I find it much easier to debug problems in the CAS protocol with a trace of the
http traffic from the client's point of view. Could you provide such a trace?
Also, have you looked at this:
https://wiki.jasig.org/display/CASUM/RESTful+API
It would spare you from having to screen scrape the LT.
david
From: Joey Daughtery [mailto:[email protected]]
Sent: Wednesday, November 21, 2012 2:16 PM
To: [email protected]
Subject: [cas-user] service redirect
All
When I add the CAS Authentication Filter configuration to my web.xml, the cas
server after I login manually, redirects me to my endpoint with the Service
Ticket.
However, I need to be able to perform all the cas authentication
programmatically.
I am able to programmatically obtain the lt value, then login and see the TGT
cookie. I then hit the login url again with userName, password, and gate set
to true. I do see in the logs:
2012-11-21 18:53:50,276 INFO
[com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail
record BEGIN
=============================================================
WHO: joe.daughtery.usa
WHAT:
ST-16-idbOa2aNbA43HXbTSiVX-owf.dev.wisrd.org<http://ST-16-idbOa2aNbA43HXbTSiVX-owf.dev.wisrd.org>
for http://192.168....:8080/iHarvest/rest/orion/users
ACTION: SERVICE_TICKET_CREATED
APPLICATION: CAS
WHEN: Wed Nov 21 18:53:50 UTC 2012
CLIENT IP ADDRESS: 208.101.....
SERVER IP ADDRESS: 10.29.28.43
=============================================================
However, the redirect never hits my endpoint running on my local machine.
Note that when I wrap the servlet container with the CAS Authentication Filter
configuration, I do see the same "CLIENT_IP ADDRESS" and service url printed
out in the logs as above.
So, why is CAS able to redirect when I wrap the servlet container with CAS
Authentication Filter configuration, and not able to do so when I call it
programmatically?
Note that when I wrap the servlet container, i pass in casServerLoginUrl and
serverName parameters where serverName is set with the 192.168...ip address.
Thanks
Joe
--
You are currently subscribed to
[email protected]<mailto:[email protected]> as:
[email protected]<mailto:[email protected]>
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
