Hi:

We have an evaluation version of CAS 3.4.11 running.

The set-up is:

- SSL off-loading on the load balancer (currently redirecting to 1 server
only)
- Apache (AJP proxy to Tomcat)
- Tomcat with CAS

After successfully entering correct login name/password combination at
https://example.edu/cas/services, the  error listed at tail end of this
email was captured in the 'tomcat logs.

There is something not quite right with my set-up - can anyone give
pointers?

*
The AJP config in my APACHE HTTP server is:*

<VirtualHost _default_:80>
....
        SetEnvIf Front-End-Https "^on$" HTTPS=on
        ProxyRequests Off

        <Proxy ajp://localhost:8009>
                Allow from all
        </Proxy>

        ProxyPass /cas ajp://localhost:8009/cas retry=5
</VirtualHost _default>

*
ERROR captured in TOMCAT logs:*

2012-06-05 17:32:08,328 DEBUG
[org.jasig.cas.client.validation.Cas20ServiceTicketValidator] -
<Constructing validation url:
https://cas.id-dev.ubc.ca/cas/serviceValidate?ticket=ST-4-Vzea4F4INrabk9Fslbyp-cas&service=https%3A%2F%2Fexample.edu%2Fcas%2Fservices%2Fj_acegi_cas_security_check
>
2012-06-05 17:32:08,328 DEBUG
[org.jasig.cas.client.validation.Cas20ServiceTicketValidator] - <Retrieving
response from server.>
2012-06-05 17:32:08,331 ERROR [org.jasig.cas.client.util.CommonUtils] -
<Connection refused>
java.net.ConnectException: Connection refused
    at java.net.PlainSocketImpl.socketConnect(Native Method)
    at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:351)
    at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:213)
    at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:200)
    at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
    at java.net.Socket.connect(Socket.java:529)
    at
com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:564)
    at
com.sun.net.ssl.internal.ssl.BaseSSLSocketImpl.connect(BaseSSLSocketImpl.java:141)
    at sun.net.NetworkClient.doConnect(NetworkClient.java:163)

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to