Hi all,
I've just configured a webapp using gateway feature and SAML 1.1
protocol. It seems to work fine with a simple change in web.xml:
<filter>
<filter-name>CAS Authentication Filter</filter-name>
<filter-class>org.jasig.cas.client.authentication.Saml11AuthenticationFilter</filter-class>
<init-param>
<param-name>casServerLoginUrl</param-name>
<param-value>&casFilterServer;/sso/login</param-value>
</init-param>
<init-param>
<param-name>serverName</param-name>
<param-value>&casFilterClient;</param-value>
</init-param>
* <init-param>
<param-name>gateway</param-name>
<param-value>true</param-value> </init-param> *
</filter>
So far so good. When the user is logged in it shows user info correctly.
But when the user is not logged in yet the client webapp always get
redirected including the TARGET parameter. Requests in browser follow the
following sequence:
- https://localhost:8043/portal/cms/aa (client webapp)
- 302 redirect to
https://cas.server.org:444/cas/login?TARGET=https%3A%2F%2Flocalhost%3A8043%2Fportal%2F
- 302 redirect to
https://localhost:8043/portal/cms/aa?TARGET=https%3A%2F%2Flocalhost%3A8043%2Fportal%2F
I've tried to configure AuthenticationFilter as
org.jasig.cas.client.authentication.AuthenticationFilter and
TicketValidationFilter as Cas10TicketValidationFilter. The result seems ok
since the resulting url doesn't include any parameter. However, I only get
user principal (ie, userId field) because I'm not using SAML protocol and
attributes aren't released.
How can I fix it?
Thank you very much
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user