Hi all, I'm migrating my CAS server from 3.5 to 5.0.1 I used to do a lot of webflow customisation with my old 3.5 Jasig CAS, but, during the migration, I'm trying to get rid of this.
So, what I want to achieve is this : 1. try the SPNEGO negociation 2. if success, redirect to the service 3. if fail, display the login form 4. when the login form is submitted, authenticate against OpenLDAP I've set up a new Apereo CAS Server, first with 4.2.7 and then 5.0.1 For both version, I check that OpenLDAP authentication works and then SPNEGO works. So, I don't have any configuration problem with authentication. Now, here's the problem : when I configure Firefox to NOT handle SPNEGO (leave network.negotiate-auth.trusted-uris blank), I get a blank screen (with 401 status) I'm wondering if this a bug or a normal feature as both version are working the same. Looking at logs, it seems that the viewLoginForm should be displayed : 2016-12-23 17:14:20,867 DEBUG >> [org.springframework.webflow.engine.Transition] - <Exiting state 'spnego'> > > 2016-12-23 17:14:20,867 DEBUG >> [org.springframework.webflow.execution.ActionExecutor] - <Executing >> [EvaluateAction@3e00e96d expression = clearWebflowCredentialsAction, >> resultExpression = [null]]> > > 2016-12-23 17:14:20,867 DEBUG >> [org.springframework.webflow.execution.ActionExecutor] - <Executing >> org.apereo.cas.web.flow.ClearWebflowCredentialAction@17aa21c4> > > 2016-12-23 17:14:20,867 DEBUG >> [org.apereo.cas.web.flow.ClearWebflowCredentialAction] - <Current event >> signaled a failure. Recreating credentials instance from the context> > > 2016-12-23 17:14:20,868 DEBUG >> [org.springframework.webflow.execution.ActionExecutor] - <Finished >> executing org.apereo.cas.web.flow.ClearWebflowCredentialAction@17aa21c4; >> result = null> > > 2016-12-23 17:14:20,868 DEBUG >> [org.springframework.webflow.execution.ActionExecutor] - <Finished >> executing [EvaluateAction@3e00e96d expression = >> clearWebflowCredentialsAction, resultExpression = [null]]; result = null> > > 2016-12-23 17:14:20,868 DEBUG >> [org.springframework.webflow.engine.ViewState] - <Entering state >> 'viewLoginForm' of flow 'login'> > > 2016-12-23 17:14:20,874 DEBUG >> [org.springframework.webflow.engine.impl.FlowExecutionImpl] - <Assigned key > > Could you tell me what is expected from CAS when the SPNEGO fails ? Regards, Jean-Damien Bouvier -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/aa62dad6-5e1a-4cb7-b74f-2c6896692a9e%40apereo.org.
