I strongly recommend to not use the approach you try to configure. Connection between the LB and CAS Servers should be encrypted as well.
> Am 14.12.2017 um 08:13 schrieb casuser <[email protected]>: > > Thank you Cristina, > > Actually what I meant was lets say https://example.com will go to a load > balancer and it will check the ssl and provide the ssl certificate then it > will go to CAS. I want to configure CAS in a way so that it doesn't need to > check for the ssl because from the load balancer there will be a http > connection will go to CAS and if CAS finds it as HTTP Single Sign On WILL NOT > WORK. So I need to configure CAS so that it listen to HTTP for the Single > Sign On to work. Is there a way to achieve that? > > Best Regards, > > FAZLA > > On Thursday, December 14, 2017 at 2:55:20 PM UTC+8, Cristina Vlaicu wrote: > Hello, > > I had configured https on the application server. I had nothing to configure > in CAS properties. > > Thank you, > Cristina > > > > On Dec 14, 2017 6:51 AM, "casuser" <[email protected] <>> wrote: > There is a load balancer in between the user and the CAS . The load balancer > will check allow the SSL certificate. But from the load balancer to the CAS > the connection will be HTTP. > > How to configure cas in that way so that it listen to HTTP? > > I have tried this in my cas.properties but didn't solve my problem: > > cas.server.httpProxy.enabled=true > cas.server.httpProxy.secure=false ## changed from True > cas.server.httpProxy.protocol=AJP/1.3 > cas.server.httpProxy.scheme=http ## changed to http > cas.server.httpProxy.redirectPort=8080 > cas.server.httpProxy.proxyPort=8080 > cas.server.httpProxy.attributes.attributeName=attributeValue > I do have the warning: > "Non-secure Connection You are currently accessing CAS over a non-secure > connection. Single Sign On WILL NOT WORK. In order to have single sign on > work, you MUST log in over HTTPS." but the warning still remains. > "https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#http-proxying > > <https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#http-proxying>" > CAS Properties > <https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#http-proxying> > apereo.github.io <http://apereo.github.io/> > > -- > - Website: https://apereo.github.io/cas <https://apereo.github.io/cas> > - Gitter Chatroom: https://gitter.im/apereo/cas <https://gitter.im/apereo/cas> > - List Guidelines: https://goo.gl/1VRrw7 <https://goo.gl/1VRrw7> > - Contributions: https://goo.gl/mh7qDG <https://goo.gl/mh7qDG> > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/0fa53de5-dc4e-42c8-ba3f-04e107a36aa5%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/0fa53de5-dc4e-42c8-ba3f-04e107a36aa5%40apereo.org?utm_medium=email&utm_source=footer>. > > > -- > - Website: https://apereo.github.io/cas <https://apereo.github.io/cas> > - Gitter Chatroom: https://gitter.im/apereo/cas <https://gitter.im/apereo/cas> > - List Guidelines: https://goo.gl/1VRrw7 <https://goo.gl/1VRrw7> > - Contributions: https://goo.gl/mh7qDG <https://goo.gl/mh7qDG> > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/1e2dc1f6-b27e-4f1f-9fad-bb973a2b2a4f%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/1e2dc1f6-b27e-4f1f-9fad-bb973a2b2a4f%40apereo.org?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3122DB3E-DFA9-44C5-A0E4-B253B8AB3FF4%40gmail.com.
