir>
-        <radius.version>1.1.3</radius.version>
+        <radius.version>jradius-1.1.5</radius.version>
     </properties>
 </project>

cas-server-webapp/src/main/resources/messages_ar.properties

@@ -56,8 +56,8 @@ screen.service.sso.error.header=<span dir='rtl'> \u0644\u0644\u0648\u0635\u0648\
 screen.service.sso.error.message=<span dir='rtl'>\u0644\u0642\u062F \u062D\u0627\u0648\u0644\u062A \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u062E\u062F\u0645\u0629 \u064A\u062A\u0637\u0644\u0628 \u0645\u0635\u0627\u062F\u0642\u0629 \u0645\u0646 \u062F\u0648\u0646 \u0645\u0635\u0627\u062F\u0642\u0629 \u0645\u0646 \u062C\u062F\u064A\u062F.\u0627\u0644\u0631\u062C\u0627\u0621 \u062D\u0627\u0648\u0644 \u0644\u0645\u0635\u0627\u062F\u0642\u0629 \u0645\u0631\u0629 \u0623\u062E\u0631\u0649 {0} </span>
 
 error.invalid.loginticket=\u0644\u0627 \u064A\u0645\u0643\u0646\u0643 \u0645\u062D\u0627\u0648\u0644\u0629 \u0625\u0639\u0627\u062F\u0629 \u0627\u0644\u062A\u0642\u062F\u064A\u0645 \u0644\u0644\u0646\u0645\u0648\u0630\u062C \u0627\u0644\u0630\u064A \u062A\u0645 \u062A\u0642\u062F\u064A\u0645\u0647 \u0628\u0627\u0644\u0641\u0639\u0644
-required.username=\u0627\u0633\u0645 \u0627\u0644\u0645\u0633\u062A\u062E\u062F\u0645 \u0647\u0648 \u0627\u0644\u062D\u0642\u0644 \u0627\u0644\u0645\u0637\u0644\u0648\u0628
-required.password=\u0643\u0644\u0645\u0629 \u0627\u0644\u0633\u0631 \u0647\u064A \u0627\u0644\u062D\u0642\u0644 \u0627\u0644\u0645\u0637\u0644\u0648\u0628
+username.required=\u0627\u0633\u0645 \u0627\u0644\u0645\u0633\u062A\u062E\u062F\u0645 \u0647\u0648 \u0627\u0644\u062D\u0642\u0644 \u0627\u0644\u0645\u0637\u0644\u0648\u0628
+password.required=\u0643\u0644\u0645\u0629 \u0627\u0644\u0633\u0631 \u0647\u064A \u0627\u0644\u062D\u0642\u0644 \u0627\u0644\u0645\u0637\u0644\u0648\u0628
 error.authentication.credentials.bad= \u0623\u0648\u0631\u0627\u0642 \u0627\u0644\u0627\u0639\u062A\u0645\u0627\u062F \u0627\u0644\u062A\u064A \u0642\u062F\u0645\u062A\u0647\u0627 \u0644\u0627 \u064A\u0645\u0643\u0646 \u062A\u062D\u062F\u064A\u0647 \u0644\u0644\u0645\u0635\u0627\u062F\u0642\u0629 \u0639\u0644\u064A\u0647
 error.authentication.credentials.unsupported= \u0623\u0648\u0631\u0627\u0642 \u0627\u0644\u0627\u0639\u062A\u0645\u0627\u062F \u0627\u0644\u062A\u064A \u0642\u062F\u0645\u062A\u0647\u0627 \u063A\u064A\u0631 \u0645\u0639\u062A\u0645\u062F\u0629 \u0628\u0648\u0627\u0633\u0637\u0629
 

cas-server-webapp/src/main/resources/messages_ca.properties

@@ -59,8 +59,8 @@ screen.service.sso.error.header=Cal reautenticar per a accedir a aquest servei
 screen.service.sso.error.message=Heu intentat accedir a un servei que requereix autenticació sense reautenticar. Si us plau, intenteu <a href="{0}">autenticar de nou</a>.
 
 error.invalid.loginticket=No podeu intentar reenviar un formulari que ja s'ha enviat.
-required.username=El nom d'usuari és un camp obligatori.
-required.password=La contrasenya és un camp obligatori.
+username.required=El nom d'usuari és un camp obligatori.
+password.required=La contrasenya és un camp obligatori.
 
