First commit

Duplicate joda-time dependencies may arise in overlays that include cas-server-support-ldap. Declare direct depencency on joda-time for core and cas-server-support-ldap and exclude from transitive dependencies to ensure single consistent version.
(cherry picked from commit ce6d842c)

CAS1251: Removed the json exception resolver bean config from the webapp. This handler primarily is responsible for handling ajax errors that may occur as part of the services management's D&D functionality. That change resides in the master branch and should be removed from 35x.

CAS-1244 Restore error handling behavior of AuthenticationManager components.

CAS-1207 Make cglib a direct dependency of cas-server-webapp.

Both cas-server-webapp and cas-server-integration-restlet depend on cglib; the former via transitive dependency on spring-json and the latter directly. Placing the dependency directly in the webapp artifact and removing it from the other locations cleans up the dependency graph when both webapp and restlet are used together. It's safe to remove the dependency from restlet since there is no use case for using it without webapp.

Disable casAuthenticationFilter and add comment to notify adopters of it's danger in production environments.

Remove the Authentication filter from clearpass-configuration.xml leaving only the Cas20ProxyReceivingTicketValidationFilter

Added configuration for the org.eclipse.m2e plugin to remove the eclipse maven plugin warning on the unknown lifecycle.

Many language keys are missing from non-English bundles. The first attempt to address this issue to update all missing properties is to take advantage of the maven-translate plugin to report back all missing keys from bundles as part of the build process

ehcache-core dependency is missing from the pom.xml file. The dependency currently needs to be externally defined when clearpass is added to an overlay pom
(cherry picked from commit a6349b36)

excessive logging of expected exception from RESTful API flow.
(cherry picked from commit 5a10a6ef)

Commit baf4ff7f broke the documented behavior of AuthenticationManagerImpl and the undocumented behavior of the other AuthetnicationManager implementations. The former behavior, to throw the first exception of any kind produced by an AuthenticationHandler, has been restored.

CAS-1222 : Upgrade scribe-up to 1.2.0

CAS-1231 : Set content type to plain text for /accessToken in OAuth serv...

CAS-1220 : Set content type to JSON for profile in OAuth server mode

CAS-1208 : Support state parameter in OAuth server

CAS-1199 for 3.5.x : remove log4j-over-slf4j dependency in cas-server-core