A couple things to try:

1) From the error message you receive, I will assume you are using the CAS 
Services Management.  Could you confirm that you have an entry for 
"http://myserver/secureCAS/*"; (note the asterisk (*))

2) If your error message below is a strict copy and paste, you have a colon ":" 
in your service URL following "myserver".  Could you confirm in your 
mod_auth_cas or Apache configuration (very likely Apache's "ServerName" 
directive) that there is no trailing colon?

HTH,
-Matt

Matthew J. Smith
University of Connecticut UITS
[email protected]
________________________________________
From: CedM [[email protected]]
Sent: Friday, April 08, 2011 5:23 AM
To: [email protected]
Subject: [cas-user] mod_auth_cas and serviceURL

Hello.

I am new to SSO CAS and tried to configure mod_auth_cas to protect a folder on 
a CentOS server (for testing), and I have problem with ServiceURL.
The URL is http://myserver/secureCAS

In the CAS Server, the URL http://myserver/secureCAS is declared as authorized.

When I first try to connect to http://myserver/secureCAS, I am redirected to 
the login page, then I am redirected to http://myserver/secureCAS. Everything 
OK, but when the server (=CAS client) tried to validate the ticket I get this 
error : "Service not allowed to validate tickets", because the CAS Service 
returned by mod_auth_cas is "CAS Service 
'http://myserver:/secureCAS/casaction=check', which is not a correct URL for my 
CAS Server.

It is a normal? Or a configuration error?

I have a another problem, which I think related. If i request the URL like 
http://myserver/secureCAS/asubfolder, I get the same error, "Service not 
allowed", because mod_auth_cas send 
service=http://myserver/secureCAS/asubfolder.

The CAS server is a commercial product, and we have other services that work 
great with CAS (but with PHP or ASP or Java Client).


--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to