oups left IPs sorry...
2013/5/16 Jérôme Rautureau <[email protected]> > Juste happened now : > > On click on add : > > GET add.html 302 Moved Temporarily sso-int.xxxxxxxxx.fr 0 B > 87.98.148.90:443 69ms > GET login?service=https%3A%...cegi_cas_security_check 302 Moved > Temporarily sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 81ms > GET j_acegi_cas_security_ch...int.xxxxxx.fr 302 Moved Temporarily > sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 94ms > GET manage.html 200 OK sso-int.xxxxxxx.fr 1,8 KB 87.98.148.90:443 83ms > > 4 requests > > > 2013/5/16 Jérôme Rautureau <[email protected]> > >> To complete, i am in >> >> Tomcat 7.0.39 and 6.0.36 >> Apache 2.2.9 + page speed >> mod jk >> CAS 3.5.2 + remember me + jpa ticket registry + ldap authentication + >> PersonAttributes >> >> workers.properties : >> >> worker.cas.port=8010 >> worker.cas.host=localhost >> worker.cas.type=ajp13 >> worker.cas.socket_keepalive=1 >> worker.cas.socket_timeout=3 >> worker.cas.retries=2 >> worker.cas.reply_timeout=40000 >> worker.cas.recover_time=15 >> >> workers.conf >> JkWorkersFile /etc/apache2/workers.properties >> JkLogFile /var/log/apache2/mod_jk.log >> JkShmFile /var/log/apache2/mod_jk.shm >> JkLogLevel warn >> JkOptions +FlushHeader +FlushPackets +ForwardKeySize +ForwardURICompat >> -ForwardDirectories >> >> The same configuration was used on a cas 3.4.8 installation and there was >> no such issue... >> >> I have an other configuration with >> >> mod-proxy >> >> ProxyPass / ajp://localhost:8009/ >> ProxyPassReverse / ajp://localhost:8009/ >> >> and the same issue >> >> I have 4 serveurs with this issue. >> >> I have deactivated page speed for the test but the issu remains present. >> >> Thanks in advance >> >> >> >> 2013/5/16 Jérôme Rautureau <[email protected]> >> >>> Hi everybody, >>> >>> I have exactly the same issue. >>> >>> The only use case that comes with a fonctionnal UI is when I'am totally >>> lopout from CAS and when i'm doing a full login process. The other times >>> (with the remember me checkbox checked) the problem can appear (it's not >>> every time...) >>> >>> The problem is occuring with chrome and firefox (last version both), i >>> have not javascript errors in javascript console. >>> >>> And yes i'm loosing the jsession id as soon as i am clicking on a link >>> (edit or a add a new service). It's very strange (so i'm going directly in >>> the database to do my changes...). With firebug i have seen what the >>> jsessionid has changed between requests... >>> >>> >>> 2013/5/16 KaTeLmE <[email protected]> >>> >>>> The Apache Server can communicate with Tomcat using: >>>> - mod_proxy: >>>> http://stackoverflow.com/questions/956361/apache-tomcat-using-mod-proxy-instead-of-ajp >>>> http://tomcat.apache.org/tomcat-6.0-doc/proxy-howto.html >>>> - mod_proxy_ajp: >>>> http://www.zeitoun.net/articles/configure-mod_proxy_ajp-with-tomcat/start >>>> - mod_jk: http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html >>>> >>>> If, due a bad config, you not transfer the cookies from Apache to >>>> Tomcat (also Tomcat to Apache) the session cookie is lost and then a new >>>> Tomcat session is created in the next request. >>>> >>>> Can you test the CAS back-end without Apache Server (leave only the >>>> Tomcat) to avoid this behaviour? >>>> >>>> >>>> >>>> 2013/5/15 Whittaker, Geoffrey <[email protected]> >>>> >>>> I’m not sure what you mean. Can you explain the reverse proxy? I’m >>>>> not using a separate apache instance, but I assume since tomcat’s written >>>>> by the ASF that the underlying web server is Apache based. **** >>>>> >>>>> ** ** >>>>> >>>>> Does anyone else have any ideas what’s causing this? It’s becoming >>>>> incredibly frustrating. I ended up having to add a service directly to >>>>> the >>>>> database because I couldn’t get it to save after 6 attempts using the web >>>>> interface.**** >>>>> >>>>> ** ** >>>>> >>>>> Geoff **** >>>>> >>>>> ** ** >>>>> >>>>> *From:* KaTeLmE [mailto:[email protected]] >>>>> *Sent:* Tuesday, May 7, 2013 2:45 PM >>>>> >>>>> *To:* [email protected] >>>>> *Subject:* Re: [cas-user] Changes not saving in Services Managment**** >>>>> >>>>> ** ** >>>>> >>>>> Seems java session loosing. Have you noted if the JSESSIONID cookie >>>>> changes during that intermittent requests?**** >>>>> >>>>> Jerome, in version 3.5.2 the TerminateWebSessionListener introduced >>>>> and proposed by you in 3.5.1 swf cas config was removed? Could be related? >>>>> >>>>> I have a lazy idea how I solved that, but I can remember I disable >>>>> that feature after reading some issues.**** >>>>> >>>>> Geo, as I see u attach Apache logs... could be a bad reverse proxy >>>>> config between Apache + Tomcat??