Thanks Julien, I'm a litte bit farther, I receive now the message: Mar 27 15:53:07 rzssotst PAM_cas[5993]: checking element https://blablabla/horde/casProxy.php Mar 27 15:53:07 rzssotst PAM_cas[5993]: USER 'y0022248' AUTHENTICATED WITH CAS PT:ST-36-qMteL9EaklgNs7zGeS2H-cas
but after that: Mar 27 15:53:07 rzssotst PAM_cas[5997]: authentication failure#012#015#012#015#012#015#012#011'>http://www.yale.edu/tp/cas'>#015#012#011#015#012#011#011Ticket 'ST-36-qMteL9EaklgNs7zGeS2H-cas' not reconigzed#015#012#011#015#012 Mar 27 15:53:07 rzssotst PAM_cas[5997]: for requestGET /cas/proxyValidate?ticket=ST-36-qMteL9EaklgNs7zGeS2H-cas&service=imap://imap.blabla HTTP/1.0#012#012 Mar 27 15:53:07 rzssotst PAM_cas[5997]: authentication failure for user 'y0022248' : bad CAS ticket. PT=ST-36-qMteL9EaklgNs7zGeS2H-cas Do you have any Idea ? What I recognize is, I take a look at /var/log/mail.log and everytime when I login, it happens twice (for login and logout): Mar 27 15:59:06 rzssotst in.imapproxyd[5979]: LOGIN: '"y0022248"' (::ffff: x.x.x.x:1723) on existing sd [12] Mar 27 15:59:06 rzssotst in.imapproxyd[5979]: LOGIN: '"y0022248"' (::ffff:x.x.x.x:1724) on existing sd [10] Mar 27 15:59:27 rzssotst in.imapproxyd[5979]: LOGOUT: '"y0022248"' from server sd [10] Mar 27 15:59:27 rzssotst in.imapproxyd[5979]: LOGOUT: '"y0022248"' from server sd [12] Mar 27 16:00:46 rzssotst in.imapproxyd[5979]: Expiring server sd [9] Mar 27 16:00:46 rzssotst dovecot: IMAP(y0022248): Disconnected: Logged out Mar 27 16:04:46 rzssotst in.imapproxyd[5979]: Expiring server sd [12] Mar 27 16:04:46 rzssotst in.imapproxyd[5979]: Expiring server sd [10] Mar 27 16:04:46 rzssotst dovecot: IMAP(y0022248): Disconnected: Logged out Mar 27 16:04:46 rzssotst dovecot: IMAP(y0022248): Disconnected: Logged out Any Idea why ? Best regards, ________________________________ From: Julien Marchal <[email protected]> To: [email protected] Sent: Friday, March 27, 2009 3:18:34 AM Subject: Re: [cas-user] CAS HORDE Hi Binh, This is not a requirement to install horde imaporyx foncionne in CASE We use it in production without imaproxy You can set pam_cas to debug level in /etc/pam_cas.conf by setting debug property to on (after set level to LOG_DEBUG in syslog) I don't know which patch you've made but there's an horde's casify on https://sourcesup.cru.fr/frs/?group_id=264&release_id=1410 This casification reuses the same ticket several times to open a connection imap. This means that you must define a server side cache imap (cyrus saslautd on permits but pam_ccreds) Thanks, Julien Binh Thuan Nguyen a écrit : After patching everything, I login horde over CAS and receive this error, this repeats without ending, does anyone know where is the problem ? Mar 26 21:57:46 rzssotst PAM_cas[4024]: authentication failure#012#015#012#015#012 #015#012#011'>#015#012#011'>http://www.yale.edu/tp/cas'>#015#012#011 #015#012#011#011Ticket 'ST-97-uqKYM9NN1WbT5EOLGdDw-cas' wurde nicht anerkannt#015#012#011 #015#012 Mar 26 21:57:46 rzssotst PAM_cas[4024]: for requestGET /cas/proxyValidate?ticket=ST-97-uqKYM9NN1WbT5EOLGdDw-cas&service=imap://xxxx.xxxx HTTP/1.0#012#012 Mar 26 21:57:46 rzssotst PAM_cas[4024]: authentication failure for user 'y0022248' : bad CAS ticket. PT=ST-97-uqKYM9NN1WbT5EOLGdDw-cas Mar 26 21:57:46 rzssotst dovecot-auth[4024]: pam_ldap: error trying to bind as user "uid=y0022248,ou=people,dc=xx-xx,dc=xx" (Invalid credentials I use Pam_cas from this site http://sourcesup.cru.fr/frs/?group_id=213&release_id=712 phpCAS 0.6.0 CAS 3.2 Horde 3.1.7 and IMP 4.1.6 Best regards, ________________________________ From: Binh Thuan Nguyen <[email protected]> To: [email protected] Sent: Thursday, March 26, 2009 6:03:16 PM Subject: [cas-user] CAS HORDE Hi guys, Is it necessary to install imapproxy for horde-CAS ? Nin -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