 # Authentication failure messages
 authenticationFailure.AccountDisabledException=S'ha deshabilitat aquest compte.

cas-server-webapp/src/main/resources/messages_de.properties

@@ -56,8 +56,8 @@ screen.service.sso.error.header=Eine Neuanmeldung ist erforderlich, um auf den S
 screen.service.sso.error.message=Der Service, für den Sie versucht haben, sich zu authentifizieren, hat nicht das Recht, CAS zu benutzen.
 
 error.invalid.loginticket=Sie können kein Formular erneut abschicken, das bereits übertragen wurde.
-required.username=Benutzername ist ein Pflichtfeld.
-required.password=Passwort ist ein Pflichtfeld.
+username.required=Benutzername ist ein Pflichtfeld.
+password.required=Passwort ist ein Pflichtfeld.
 
 # Authentication failure messages
 authenticationFailure.AccountDisabledException=Dieses Konto wurde deaktiviert.

cas-server-webapp/src/main/resources/messages_es.properties

@@ -59,8 +59,8 @@ screen.service.sso.error.header=Reautenticación requerida para acceder a este s
 screen.service.sso.error.message=Intentó acceder a un servicio que requiere autenticación sin reautenticar. Por favor intente <a href="{0}">autenticar de nuevo</a>.
 
 error.invalid.loginticket=No puede intentar reenviar un formulario que ya se ha enviado.
-required.username=El nombre de usuario es un campo requerido.
-required.password=La contraseña es un campo requerido.
+username.required=El nombre de usuario es un campo requerido.
+password.required=La contraseña es un campo requerido.
 
 # Authentication failure messages
 authenticationFailure.AccountDisabledException=Se ha deshabilitado esta cuenta.

cas-server-webapp/src/main/resources/messages_fa.properties

@@ -56,8 +56,8 @@ screen.service.sso.error.header=<span dir='rtl'>\u0628\u0631\u0627\u06CC \u062F\
 screen.service.sso.error.message=<span dir='rtl'>\u0633\u0639\u06CC \u062F\u0627\u0634\u062A\u06CC\u062F \u0628\u062F\u0648\u0646 \u062A\u0627\u06CC\u06CC\u062F \u062F\u0648\u0628\u0627\u0631\u0647\u060C \u0628\u0647 \u0633\u0631\u0648\u06CC\u0633\u06CC \u062F\u0633\u062A\u0631\u0633\u06CC \u067E\u06CC\u062F\u0627 \u06A9\u0646\u06CC\u062F \u06A9\u0647 \u0646\u06CC\u0627\u0632 \u0628\u0647 \u062A\u0627\u06CC\u06CC\u062F \u062F\u0627\u0631\u062F. \u0644\u0637\u0641\u0627\u064B \u0628\u0639\u062F \u0627\u0632 </a>\u062A\u0627\u06CC\u06CC\u062F <a href=\u201D{0}\u201D> \u062F\u0648\u0628\u0627\u0631\u0647 \u0627\u0645\u062A\u062D\u0627\u0646 \u06A9\u0646\u06CC\u062F</span>
 
 error.invalid.loginticket=\u0646\u0645\u06CC\u062A\u0648\u0627\u0646\u06CC\u062F \u0641\u0631\u0645\u06CC \u06A9\u0647 \u0627\u0631\u0633\u0627\u0644 \u0634\u062F\u0647 \u0631\u0627 \u062F\u0648\u0628\u0627\u0631\u0647 \u0627\u0631\u0633\u0627\u0644 \u06A9\u0646\u06CC\u062F
-required.username=\u0648\u0627\u0631\u062F \u06A9\u0631\u062F\u0646 \u0646\u0627\u0645 \u06A9\u0627\u0631\u0628\u0631\u06CC \u0627\u0644\u0632\u0627\u0645\u06CC \u0627\u0633\u062A
-required.password=\u0648\u0627\u0631\u062F \u06A9\u0631\u062F\u0646 \u0631\u0645\u0632 \u0648\u0631\u0648\u062F \u0627\u0644\u0632\u0627\u0645\u06CC \u0627\u0633\u062A
+username.required=\u0648\u0627\u0631\u062F \u06A9\u0631\u062F\u0646 \u0646\u0627\u0645 \u06A9\u0627\u0631\u0628\u0631\u06CC \u0627\u0644\u0632\u0627\u0645\u06CC \u0627\u0633\u062A
+password.required=\u0648\u0627\u0631\u062F \u06A9\u0631\u062F\u0646 \u0631\u0645\u0632 \u0648\u0631\u0648\u062F \u0627\u0644\u0632\u0627\u0645\u06CC \u0627\u0633\u062A
 error.authentication.credentials.bad=\u0646\u0627\u0645 \u06A9\u0627\u0631\u0628\u0631\u06CC \u0648 \u0631\u0645\u0632 \u0648\u0631\u0648\u062F \u0635\u062D\u06CC\u062D \u0646\u0645\u06CC\u0628\u0627\u0634\u062F
 error.authentication.credentials.unsupported=>CAS \u0627\u06CC\u0646 \u0646\u0627\u0645 \u06A9\u0627\u0631\u0628\u0631\u06CC \u0648 \u0631\u0645\u0632 \u0648\u0631\u0648\u062F \u0631\u0627 \u067E\u0634\u062A\u06CC\u0627\u0646\u06CC \u0646\u0645\u06CC\u06A9\u0646\u062F
 

