If you crank up the log levels on Tomcat, you should see an HTTP POST in the access logs. That would indicate the credentials are delivered successfully to the CAS application.
Do you see any evidence in your LDAP logs that an LDAP connection was dropped mid-stream? Thanks, Carl Waldbieser Lafayette College ----- Original Message ----- From: "Juan Quintanilla" <[email protected]> To: [email protected] Cc: "Joseph Wong" <[email protected]> Sent: Friday, July 10, 2015 10:54:22 AM Subject: [cas-user] CAS SSO User stuck on Login Page Hi, I reached out the list earlier in the week regarding some issues we were having with some users remaining on the CAS Login page after being redirected by the client application. The user when they enter good credentials are presented with the login page again, if they enter bad credentials no error message is displayed on the login page. The transaction is not even recorded on the catalina.out, or the cas.log. The environment is running CAS 3.6.0 on tomcat 8 with ldap backend for authentication and Oracle Db for ticketing and the web servers are being load balanced on an F5. The issue is sporadic so its not consistent but once the user closes their browser and tries to login again they can access the application. My question, if a connection cannot be pulled from the ldap connection pool would an error be thrown? Our guess is that when the user hits the login page and enters their credentials the connection from the CAS web server on the F5 to the Ldap vip address which is on a different load balancer is being dropped or reset. What debugging on CAS could I enable to see whether that communication login info is even being received on the CAS application, or if the CAS application is seeing when the user enters the information on the login page. ___________________ Juan Quintanilla UTS - Enterprise Group 305-348-6573 [email protected]<mailto:[email protected]> -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
