Hi Luke,
Sorry to answer so late.
We are in version 4.x but i don't know exactly what sub-version. Sorry we 
just manage authentication (CAS, Shibboleth) and so on.
Do you want i ask my colleague or version 4 is enough ?

Best regards,

Le lundi 26 février 2018 20:09:13 UTC+1, Luke Whittington a écrit :
>
> Hi, Didier. We're also experiencing some WebProxy and ClearPass issues 
> with CAS 5.2.x and uPortal 4. What version of uPortal are you running?
>
> thanks,
> Luke
>
> OK, I answer by myself.
> Found the solution by a colleague in a French list. Thanks a lot to him.
> I try to explain (sorry for my english) :
> Problem is in our UPortal behind a web front-end server. We have to add 
> *allowedProxyChains 
> *parameter in the web.xml of UPortal.
> CAS Server 5.2.x needs this parameter (CAS Server 5.1.x NO).
> Thanks 
> Best regards 
> - hide quoted text -
>
> Le jeudi 22 février 2018 16:40:22 UTC+1, Didier Capdevielle a écrit : 
>>
>> Hello CAS' Experts,
>>
> We have trouble using Proxy Mode (for UPortal) with CAS Server 5.2.x. 
> SAME server (Debian Stretch ; OpenJDK 8 ; Tomcat8) and SAME 
> configuration (except json-service-registry dependency and json location 
> directory : different names). SAME Json files.
> 5.1.7 / 5.1.8 : NO problem with proxy mode (CAS 2 protocol) 
> 2018-02-22 16:35:02,692 DEBUG 
> [org.apereo.cas.ticket.proxy.support.Cas20ProxyHandler] - Sent ProxyIou of 
> [PGTIOU-*************************************************jIOaCR1nRg-cas-test] 
> for service: [https://xxxxxx.xx/uPortal/CasProxyServlet"; rel="nofollow" 
> target="_blank" onmousedown="this.href='
> https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return
>  
> <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return>
>  
> true;" onclick="this.href='
> https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return
>  
> <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return>
>  
> true;">https://xxxxxx.xx/uPortal/CasProxyServlet 
> <https://xxxxxx.xx/uPortal/%3Cwbr%3ECasProxyServlet%3C/a%3E>]
> 2018-02-22 16:35:02,692 DEBUG 
> [org.apereo.cas.web.AbstractServiceValidateController] - Successfully 
> validated service ticket [ST-2-jML5LiuPAf2x4cQMZlbt-cas-test] for service [
> https://xxxxxxxxx.xx/uPortal/Login"; rel="nofollow" target="_blank" 
> onmousedown="this.href='
> https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return
>  
> <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return>
>  
> true;" onclick="this.href='
> https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return
>  
> <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return>
>  
> true;">https://xxxxxxxxx.xx/uPortal/Login 
> <https://xxxxxxxxx.xx/uPortal/%3Cwbr%3ELogin%3C/a%3E>]
>
> 5.2.x : No error in logs but Impossible to have PGT Iou
>
> What is changing in 5.2.x ?
>
> Thanks in Advance,
>
> Best regards.
>     
>     
>    
>    
>
> -- 
>
> Luke Whittington
> Software Developer
> Development Services, University of Victoria
> lwhi...@uvic.ca <javascript:> - 250-472-5696
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/28d88908-319f-4768-b7b8-c6e50d81b05e%40apereo.org.

Reply via email to