Have you checked if any networking configurations have changed (i.e. firewalls, topology, load balancers, certificates, etc.)?
On Wed, Dec 8, 2010 at 6:13 PM, Dean Heisey <[email protected]>wrote: > > For a more complete discussion of the problme see the following CAS Post: > > > http://jasig.275507.n4.nabble.com/Re-CAS-infinite-redirect-loop-td584495.html > CAS-infinite-redirect-loop > > Within the last two weeks I started experiencing the same problem on our > CAS > deployment. Our Environment is as follows: > > Two instances of tomcat running on two different boxes(Clustered for > Session > Replication) > Each CAS is configured to use the Jboss TreeCache > Both CAS boxes sit behind a BigIP load balancer. > > This configuration has been running rock solid, successfully adding and > removing tickets from the TreeCache for the past year but something changed > within the last week and now I can not run two servers in the pool. I have > checked the deployed applications, no new versions have been pushed to > production within the last 6 months. > > Log from the CAS Server that initially processed the request: > > 2010-12-08 14:37:04,611 DEBUG > [org.jasig.cas.web.flow.GenerateServiceTicketAction] -<Action > 'GenerateServiceTicketAction' beginning execution> > > 2010-12-08 14:37:04,611 DEBUG > [org.jasig.cas.ticket.registry.JBossCacheTicketRegistry] - <Retrieving > ticket from registry for: > TGT-1-uKJdACiUui0CzeaxbTdXUMbJ6KCM5ZPTGSsPBJMNESEY2vrNm2-noardsso01> > > 2010-12-08 14:37:04,612 DEBUG > [org.jasig.cas.ticket.registry.JBossCacheTicketRegistry] - <Adding ticket > to > registry for: ST-59-l7K9paa1ABQOnExzdVrQ-noardsso01> > > 2010-12-08 14:37:04,613 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] -<Granted service ticket > [ST-59-l7K9paa1ABQOnExzdVrQ-noardsso01] for service > [http://nstore.noa.nintendo.com/Nstore/j_spring_cas_security_check] for > user > [deanhe01]> > > 2010-12-08 14:37:04,613 DEBUG > [org.jasig.cas.web.flow.GenerateServiceTicketAction] - <Action > 'GenerateServiceTicketAction' completed execution; result is 'success'> > > > On the redirect..the request hits the other service and here is the log: > > 2010-12-08 14:37:04,654 DEBUG > [org.jasig.cas.web.support.CasArgumentExtractor] -<Extractor generated > service for: > http://nstore.noa.nintendo.com/Nstore/j_spring_cas_security_check> > > 2010-12-08 14:37:04,655 DEBUG > [org.jasig.cas.ticket.registry.JBossCacheTicketRegistry] - <Retrieving > ticket from registry for: ST-61-PsP3YzzXhCRAxAARaGSS-noardsso01> > > 2010-12-08 14:37:04,655 DEBUG > [org.jasig.cas.ticket.registry.JBossCacheTicketRegistry] - <Retrieving > ticket from registry for: ST-59-l7K9paa1ABQOnExzdVrQ-noardsso01> > > 2010-12-08 14:37:04,655 DEBUG > [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket > [ST-59-l7K9paa1ABQOnExzdVrQ-noardsso01] does not exist.> > > > Ath this point I am just looking for suggestions as to where to look to > figure out what is going on. Any help is greatly appreciated. > > Dean > > -- > View this message in context: > http://jasig.275507.n4.nabble.com/CAS-Infinite-Redirect-Loop-Hijacking-Thread-Sort-of-tp3079303p3079303.html > Sent from the CAS Users mailing list archive at Nabble.com. > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
