I'm answering myself : set cas.authn.spnego.mixedModeAuthentication=true in the cas.properties file.
Le vendredi 23 décembre 2016 17:37:24 UTC+1, Jean-Damien a écrit : > > Hi all, > > I'm migrating my CAS server from 3.5 to 5.0.1 > I used to do a lot of webflow customisation with my old 3.5 Jasig CAS, > but, during the migration, I'm trying to get rid of this. > > So, what I want to achieve is this : > 1. try the SPNEGO negociation > 2. if success, redirect to the service > 3. if fail, display the login form > 4. when the login form is submitted, authenticate against OpenLDAP > > I've set up a new Apereo CAS Server, first with 4.2.7 and then 5.0.1 > > For both version, I check that OpenLDAP authentication works and then > SPNEGO works. > So, I don't have any configuration problem with authentication. > > Now, here's the problem : when I configure Firefox to NOT handle SPNEGO > (leave network.negotiate-auth.trusted-uris blank), I get a blank screen > (with 401 status) > > I'm wondering if this a bug or a normal feature as both version are > working the same. > > Looking at logs, it seems that the viewLoginForm should be displayed : > > 2016-12-23 17:14:20,867 DEBUG >>> [org.springframework.webflow.engine.Transition] - <Exiting state 'spnego'> >> >> 2016-12-23 17:14:20,867 DEBUG >>> [org.springframework.webflow.execution.ActionExecutor] - <Executing >>> [EvaluateAction@3e00e96d expression = clearWebflowCredentialsAction, >>> resultExpression = [null]]> >> >> 2016-12-23 17:14:20,867 DEBUG >>> [org.springframework.webflow.execution.ActionExecutor] - <Executing >>> org.apereo.cas.web.flow.ClearWebflowCredentialAction@17aa21c4> >> >> 2016-12-23 17:14:20,867 DEBUG >>> [org.apereo.cas.web.flow.ClearWebflowCredentialAction] - <Current event >>> signaled a failure. Recreating credentials instance from the context> >> >> 2016-12-23 17:14:20,868 DEBUG >>> [org.springframework.webflow.execution.ActionExecutor] - <Finished >>> executing org.apereo.cas.web.flow.ClearWebflowCredentialAction@17aa21c4; >>> result = null> >> >> 2016-12-23 17:14:20,868 DEBUG >>> [org.springframework.webflow.execution.ActionExecutor] - <Finished >>> executing [EvaluateAction@3e00e96d expression = >>> clearWebflowCredentialsAction, resultExpression = [null]]; result = null> >> >> 2016-12-23 17:14:20,868 DEBUG >>> [org.springframework.webflow.engine.ViewState] - <Entering state >>> 'viewLoginForm' of flow 'login'> >> >> 2016-12-23 17:14:20,874 DEBUG >>> [org.springframework.webflow.engine.impl.FlowExecutionImpl] - <Assigned key >> >> > Could you tell me what is expected from CAS when the SPNEGO fails ? > > Regards, > Jean-Damien Bouvier > > > -- > - CAS gitter chatroom: https://gitter.im/apereo/cas > - CAS mailing list guidelines: > https://apereo.github.io/cas/Mailing-Lists.html > - CAS documentation website: https://apereo.github.io/cas > - CAS project website: https://github.com/apereo/cas > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/aa62dad6-5e1a-4cb7-b74f-2c6896692a9e%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/aa62dad6-5e1a-4cb7-b74f-2c6896692a9e%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - CAS gitter chatroom: https://gitter.im/apereo/cas - CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html - CAS documentation website: https://apereo.github.io/cas - CAS project website: https://github.com/apereo/cas --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/07e5de59-f067-4c7e-bfde-032ca70a6c22%40googlegroups.com.
