Our issue turns out to be related to the f5 overiding the remoteAddr with another value and once we set the remoteAddr back to the original value using tomcat all is good.
Related CAS issue. <https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/R4WVT4Tq0g8> Related tomcat page <https://tomcat.apache.org/tomcat-8.0-doc/config/valve.html> On Tuesday, 13 December 2016 07:31:19 UTC+11, Colin Wilkinson wrote: > > Hi, > > We seem to have an strange problem every now and then. We people are > already signed into the Portal and click another link that uses CAS at > times they are being asked to resign in, but other times it works just fine. > > Anyone seen this problem and is able to help. This is only happening in > production from what we can tell. > > Our CAS environment is > CAS 4.1.7 > With SPNEGO set to mix mode on, so that it redirects to the login page if > not able to SSO. > Apache HTTP 2.2 > Apache Tomcat 8.0.33 > > Regards, > Colin > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/8552691c-d154-4585-86b7-5cb92e42b9d6%40apereo.org.
