Hi,

When a page on your web application redirects you to the CAS server, the CAS 
server will either prompt you for credentials (if you aren't logged into CAS 
yet or if the Renew option is true in web.config) or it will redirect you back 
to the starting page with a service ticket in the URL.  The 
CasAuthenticationModule will detect the service ticket and validate it 
transparently, then redirect back to the starting page again without the 
service ticket in the URL.  

>From the end user perspective, it will appear as though you clicked on the 
>Logon link and are immediately logged in as a user without ever seeing a CAS 
>page.

If this is a problem for you, setting renew="true" in web.config would avoid 
this and would force users to login (even though the CAS server knows the user 
is authenticated).  

If you don't want to force renewed credentials, you might consider setting 
gateway="true".  This way the entire transparent login attempt would happen 
behind the scenes on the user's first request.  This would happen regardless of 
whether the page requires the user to be authorized or if it can be viewed 
anonymously.

-ScottH

> -----Original Message-----
> From: [email protected] [mailto:[email protected]]
> Sent: Monday, July 19, 2010 8:23 AM
> To: [email protected]
> Subject: RE: [cas-dev] Updated .NET Client
> 
> Hi Scott,
> today I done some test on your build. Sometime I n error: It appens
> when I'm already logged in on cas, and try to open a test website with
> client on. If I refresh the page it log me in.
> It could be a bad configuration of my web.config?
> 
> I haven't any other logs :S
> 
> Asp.net error page
> ------------------------------------------------------
>  Tipo non risolto per il membro
> 'DotNetCasClient.Security.CasPrincipal,DotNetCasClient,
> Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'.
> Descrizione: Eccezione non gestita durante l'esecuzione della richiesta
> Web corrente. Per ulteriori informazioni sull'errore e sul suo punto di
> origine nel codice, vedere l'analisi dello stack.
> 
> Dettagli eccezione:
> System.Runtime.Serialization.SerializationException: Tipo non risolto
> per il membro 'DotNetCasClient.Security.CasPrincipal,DotNetCasClient,
> Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'.
> 
> Errore nel codice sorgente:
> 
> Durante l'esecuzione della richiesta Web corrente รจ stata generata
> un'eccezione non gestita. Per informazioni sull'origine e la posizione
> dell'eccezione, vedere l'analisi dello stack dell'eccezione riportata
> di seguito.
> 
> Analisi dello stack:
> 
> [SerializationException: Tipo non risolto per il membro
> 'DotNetCasClient.Security.CasPrincipal,DotNetCasClient,
> Version=1.0.0.0, Culture=neutral, PublicKeyToken=null'.]
>    Microsoft.VisualStudio.WebHost.Connection.get_RemoteIP() +0
>    Microsoft.VisualStudio.WebHost.Request.GetRemoteAddress() +65
>    System.Web.HttpRequest.get_UserHostAddress() +18
> 
> DotNetNuke.HttpModules.Membership.MembershipModule.OnAuthenticateReques
> t(Object s, EventArgs e) +2472
> 
> System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecution
> Step.Execute() +68
>    System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&
> completedSynchronously) +75
> 
> -----------------------------------------------------------------------
> --------
> Valore legale alle tue mail
> InterfreePEC - la tua Posta Elettronica Certificata
> http://pec.interfree.it
> -----------------------------------------------------------------------
> --------
> 
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see http://www.ja-
> sig.org/wiki/display/JSG/cas-dev

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-dev

Reply via email to