Hi Phil, mod_auth_cas works correctly and builds the cookie and the header to redirect client to the webapp. IE9 (or other browsers) gets the good headers and 302 redirect but IE9 retries to CAS server, I don't understand why, I found no evidence in http headers, network sniff, etc.
The debug logs from mod_auth_cas shows no error, no expire/missing cookie and asks to validate ST to CAS and get a good answer. CAS server, webapp server and cookie domain are the same. And I don't use CASGateway. The whole stuff works like a charm with other browsers. I would like to say it's a IE9 bug somewhere but the same IE9 works on another webapp with mod_auth_cas, same config, same CAS server... On 31/03/2011 17:24, Phil Ames wrote: > If I understand correctly, it sounds like mod_auth_cas is continually > redirecting you to the CAS server. Do the debug logs say why? It > should log the reason (expired/missing cookie, etc.). Are you using > CASGateway at all? > > It's odd that the MSTGC cookie shows up on the requests http://webapp/ > (do these share .mydomain.tld ? are they the same host?) > > -Phil > > On Thu, Mar 31, 2011 at 8:48 AM, Vincent Hurtevent > <[email protected] > <mailto:[email protected]>> wrote: > > Hello, > > I'm facing a problem using IE9 with mod_auth_cas. This > mod_auth_cas configuration is working very well with other > browsers (Chrome, Firefox, IE 7/8) but not IE9. > > After examining http headers (attached file), IE9 enters a loop > between the webapp+mod_auth_cas and the CAS server. After getting > the ST from CAS and transmits it to mod_auth_cas which validates > it (I've set debug mode on mod_auth_cas to check this), IE9 > returns to the CAS asking a new ST whereas it receives a good 302 > redirect to the webapp. > > I really don't understand such a behaviour. I tested IE9 with > another webapp+mod_auth_cas with no problem, mod_auth_cas is > exactly the same version and dll module (servers are Windows > here), only Apaches are different but I don't see any mistake in > the configuration files. And why it works with other IE versions > and other browser ? > > I supposed that IE9 handles cache weirdly, but I played with IE > conf and headers dealing with cache/no-cache in Apache with no > success. > > If anyone has a clue, please don't hesitate > > Thank you > -- > You are currently subscribed to [email protected] > <mailto:[email protected]> as: [email protected] > <mailto:[email protected]> > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