cas-server-webapp/src/main/resources/messages_fr.properties

@@ -72,8 +72,8 @@ screen.service.sso.error.message=Vous avez tenté d'accéder à un service qui r
 screen.service.required.message=Vous avez tenté de vous authentifier sans préciser d'application cible. Merci de vérifier votre requête et de recommencer.
 
 error.invalid.loginticket=Vous ne pouvez pas re-soumettre un formulaire d'autentification qui a déjà été soumis.
-required.username=Vous devez entrer votre identifiant.
-required.password=Vous devez entrer votre mot de passe.
+username.required=Vous devez entrer votre identifiant.
+password.required=Vous devez entrer votre mot de passe.
 
 # Authentication failure messages
 authenticationFailure.AccountDisabledException=Votre compte a été désactivé.

cas-server-webapp/src/main/resources/messages_hr.properties

@@ -54,8 +54,8 @@ screen.service.sso.error.header=Za pristup ovom servisu potrebna je ponovna aute
 screen.service.sso.error.message=Poku\u0161ali ste pristupiti servisu koji zahtijeva autentikaciju, pri \u010demu se niste ponovno autenticirali. Molimo vas poku\u0161ajte se ponovno autenticirati pritiskom <a href="{0}">ovdje</a>.
 
 error.invalid.loginticket=Sadr\u017eaj forme ve\u0107 je poslan. Ponovno slanje nije dozvoljeno.
-required.username=Korisni\u010dko ime je obavezno polje.
-required.password=Zaporka je obavezno polje.
+username.required=Korisni\u010dko ime je obavezno polje.
+password.required=Zaporka je obavezno polje.
 error.authentication.credentials.bad=Korisni\u010dko ime i(li) zaporka nisu ispravni.
 error.authentication.credentials.unsupported=CAS ne podr\u017eava ovaj na\u010din autentikacije.
 

cas-server-webapp/src/main/resources/messages_it.properties

@@ -57,8 +57,8 @@ screen.service.sso.error.header=
 screen.service.sso.error.message=Si è tentato di accedere a un servizio che richiede di effettuare nuovamente l'autenticazione. Si prega di <a href="{0}">autenticarsi nuovamente</a>.
 
 error.invalid.loginticket=Ricompila il form dall'inizio senza utilizzare il tasto 'indietro'
-required.username=Il campo login é obbligatorio
-required.password=Il campo password é obbligatorio
+username.required=Il campo login é obbligatorio
+password.required=Il campo password é obbligatorio
 error.authentication.credentials.bad=Login o password errate
 error.authentication.credentials.unsupported=Le credenziali utilizzate non sono supportate da CAS
 

cas-server-webapp/src/main/resources/messages_ja.properties

@@ -57,8 +57,8 @@ screen.service.sso.error.header=\u3053\u306e\u30b5\u30fc\u30d3\u30b9\u306b\u30a2
 screen.service.sso.error.message=\u518d\u8a8d\u8a3c\u3092\u8981\u6c42\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3057\u3088\u3046\u3068\u3057\u307e\u3057\u305f\uff0e<a href="{0}">\u518d\u8a8d\u8a3c</a>\u3092\u8a66\u307f\u3066\u304f\u3060\u3055\u3044\uff0e
 
