Got it.
Anything in particular I should be looking for in the logs specific to
CAS? I'm not sure what I'm looking for at this point, but I have
captured the submit transactions that generates the application error
in the apache logs. I've also captured the http headers in the
browser. I can attach them if it something that would help.
Thanks,
DW
On Tue, Mar 8, 2011 at 2:25 PM, Phil Ames <[email protected]> wrote:
> Please make sure the VirtualHost has LogLevel debug.
>
> On Tue, Mar 8, 2011 at 2:24 PM, Duane Winner <[email protected]> wrote:
>>
>> I just added the CASDebug On directive a few minutes ago
>>
>> -- where should I see debugging output? I'm looking in the apache logs
>> and not seeing anything additional
>>
>> On Tue, Mar 8, 2011 at 2:20 PM, Phil Ames <[email protected]> wrote:
>> > No, those are the timeouts I'm referring to. Do you have HTTP traces of
>> > when this problem occurs, as well as CASDebug On/LogLevel debug logs?
>> > -Phil
>> >
>> > On Tue, Mar 8, 2011 at 1:56 PM, Duane Winner <[email protected]>
>> > wrote:
>> >>
>> >> Thanks for the reply.
>> >>
>> >> I'm not specifying either of these as an apache directive, but
>> >> according to the README, the defaults are way beyond the window in
>> >> which I've tested this and replicated the error (under 5 minutes).
>> >>
>> >> Directive: CASTimeout
>> >> Default: 7200 (2 hours)
>> >> Directive: CASIdleTimeout
>> >> Default: 3600 (1 hour)
>> >>
>> >> Or are you referring to something else I should be looking at?
>> >>
>> >> Thanks again,
>> >> -DW
>> >>
>> >>
>> >>
>> >>
>> >> On Tue, Mar 8, 2011 at 1:49 PM, Phil Ames <[email protected]> wrote:
>> >> > It's possible that the user's mod_auth_cas session has expired, and
>> >> > they
>> >> > were redirected to the CAS server to obtain a new ticket. This
>> >> > redirect
>> >> > causes the loss of the POST data, and results in an HTTP GET when the
>> >> > CAS
>> >> > server redirects the user to the service URL.
>> >> > -Phil
>> >> >
>> >> > On Tue, Mar 8, 2011 at 12:58 PM, DW <[email protected]> wrote:
>> >> >>
>> >> >> Hello, we host a web-based application, and a client of ours has a
>> >> >> CAS
>> >> >> server so we installed mod_auth_cas when the asked for
>> >> >> Single-Sign-On.
>> >> >>
>> >> >> I compiled and installed mod_auth_cas-1.0.8.1 on apache 2.2, and it
>> >> >> works
>> >> >> for the most part, but we are running into issues where we have a
>> >> >> submission
>> >> >> form and when submitted our application generates an error. A trace
>> >> >> shows
>> >> >> that what should have been a POST was converted to a GET. If we turn
>> >> >> off
>> >> >> CAS/SSO, then everything works fine.
>> >> >>
>> >> >> Can any provide any insight?