**** >>>>> >>>>> ** ** >>>>> >>>>> 2013/5/7 Whittaker, Geoffrey <[email protected]>**** >>>>> >>>>> I did some googling and dug through some of the tomcat logs looking >>>>> for the PermGen issue. I don't see anything to indicate that's the >>>>> problem. But, it was definitely something I hadn't thought of. Thanks! >>>>> >>>>> Asside from not finding anything in the logs, from what I read, that >>>>> error primarily occurs when you're deploying lots of apps or apps with >>>>> lots >>>>> of classes. I don't know if CAS would qualify as that, but I do know that >>>>> we're not cycling out war files. Also, I do a service restart on Tomcat >>>>> anytime I replace the war file to avoid any issues. >>>>> >>>>> >>>>> Jérôme, >>>>> >>>>> Which version of CAS do you use ? 3.5.2 >>>>> Do you see a round-trip to the CAS server (HTTP 302 to /cas/login) >>>>> when you try to save an update ? Yes, I am seeing HTTP 302 in the logs >>>>> when this happens, but I don't see "- Found" like I'm used to seeing. >>>>> Then >>>>> I get several web objects with status code 304. >>>>> >>>>> For example: >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>> /services/j_acegi_cas_security_check?ticket=<ticket data> HTTP/1.1" 302 - >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>> /services/manage.html HTTP/1.1" 200 9601 >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>> /css/services/cas.css HTTP/1.1" 304 - >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/cas.js >>>>> HTTP/1.1" 304 - >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/MyInfusion.js >>>>> HTTP/1.1" 304 - >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/services.js >>>>> HTTP/1.1" 304 - >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>> /images/services/true.gif HTTP/1.1" 304 - >>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>> /images/services/false.gif HTTP/1.1" 304 - >>>>> >>>>> >>>>> Geoff**** >>>>> >>>>> >>>>> -----Original Message----- >>>>> From: Alberto Cabello Sanchez [mailto:[email protected]] >>>>> Sent: Monday, May 6, 2013 4:27 PM >>>>> To: [email protected] >>>>> Subject: Re: [cas-user] Changes not saving in Services Managment >>>>> >>>>> > I'm having an intermittent problem with Tomcat/CAS were sometimes >>>>> I'll >>>>> > click a link or button, etc and the page will flash like it's doing a >>>>> > GET/POST and then nothing happens. >>>>> > >>>>> > For instance: I'm trying to make a change to service in the Services >>>>> > Manager and I click save, it does it's post and redirects me to >>>>> > ManageServices main page, but the change didn't save. Often, I'll >>>>> > click edit to go into one and the browser flashes like it's about to >>>>> go the next page, but it just leaves me where I started. >>>>> > >>>>> > Is this a caching problem with the Tomcat server or is this a CAS >>>>> > problem... Any ideas? >>>>> >>>>> Hi, Geoff. >>>>> >>>>> I ran into that same trouble while setting up CAS for the first time. >>>>> I think it has to do with the infamous Tomcat "PermGen space error", but I >>>>> didn't wrote it down :( >>>>> >>>>> Please check Tomcat log files and look for some clue. >>>>> >>>>> > Geoff >>>>> > >>>>> > -- >>>>> > You are currently subscribed to [email protected] as: >>>>> > [email protected] To unsubscribe, change settings or access archives, >>>>> > see http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>> >>>>> >>>>> >>>>> --**** >>>>> >>>>> You are currently subscribed to [email protected] as: >>>>> [email protected] To unsubscribe, change settings or access >>>>> archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>> >>>>> >>>>> -- >>>>> You are currently subscribed to [email protected] as: >>>>> [email protected] >>>>> To unsubscribe, change settings or access archives, see >>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>> >>>>> ** ** >>>>> >>>>> -- >>>>> You are currently subscribed to [email protected] as: >>>>> [email protected] >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> To unsubscribe, change settings or access archives, see >>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>> >>>>> -- >>>>> You are currently subscribed to [email protected] as: >>>>> [email protected] >>>>> To unsubscribe, change settings or access archives, see >>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>> >>>>> >>>> -- >>>> You are currently subscribed to [email protected] as: >>>> [email protected] >>>> To unsubscribe, change settings or access archives, see >>>> http://www.ja-sig.org/wiki/display/JSG/cas-user >>>> >>>> >>> >>> >>> -- >>> Jérôme Rautureau >>> Développeur Systèmes - CdA La Rochelle >>> >> >> >> >> -- >> Jérôme Rautureau >> Développeur Systèmes - CdA La Rochelle >> > > > > -- > Jérôme Rautureau > Développeur Systèmes - CdA La Rochelle > -- Jérôme Rautureau Développeur Systèmes - CdA La Rochelle -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