 error.invalid.loginticket=\u3059\u3067\u306b\u9001\u4fe1\u6e08\u307f\u306e\u30d5\u30a9\u30fc\u30e0\u306f\u518d\u9001\u4fe1\u3067\u304d\u307e\u305b\u3093\uff0e
-required.username=\u30e6\u30fc\u30b6\u540d\u306f\u5fc5\u9808\u30d5\u30a3\u30fc\u30eb\u30c9\u3067\u3059\uff0e
-required.password=\u30d1\u30b9\u30ef\u30fc\u30c9\u306f\u5fc5\u9808\u30d5\u30a3\u30fc\u30eb\u30c9\u3067\u3059\uff0e
+username.required=\u30e6\u30fc\u30b6\u540d\u306f\u5fc5\u9808\u30d5\u30a3\u30fc\u30eb\u30c9\u3067\u3059\uff0e
+password.required=\u30d1\u30b9\u30ef\u30fc\u30c9\u306f\u5fc5\u9808\u30d5\u30a3\u30fc\u30eb\u30c9\u3067\u3059\uff0e
 error.authentication.credentials.bad=\u3042\u306a\u305f\u304c\u5165\u529b\u3057\u305f\u8a8d\u8a3c\u60c5\u5831\u306f\uff0c\u8a8d\u8a3c\u53ef\u80fd\u306a\u3082\u306e\u3067\u3042\u308b\u3053\u3068\u304c\u78ba\u8a8d\u3067\u304d\u307e\u305b\u3093\u3067\u3057\u305f\uff0e
 error.authentication.credentials.unsupported=\u5165\u529b\u3057\u305f\u8a8d\u8a3c\u60c5\u5831\u306f CAS \u3067\u306f\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u307e\u305b\u3093\uff0e
 

cas-server-webapp/src/main/resources/messages_mk.properties

@@ -52,8 +52,8 @@ screen.service.sso.error.header=\u0417\u0430 \u043f\u0440\u0438\u0441\u0442\u043
 screen.service.sso.error.message=\u0421\u0435 \u043e\u0431\u0438\u0434\u043e\u0432\u0442\u0435 \u0434\u0430 \u043f\u0440\u0438\u0441\u0442\u0430\u043f\u0438\u0442\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0438\u0441 \u043a\u043e\u0458 \u043f\u043e\u0431\u0430\u0440\u0443\u0432\u0430 \u0430\u0432\u0442\u0435\u043d\u0442\u0438\u043a\u0430\u0446\u0438\u0458\u0430, \u043f\u0440\u0438\u0442\u043e\u0430 \u043d\u0435 \u0441\u0442\u0435 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0430\u0432\u0442\u0435\u043d\u0442\u0438\u0446\u0438\u0440\u0430\u043d\u0438. \u0412\u0435 \u043c\u043e\u043b\u0438\u043c\u0435 \u0434\u0430 \u0441\u0435 \u043e\u0431\u0438\u0434\u0435\u0442\u0435 \u0434\u0430 \u0441\u0435 \u0430\u0432\u0442\u0435\u0442\u0438\u043d\u0446\u0438\u0440\u0430\u0442\u0435 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0441\u043e \u043f\u0440\u0438\u0442\u0438\u0441\u043a\u0430\u045a\u0435 <a href="{0}&renew=true">\u0422\u0423\u041a\u0410</a>.
 
