Hi, I am accessing the cas login page through SSL but in Firefox/IE8 when I submit the login page it shows the http header with plain password as follows:
============================ https://mycasserver:9002/cas/login?null POST /cas/login?null HTTP/1.1 Host: mycasserver:9002 User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip, deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Connection: keep-alive Referer: https://mycasserver:9002/cas/login;jsessionid=PpmyT3sJHFTjNlhcfN2rMnsbfjh2Zyx7DHgvJ6MtJ9V7w401Z1Rd!-418534041?null Cookie: JSESSIONID=PpmyT3sJHFTjNlhcfN2rMnsbfjh2Zyx7DHgvJ6MtJ9V7w401Z1Rd!-418534041 Content-Type: application/x-www-form-urlencoded Content-Length: 134 username=myusername&password=mypassword<=_c00A74B5F-002D-F7AE-C3E0-E941C0633025_kF8D86708-E443-DFDF-6BCC-D54C92856D30&_eventId=submit ============================ Is there anything in cas.war I'll have to configure? Pointing to any documentation is highly appreciated. Best regards. Bipul Dutta. -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
