Got a quick update, hopefully this helps someone out in the future.
The log4j configuration I set up (see my original post) does not function with
cas-client-3.3.1.jar. I switched to cas-client-3.2.1.jar and logging started
working with no further changes made.
Anyway, the CAS client logs confirmed my CAS server and client were indeed
talking with one another and creating/validating STs.
It turns out the root problem here was where Tomcat chose to write its session
cookie ("/p2pd"). Cognos is a bit unusual in that a web browser accesses it
indirectly via a CGI gateway, so I had to tell Tomcat to write session cookies
at "/" in order for the CAS authentication to be accepted.
-Nick
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user