Hi Luke, Sorry to answer so late. We are in version 4.x but i don't know exactly what sub-version. Sorry we just manage authentication (CAS, Shibboleth) and so on. Do you want i ask my colleague or version 4 is enough ?
Best regards, Le lundi 26 février 2018 20:09:13 UTC+1, Luke Whittington a écrit : > > Hi, Didier. We're also experiencing some WebProxy and ClearPass issues > with CAS 5.2.x and uPortal 4. What version of uPortal are you running? > > thanks, > Luke > > OK, I answer by myself. > Found the solution by a colleague in a French list. Thanks a lot to him. > I try to explain (sorry for my english) : > Problem is in our UPortal behind a web front-end server. We have to add > *allowedProxyChains > *parameter in the web.xml of UPortal. > CAS Server 5.2.x needs this parameter (CAS Server 5.1.x NO). > Thanks > Best regards > - hide quoted text - > > Le jeudi 22 février 2018 16:40:22 UTC+1, Didier Capdevielle a écrit : >> >> Hello CAS' Experts, >> > We have trouble using Proxy Mode (for UPortal) with CAS Server 5.2.x. > SAME server (Debian Stretch ; OpenJDK 8 ; Tomcat8) and SAME > configuration (except json-service-registry dependency and json location > directory : different names). SAME Json files. > 5.1.7 / 5.1.8 : NO problem with proxy mode (CAS 2 protocol) > 2018-02-22 16:35:02,692 DEBUG > [org.apereo.cas.ticket.proxy.support.Cas20ProxyHandler] - Sent ProxyIou of > [PGTIOU-*************************************************jIOaCR1nRg-cas-test] > for service: [https://xxxxxx.xx/uPortal/CasProxyServlet"; rel="nofollow" > target="_blank" onmousedown="this.href=' > https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return > > <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return> > > true;" onclick="this.href=' > https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return > > <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxx.xx%2FuPortal%2FCasProxyServlet%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGsOkrTVC06oBSQAIBuvcgp92gXJQ';return> > > true;">https://xxxxxx.xx/uPortal/CasProxyServlet > <https://xxxxxx.xx/uPortal/%3Cwbr%3ECasProxyServlet%3C/a%3E>] > 2018-02-22 16:35:02,692 DEBUG > [org.apereo.cas.web.AbstractServiceValidateController] - Successfully > validated service ticket [ST-2-jML5LiuPAf2x4cQMZlbt-cas-test] for service [ > https://xxxxxxxxx.xx/uPortal/Login"; rel="nofollow" target="_blank" > onmousedown="this.href=' > https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return > > <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return> > > true;" onclick="this.href=' > https://www.google.com/url?q\x3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return > > <https://www.google.com/url?q%5Cx3dhttps%3A%2F%2Fxxxxxxxxx.xx%2FuPortal%2FLogin%5Cx26sa%5Cx3dD%5Cx26sntz%5Cx3d1%5Cx26usg%5Cx3dAFQjCNGZWafI9pdnN3mup73TrRfzCmR7Yg';return> > > true;">https://xxxxxxxxx.xx/uPortal/Login > <https://xxxxxxxxx.xx/uPortal/%3Cwbr%3ELogin%3C/a%3E>] > > 5.2.x : No error in logs but Impossible to have PGT Iou > > What is changing in 5.2.x ? > > Thanks in Advance, > > Best regards. > > > > > > -- > > Luke Whittington > Software Developer > Development Services, University of Victoria > [email protected] <javascript:> - 250-472-5696 > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/28d88908-319f-4768-b7b8-c6e50d81b05e%40apereo.org.
