I changed servers names in the logs but all CAS server, webapp server
are accessed by fqdn not short name and neither ip and are in the same
domain covered by the mstgc cookie domain.
I read about problem with IE and IP or fqdn and I alreadey checked the
whole config. The Apache ServerName is an fqdn and I try to access by
its fqdn.
In fact It's like IE9 cached the first redirect from webapp to CAS and
replays it in a loop with the tgc and mstgc already gotten.
On 31/03/2011 20:34, Smith, Matthew J. wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
It looks like you use the short-name "webapp" to connect to the
server. Do you see the same behavior if you use the FQDN?
- -Matt
On 03/31/2011 08:48 AM, Vincent Hurtevent wrote:
Hello,
I'm facing a problem using IE9 with mod_auth_cas. This mod_auth_cas
configuration is working very well with other browsers (Chrome,
Firefox, IE 7/8) but not IE9.
After examining http headers (attached file), IE9 enters a loop
between the webapp+mod_auth_cas and the CAS server. After getting
the ST from CAS and transmits it to mod_auth_cas which validates it
(I've set debug mode on mod_auth_cas to check this), IE9 returns to
the CAS asking a new ST whereas it receives a good 302 redirect to
the webapp.
I really don't understand such a behaviour. I tested IE9 with
another webapp+mod_auth_cas with no problem, mod_auth_cas is
exactly the same version and dll module (servers are Windows here),
only Apaches are different but I don't see any mistake in the
configuration files. And why it works with other IE versions and
other browser ?
I supposed that IE9 handles cache weirdly, but I played with IE
conf and headers dealing with cache/no-cache in Apache with no
success.
If anyone has a clue, please don't hesitate
Thank you
- --
Matthew J. Smith
University of Connecticut UITS
[email protected]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk2UyVIACgkQGER0Au6g8xBFEgCg6HG8GOz9+RhFl1rkfW3mryOT
7nUAoOGlz5i2jLBmO67M7SlK2ZkMZ4xP
=PV6p
-----END PGP SIGNATURE-----
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