>> >> >>
>> >> >> global:
>> >> >> LoadModule auth_cas_module /usr/local/apache/modules/mod_auth_cas.so
>> >> >> CASCookiePath /tmp/cas/
>> >> >>
>> >> >> In virtualhost section:
>> >> >> CASLoginURL https://foo.com/cas/login?view=showx
>> >> >> CASValidateURL https://foo.com/cas/serviceValidate
>> >> >> CASCertificatePath
>> >> >> /home/vhosts/bar/profile/ssl/gd_bundle.certificate
>> >> >> CASValidateServer Off
>> >> >>
>> >> >>
>> >> >> Thanks,
>> >> >> DW
>> >> >> --
>> >> >> You are currently subscribed to [email protected] as:
>> >> >> [email protected]
>> >> >> To unsubscribe, change settings or access archives, see
>> >> >> http://www.ja-sig.org/wiki/display/JSG/cas-user
>> >> >
>> >> >
>> >
>> >
>
>
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
https://foo.com/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
POST
/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
HTTP/1.1
Host: foo.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.14)
Gecko/20110218 Firefox/3.6.14
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer:
https://foo.com/app/mydepartment/report/poc-selection?parent=116&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
Content-Type: application/x-www-form-urlencoded
Content-Length: 9
value=Doe
HTTP/1.1 302 Found
Date: Tue, 08 Mar 2011 19:52:01 GMT
Server: Apache
Location:
https://bar.com/cas/login?service=https%3a%2f%2ffoo.com%2fapp%2fmydepartment%2fwildcard%2fsearch-poc%3fparent%3d117%26object-type%3dmydepartment-submitter%26form-name%3dsubmission-form%26status%3dnew-submission
Content-Length: 413
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
----------------------------------------------------------
https://bar.com/cas/login?service=https%3a%2f%2ffoo.com%2fapp%2fmydepartment%2fwildcard%2fsearch-poc%3fparent%3d117%26object-type%3dmydepartment-submitter%26form-name%3dsubmission-form%26status%3dnew-submission
GET
/cas/login?service=https%3a%2f%2ffoo.com%2fapp%2fmydepartment%2fwildcard%2fsearch-poc%3fparent%3d117%26object-type%3dmydepartment-submitter%26form-name%3dsubmission-form%26status%3dnew-submission
HTTP/1.1
Host: bar.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.14)
Gecko/20110218 Firefox/3.6.14
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer:
https://foo.com/app/mydepartment/report/poc-selection?parent=116&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
Cookie: JSESSIONID=4DE76B88F5EE4EE87E8F3DA744131C3B;
CASTGC=TGT-4640-lT5zSVxo9fpzJlLH9QhBflxM9H04J1QSQdrwZv9nyNS4y9hmuI-cas
HTTP/1.1 302 Moved Temporarily
Server: Apache-Coyote/1.1
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Cache-Control: no-cache, no-store
Location:
https://foo.com/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission&ticket=ST-7391-UTPr7yuvYIk3AlXpcjkb-cas
Content-Language: en-US
Content-Length: 0
Date: Tue, 08 Mar 2011 19:52:00 GMT
----------------------------------------------------------
https://foo.com/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission&ticket=ST-7391-UTPr7yuvYIk3AlXpcjkb-cas
GET
/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission&ticket=ST-7391-UTPr7yuvYIk3AlXpcjkb-cas
HTTP/1.1
Host: foo.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.14)
Gecko/20110218 Firefox/3.6.14
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer:
https://foo.com/app/mydepartment/report/poc-selection?parent=116&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
HTTP/1.1 302 Found
Date: Tue, 08 Mar 2011 19:52:01 GMT
Server: Apache
Set-Cookie:
MOD_AUTH_CAS_S=d8837da04d2c91fb84297b1d1622f041;Secure;Path=/app/mydepartment/wildcard/
Location:
https://foo.com/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
Content-Length: 347
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
----------------------------------------------------------
https://foo.com/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
GET
/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
HTTP/1.1
Host: foo.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.14)
Gecko/20110218 Firefox/3.6.14
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer:
https://foo.com/app/mydepartment/report/poc-selection?parent=116&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
Cookie: MOD_AUTH_CAS_S=d8837da04d2c91fb84297b1d1622f041
HTTP/1.1 200 OK
Date: Tue, 08 Mar 2011 19:52:01 GMT
Server: Apache
Cache-Control: no-cache, no-store
Pragma: no-cache, no-store
Expires: -1
Keep-Alive: timeout=15, max=95
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
----------------------------------------------------------
https://foo.com/icons/button-ok.jpg
GET /icons/button-ok.jpg HTTP/1.1
Host: foo.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.14)
Gecko/20110218 Firefox/3.6.14
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer:
https://foo.com/app/mydepartment/wildcard/search-poc?parent=117&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
HTTP/1.1 200 OK
Date: Tue, 08 Mar 2011 19:52:03 GMT
Server: Apache
Last-Modified: Mon, 07 Mar 2011 13:44:36 GMT
Etag: "b010c-3928-49de4b247d900"
Accept-Ranges: bytes
Content-Length: 14632
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive
Content-Type: image/jpeg
----------------------------------------------------------
