Hi all, please help us with this issue:
we have a problem with the SSO using a clustered CAS environment.
In particular, accessing a protected webapp, we are redirected to CAS login 
page; inputting username and password, often occurs that the login page is 
re-displayed, without any error evidence, even if credentials are correct.

After some tests, we realized that the problem occurs when the form login is 
requested to a cluster node (assume CAS1) while the credentials submit request 
reach a different server (CAS2 for instance).
In the case CAS2 is called for the first time (after a restart, servlet 
disposition, etc..) than the "start-state" condition is executed and it falls 
on the "viewLoginForm", because submitted parameters are not visible, resulting 
in the re-display of the login page.

In our cluster there are four nodes, so sometime happens that users have to 
reintroduce credentials up to three times...

Have you suggestions to avoid this problem?

To reproduce this behaviour in a "one-server" environment is enough to start 
CAS server and a protected application, to access the app, to restart the CAS 
server, to input credentials and confirm.

Thank's in advance,
Damiano
-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to