There is nothing on the VIP that specifies any security for any URI.


The developer console shows that cas.css is redirecting to cas.css, 

[image: Screenshot 2023-11-03 at 10.22.53 AM.png]

During startup I'm seeing:

INFO [org.springframework.security.web.DefaultSecurityFilterChain] - <Will 
not secure Ant [pattern='/css/**']>



On Thursday, November 2, 2023 at 3:22:24 PM UTC-4 Ray Bon wrote:

> Is it possible that vip...themes is protected/secured and needs login to 
> access?
> Check your developer console to see where the redirects are going.
> Check cas logs to see which URIs are unprotected (shows on startup).
>
> Ray
>
> On Thu, 2023-11-02 at 09:24 -0700, atilling wrote:
>
> Notice: This message was sent from outside the University of Victoria 
> email system. Please be cautious with links and sensitive information.
>
>
> Offloading SSL to F5 BigIP 
> In cas.properties we have:
> server.port=8080
> server.ssl.enabled=false
>
> if we go to https://node.domain.tld:8080/cas/login the page displays fine 
> and the CSS is loaded
>
> if we go to https://vip.domain.tld/cas/login the page displays but the 
> CSS is not loaded
>
> https://node.domain.tld:8080/cas/login/themes/cc_main/css/cas.css loads 
> fine
>
> https://vip.domain.tld/cas/login/themes/cc_main/css/cas.css throws the 
> error ERR_TOO_MANY_REDIRECTS
>
> Tried adding 
> server.tomcat.remoteip.port-header=x-forwarded-port
> server.tomcat.remoteip.protocol-header=x-forwarded-proto
> server.tomcat.remoteip.remote-ip-header=x-forwarded-for 
>
> And there was no change.
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/6c259e8d-d28c-49f8-9be0-348becc7763en%40apereo.org.

Reply via email to