Ok, here was the problem. The CASified application is a JSF 1.0 application.
JSF has this wonderful thing called a front controller. The POST coming from CAS went to a URL like this: /context/root/application which bypasses the front controller. The URL needed to be of the form /context/root/application/faces/page.jsp. The 301 and 302s I was getting came from JSF trying to tell the browser the full URL. Of course HttpClient (as used in CAS and my test program) probably don't respond to the redirect request. The "/faces/page.jsp" may or may not be seen by the end user, that is up to the application developer, for the most part we hide it. Thanks again everyone, Bryan -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
