cas-user  

Re: Re[cas-user] direction (?) loop of "Granting service ticket"

Giuseppe Sollazzo
Wed, 21 Oct 2009 02:54:14 -0700

Hi Marvin,
thanks for your support!

Actually, I had already tried with the setDebug directive. I entered it into auth.php at the following point (as shown on the examples)

       $this->connectCAS();

       // initialize phpCAS debug
       phpCAS::setDebug();
       // no SSL validation for the CAS server
       // phpCAS::setNoCasServerValidation();

       if (isset($_REQUEST['logout'])) {
       phpCAS::logout();
       }
       if (isset($_REQUEST['login'])) {
       phpCAS::forceAuthentication();
       }


        if (phpCAS::checkAuthentication()) {
               $frm->username=phpCAS::getUser();
...

No matter if I have the setNoCasServerValidation directive or not (getting the usual error "one of the methods... must be called") I can't get anything into the logs. /tmp/phpCAS.log is empty (access rights verified), and even trying passing a file name to setDebug($filename='/mydir/logfile') returns nothing.

Am I in need of exorcism or can anyone help me find an explanation to this? :-)

Giuseppe

Marvin Addison wrote:

This is a very common scenario.  The CAS logs merely mention that the
service ticket has been granted and a redirect sent to the requesting
service; the client has yet to validate it.  It sounds like a
connection timeout from Moodle to CAS.  If you don't see an entry for
the connection from Moodle to the CAS server in the CAS server-side
Tomcat access logs, I would think that would confirm some sort of
connection problem.

I believe it would be helpful to enable debugging in the phpCAS client
to get more information on the cause of failure:

phpCAS::setDebug();

That creates a /tmp/phpCAS.log file on Unix that contains an execution
trace that should help identify problems.  Post excerpts from that log
if you continue to have trouble.  (You can provide a path argument if
you want the logs going somewhere else.)

M



--
Giuseppe Sollazzo
Systems Developer / Administrator

Computing Services
St. George's, University of London


--
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user