On Mon, 7 Nov 2011, Bipul Dutta wrote:
Hi,
I am accessing the cas login page through SSL but in Firefox/IE8 when I
submit the login page it shows the http header with plain password as
follows:
============================
https://mycasserver:9002/cas/login?null
Looks like HTTPS to me...
Andy
POST /cas/login?null HTTP/1.1
Host: mycasserver:9002
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Connection: keep-alive
Referer:
https://mycasserver:9002/cas/login;jsessionid=PpmyT3sJHFTjNlhcfN2rMnsbfjh2Zyx7DHgvJ6MtJ9V7w401Z1Rd!-418534041?null
Cookie:
JSESSIONID=PpmyT3sJHFTjNlhcfN2rMnsbfjh2Zyx7DHgvJ6MtJ9V7w401Z1Rd!-418534041
Content-Type: application/x-www-form-urlencoded
Content-Length: 134
username=myusername&password=mypassword<=_c00A74B5F-002D-F7AE-C3E0-E941C0633025_kF8D86708-E443-DFDF-6BCC-D54C92856D30&_eventId=submit
============================
Is there anything in cas.war I'll have to configure? Pointing to any
documentation is highly appreciated.
Best regards.
Bipul Dutta.
--
You are currently subscribed to [email protected] as: [email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
