How can I enable CAS Dashboard (“/status/dashboard” endpoint)

Question

I am trying to customize my current CAS WAR Overlay. More specifically I need to get access to Dashboard (or something where I could do some changes, maybe change default user password atleast). CAS documentation is a great source, but I found out that it's quite overwhelming for beginner, especially if you did not used spring boot before.

So far I made a fresh install of CAS version 5.2 with Gradle, and deployed .war file on Tomcat 9.0 localhost. SSL is enabled. Note: Part with Gradle and Maven dependencies is clear.

Currently I am only able to login with casuser//Mellon default credentials. And I can see the links to things like Dashboard and such... But when I try to navigate there, I am told that I need permission to view that page. Bellow is content of cas.properties file located:

[cas-overlay-root]/etc/cas/config/cas.properties

So far that is the only thing that I edited.

\n\n    # server.port = 8443 \n    cas.server.name: https://localhost:8443 \n    cas.server.prefix: https://localhost:8443/cas \n    cas.adminPagesSecurity.ip=127\\.0\\.0\\.1 \n    logging.config: file:/etc/cas/config/log4j2.xml \n    # cas.serviceRegistry.config.location: classpath:/services \n    # SSL \n    # server.ssl.enabled=false \n    server.ssl.enabled=true \n    server.ssl.keyStore=file:/etc/cas/thekeystore \n    server.ssl.keyStorePassword=changeit \n    server.ssl.keyPassword=changeit \n    server.port=8443 \n\n

Any information on how to customize CAS Web Overlay, and enable links would be much appreciated.

Answer 1

maybe some other people will find this useful, so these are the settings which worked for me. They are very useful for testing local configuration because they are not secured so they should not be used in production.

    endpoints.enabled = true
    endpoints.sensitive = false
    endpoints.actuator.enabled = true
    management.security.enabled = false
    cas.adminPagesSecurity.ip = 127\\.0\\.0\\.1
    cas.adminPagesSecurity.actuatorEndpointsEnabled = true
    cas.monitor.endpoints.enabled = true
    cas.monitor.endpoints.sensitive = false

Please note that the ip property is a regular expression.