Thank you for the recommendation. Currently this is the existing system we have. We will try to follow your recommendation but for that we need some time, Right now if there is a way to configure CAS server to listen to HTTP?
On Thursday, December 14, 2017 at 3:37:35 PM UTC+8, robertoschwald wrote: > > I strongly recommend to not use the approach you try to configure. > Connection between the LB and CAS Servers should be encrypted as well. > > > Am 14.12.2017 um 08:13 schrieb casuser <fazlarab...@gmail.com > <javascript:>>: > > Thank you Cristina, > > Actually what I meant was lets say https://example.com will go to a load > balancer and it will check the ssl and provide the ssl certificate then it > will go to CAS. I want to configure CAS in a way so that it doesn't need to > check for the ssl because from the load balancer there will be a http > connection will go to CAS and if CAS finds it as HTTP Single Sign On WILL > NOT WORK. So I need to configure CAS so that it listen to HTTP for the > Single Sign On to work. Is there a way to achieve that? > > Best Regards, > > FAZLA > > On Thursday, December 14, 2017 at 2:55:20 PM UTC+8, Cristina Vlaicu wrote: >> >> Hello, >> >> I had configured https on the application server. I had nothing to >> configure in CAS properties. >> >> Thank you, >> Cristina >> >> >> >> On Dec 14, 2017 6:51 AM, "casuser" <fazlarab...@gmail.com> wrote: >> >> There is a load balancer in between the user and the CAS . The load >> balancer will check allow the SSL certificate. But from the load balancer >> to the CAS the connection will be HTTP. >> >> How to configure cas in that way so that it listen to HTTP? >> >> I have tried this in my cas.properties but didn't solve my problem: >> >> >> cas.server.httpProxy.enabled=true >> cas.server.httpProxy.secure=false ## changed from True >> cas.server.httpProxy.protocol=AJP/1.3 >> cas.server.httpProxy.scheme=http ## changed to http >> cas.server.httpProxy.redirectPort=8080 >> cas.server.httpProxy.proxyPort=8080 >> cas.server.httpProxy.attributes.attributeName=attributeValue >> >> I do have the warning: >> "Non-secure Connection You are currently accessing CAS over a non-secure >> connection. Single Sign On WILL NOT WORK. In order to have single sign on >> work, you MUST log in over HTTPS." but the warning still remains. >> " >> https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#http-proxying"; >> >> >> CAS Properties >> <https://apereo.github.io/cas/5.2.x/installation/Configuration-Properties.html#http-proxying> >> apereo.github.io >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to cas-user+u...@apereo.org. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/0fa53de5-dc4e-42c8-ba3f-04e107a36aa5%40apereo.org >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/0fa53de5-dc4e-42c8-ba3f-04e107a36aa5%40apereo.org?utm_medium=email&utm_source=footer> >> . >> >> >> > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+u...@apereo.org <javascript:>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/1e2dc1f6-b27e-4f1f-9fad-bb973a2b2a4f%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/1e2dc1f6-b27e-4f1f-9fad-bb973a2b2a4f%40apereo.org?utm_medium=email&utm_source=footer> > . > > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/21417811-3d1b-4dca-88c7-077fd6468754%40apereo.org.
