> 1. app-web : UI application WAR (maven+spring+gwt)
> 2. app-ds: Data services WAR (maven+spring+hibernate)
> 3. app-cas: Maven overlay war.

Hopefully those are all on different hosts where SSO would be of benefit.

> When the user logs into app-web and requests services from the app-ds, the
> user app-ds throws an exception and wants the user to authenticate again.

If app-ds is protected by CAS, this will not work without use of CAS
proxy authentication.  See http://www.jasig.org/cas/protocol for more
information on the CAS 2 protocol with proxy support.  In any case you
should share the exception if after study and further work the problem
persists.

> I adding the service ticket (ST-XXXX) to the query string before sending
> post requests to the app-ds.

CAS doesn't work that way.  You really should study the protocol
document or many other resources on the Web that provide a high-level
overview of the CAS authentication workflow.

M

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to