 error.invalid.loginticket=\u0421\u043e\u0434\u0440\u0436\u0438\u043d\u0430\u0442\u0430 \u043d\u0430 \u0444\u043e\u0440\u043c\u0443\u043b\u0430\u0440\u043e\u0442 \u0435 \u0432\u0435\u045c\u0435 \u0438\u0441\u043f\u0440\u0430\u0442\u0435\u043d\u0430. \u041f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u045c\u0430\u045a\u0435 \u043d\u0435 \u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0435\u043d\u043e.
-required.username=\u041a\u043e\u0440\u0438\u0441\u043d\u0438\u0447\u043a\u043e\u0442\u043e \u0438\u043c\u0435 \u0437\u0430\u0434\u043e\u043b\u0436\u0438\u0442\u0435\u043b\u043d\u043e \u0442\u0440\u0435\u0431\u0430 \u0434\u0430 \u0441\u0435 \u043f\u043e\u043f\u043e\u043b\u043d\u0438.
-required.password=\u041b\u043e\u0437\u0438\u043d\u043a\u0430\u0442\u0430 \u0437\u0430\u0434\u043e\u043b\u0436\u0438\u0442\u0435\u043b\u043d\u043e \u0442\u0440\u0435\u0431\u0430 \u0434\u0430 \u0441\u0435 \u043f\u043e\u043f\u043e\u043b\u043d\u0438
+username.required=\u041a\u043e\u0440\u0438\u0441\u043d\u0438\u0447\u043a\u043e\u0442\u043e \u0438\u043c\u0435 \u0437\u0430\u0434\u043e\u043b\u0436\u0438\u0442\u0435\u043b\u043d\u043e \u0442\u0440\u0435\u0431\u0430 \u0434\u0430 \u0441\u0435 \u043f\u043e\u043f\u043e\u043b\u043d\u0438.
+password.required=\u041b\u043e\u0437\u0438\u043d\u043a\u0430\u0442\u0430 \u0437\u0430\u0434\u043e\u043b\u0436\u0438\u0442\u0435\u043b\u043d\u043e \u0442\u0440\u0435\u0431\u0430 \u0434\u0430 \u0441\u0435 \u043f\u043e\u043f\u043e\u043b\u043d\u0438
 error.authentication.credentials.bad=\u041a\u043e\u0440\u0438\u0441\u043d\u0438\u0447\u043a\u043e\u0442\u043e \u0438\u043c\u0435 \u0438/\u0438\u043b\u0438 \u043b\u043e\u0437\u0438\u043d\u043a\u0430\u0442\u0430 \u043d\u0435 \u0441\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043d\u0438.
 error.authentication.credentials.unsupported=\u0426\u0410\u0421 \u043d\u0435 \u0433\u043e \u043f\u043e\u0434\u0434\u0440\u0436\u0443\u0432\u0430 \u043e\u0432\u043e\u0458 \u043d\u0430\u0447\u0438\u043d \u043d\u0430 \u0430\u0432\u0442\u0435\u043d\u0442\u0438\u043a\u0430\u0446\u0438\u0458\u0430.
 

cas-server-webapp/src/main/resources/messages_nl.properties

@@ -50,8 +50,8 @@ screen.logout.security=Voor de veiligheid dien je je browser nu af te sluiten.
 screen.logout.redirect=De applicatie waar je vandaan komt heeft <a href="{0}">deze link opgegeven die je kan volgen door hier te klikken</a>.
 
 error.invalid.loginticket=Je mag geen formulier verzenden dat je al eens hebt verzonden.
-required.username=Gelieve een gebruikersnaam in te vullen.
-required.password=Gelieve een wachtwoord in te vullen.
+username.required=Gelieve een gebruikersnaam in te vullen.
+password.required=Gelieve een wachtwoord in te vullen.
 error.authentication.credentials.bad=De combinatie van gebruikersnaam en wachtwoord was niet juist.
 error.authentication.credentials.unsupported=De verstuurde identificatiegegevens worden niet ondersteund door CAS.
 

cas-server-webapp/src/main/resources/messages_pt_BR.properties

@@ -49,8 +49,8 @@ screen.service.sso.error.header=Re-Autenti\u00e7\u00e3o Obrigat\u00f3ria para Ac
 screen.service.sso.error.message=Voc\u00ea tentou acessar um servi\u00e7o que necessita de autentica\u00e7\u00e3o sem re-autentica\u00e7\u00e3o. Por favor, tente <a href="{0}">autenticar novamente</a>.
 
 error.invalid.loginticket=Voc\u00ea n\u00e3o pode tentar re-enviar um formul\u00e1rio que j\u00e1 vou enviado anteriormente.
-required.username=Usu\u00e1rio \u00e9 um campo obrigat\u00f3rio.
-required.password=Senha \u00e9 um campo obrigat\u00f3rio.
+username.required=Usu\u00e1rio \u00e9 um campo obrigat\u00f3rio.
+password.required=Senha \u00e9 um campo obrigat\u00f3rio.
 error.authentication.credentials.bad=Usu\u00e1rio ou senha inv\u00e1lidos.
 error.authentication.credentials.unsupported=As credenciais fornecidas n\u00e3o n\u00e3o suportadas pelo CAS.