Tragically, this is it:

cas
       base_url                        https://cas.clarku.edu/cas
       auth_service_name               Login
       auth_service_friendly_name                     "Clark University Login"
       non_blocking_redirection     off

The sympa manual shows these as possible configuration values:

?  auth_service_name
The authentication service name. Note that it is used as an identifier in the 
code; it should therefore be made of alphanumeric characters only, with no 
space.
?  auth_service_friendly_name
If defined, this string is proposed on the web login banner.
?  base_url
The base URL of the CAS server.
?  non_blocking_redirection on | off
Default value: on
This parameter only concerns the first access to Sympa services by a user, it 
activates or not the non blocking redirection to the related CAS server to 
check automatically if the user as been previously authenticated with this CAS 
server. The redirection to CAS is used with the CGI parameter gateway=1 that 
specifies to CAS server to always redirect the user to the original URL, but 
just check if the user is logged. If active, the SSO service is effective and 
transparent, but in case the CAS server is out of order, the access to Sympa 
services is impossible.
?  login_path (OPTIONAL)
The login service path.
?  service_validate_path (OPTIONAL)
The ticket validation service path.
?  logout_path (OPTIONAL)
The logout service path.

Thanks for looking,


-          Aaron



From: Scott Battaglia [mailto:[email protected]]
Sent: Tuesday, March 18, 2014 10:44 AM
To: [email protected]
Subject: Re: [cas-user] Possible perl-AuthCAS bug or client problem

Can you post a safe version of your perl-AuthCAS configuration? (remove any 
sensitive/private information).  I'm not familiar with the perl client but 
someone here may be able to notice where the extra : and / are coming from.

On Tue, Mar 18, 2014 at 10:10 AM, Aaron Bennett 
<[email protected]<mailto:[email protected]>> wrote:

Hi,



I apologize in advance for posting this to likely the wrong place, but I'm 
looking to rule out a server config issue here.  I'm working on enabling CAS 
support in Sympa (an open-source listserve that uses perl-AuthCAS).  Here's the 
errors I'm seeing in the cas log:





Mar 18 09:11:43 odo-665 cas: INFO  Audit trail record BEGIN

=============================================================

WHO: [email protected]<mailto:[email protected]>

WHAT: 
ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu<http://ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu>
 for http://testlists.clarku.edu/sso_login_succeeded/Login

ACTION: SERVICE_TICKET_CREATED

APPLICATION: CAS

WHEN: Tue Mar 18 09:11:43 EDT 2014

CLIENT IP ADDRESS: 140.232.0.61

SERVER IP ADDRESS: 10.6.65.22

=============================================================



Mar 18 09:11:43 odo-665 cas: ERROR ServiceTicket 
[ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu<http://ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu>]
 with service [http://testlists.clarku.edu/sso_login_succeeded/Login does not 
match supplied service 
[http://testlists.clarku.edu<http://testlists.clarku.edu>://sso_login_succeeded/Login]

Mar 18 09:11:43 odo-665 cas: INFO  Audit trail record BEGIN

=============================================================

WHO: audit:unknown

WHAT: 
ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu<http://ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu>

ACTION: SERVICE_TICKET_VALIDATE_FAILED

APPLICATION: CAS

WHEN: Tue Mar 18 09:11:43 EDT 2014

CLIENT IP ADDRESS: 140.232.1.46

SERVER IP ADDRESS: 10.6.65.22

=============================================================



Does anyone have a guess where that extra ":" is coming from in the supplied 
service ID?  I'm using perl-AuthCAS-1.5.2 on Centos 6.



-Aaron


---
Aaron Bennett
Manager of Systems Administration
Clark University ITS
W:508.793.7315<tel:508.793.7315>


--
You are currently subscribed to 
[email protected]<mailto:[email protected]> as: 
[email protected]<mailto:[email protected]>




To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


--
You are currently subscribed to 
[email protected]<mailto:[email protected]> as: 
[email protected]<mailto:[email protected]>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to