[Tue Mar 08 19:33:10 2011] [debug] mod_auth_cas.c(1581): [client 216.113.237.2] Entering cas_authenticate(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:10 2011] [debug] mod_auth_cas.c(490): [client 216.113.237.2] entering getCASService(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:10 2011] [debug] mod_auth_cas.c(510): [client 216.113.237.2] CAS Service 'https%3a%2f%2ffoo.com%2fapp%2fmydepartment%2fwildcard%2fsearch-poc%3fparent%3d109%26object-type%3dmydepartment-submitter%26form-name%3dsubmission-form%26status%3dnew-submission', referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:10 2011] [debug] mod_auth_cas.c(465): [client 216.113.237.2] entering getCASLoginURL(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:10 2011] [debug] mod_auth_cas.c(424): [client 216.113.237.2] entering getCASGateway(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:10 2011] [debug] mod_auth_cas.c(526): [client 216.113.237.2] entering redirectRequest(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:10 2011] [debug] mod_auth_cas.c(538): [client 216.113.237.2] Adding outgoing header: Location: https://bar.com/cas/login?service=https%3a%2f%2ffoo.com%2fapp%2fmydepartment%2fwildcard%2fsearch-poc%3fparent%3d109%26object-type%3dmydepartment-submitter%26form-name%3dsubmission-form%26status%3dnew-submission, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1581): [client 216.113.237.2] Entering cas_authenticate(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(582): [client 216.113.237.2] Modified r->args (old 'parent=109&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission&ticket=ST-7287-63YPmg7kpTRTvasyjP1W-cas', new 'parent=109&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission'), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1406): [client 216.113.237.2] entering getResponseFromServer(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(490): [client 216.113.237.2] entering getCASService(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(510): [client 216.113.237.2] CAS Service 'https%3a%2f%2ffoo.com%2fapp%2fmydepartment%2fwildcard%2fsearch-poc%3fparent%3d109%26object-type%3dmydepartment-submitter%26form-name%3dsubmission-form%26status%3dnew-submission', referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(448): [client 216.113.237.2] entering getCASValidateURL(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1517): [client 216.113.237.2] Validation request: GET /cas/serviceValidate?service=https%3a%2f%2ffoo.com%2fapp%2fmydepartment%2fwildcard%2fsearch-poc%3fparent%3d109%26object-type%3dmydepartment-submitter%26form-name%3dsubmission-form%26status%3dnew-submission&ticket=ST-7287-63YPmg7kpTRTvasyjP1W-cas HTTP/1.0\nHost: bar.com\n\n, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1525): [client 216.113.237.2] Request successfully transmitted, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1533): [client 216.113.237.2] Received 369 bytes of response, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1533): [client 216.113.237.2] Received 0 bytes of response, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1539): [client 216.113.237.2] Validation response: HTTP/1.1 200 OK\r\nServer: Apache-Coyote/1.1\r\nContent-Type: text/html;charset=ISO-8859-1\r\nContent-Language: en-US\r\nContent-Length: 177\r\nDate: Tue, 08 Mar 2011 19:33:10 GMT\r\nConnection: close\r\n\r\n<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>\n\t<cas:authenticationSuccess>\n\t\t<cas:user>johndoe</cas:user>\n\n\n\t</cas:authenticationSuccess>\n</cas:serviceResponse>, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1184): [client 216.113.237.2] entering isValidCASTicket(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1015): [client 216.113.237.2] entering createCASCookie(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(863): [client 216.113.237.2] entering CASCleanCache(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(892): [client 216.113.237.2] Insufficient time elapsed since last cache clean, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(956): [client 216.113.237.2] entering writeCASCacheEntry(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1041): [client 216.113.237.2] Cookie '45578ca5bbda045e2208d7dc38eac802' created for user 'johndoe', referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(655): [client 216.113.237.2] entering setCASCookie(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(376): [client 216.113.237.2] Determining CAS scope (path: /app/mydepartment/wildcard/, CASScope: (null), CASRenew: (null), CASGateway: (null)), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(678): [client 216.113.237.2] Adding outgoing header: Set-Cookie: MOD_AUTH_CAS_S=45578ca5bbda045e2208d7dc38eac802;Secure;Path=/app/mydepartment/wildcard/, referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1581): [client 216.113.237.2] Entering cas_authenticate(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(1273): [client 216.113.237.2] entering isValidCASCookie(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(748): [client 216.113.237.2] entering readCASCacheFile(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
[Tue Mar 08 19:33:11 2011] [debug] mod_auth_cas.c(956): [client 216.113.237.2] entering writeCASCacheEntry(), referer: https://foo.com/app/mydepartment/report/poc-selection?parent=108&object-type=mydepartment-submitter&form-name=submission-form&status=new-submission
