As Arnaud said, you need to be running CAS over HTTPS in order to receive the SSO cookie (or configure CAS to send cookies back over http).
-Scott On 4/1/07, Arnaud Lesueur <[EMAIL PROTECTED]> wrote:
Hi, Are you sure you have a valid SSO Cookie ? By default, CAS 3 is configured to set SSO Cookie only over HTTPS and you are working in HTTP here. To change this, you will have to modify the configuration of the ticketGrantingTicketCookieGenerator bean in WEB-INF/cas-servlet.xml. You should set cookieSecure="false" instead of cookieSecure="true". -- Arnaud Lesueur On 4/1/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > I have a problem with gateway mode: > -I first send a request to http://mycasserver:8080/cas/login?gateway=true&service=http%3A%2F%2Flocalhost%2Ftest > > -I'm redirected to http://locahost/test *WITHOUT* a ticket, that's fine, > I'm not authenticated yet > -I send a new request to CAS without gateway > http://mycasserver:8080/cas/login?service=http%3A%2F%2Flocalhost%2Ftest > -I'm redirected to CAS login, I enter username and password and click ok > -I'm redirected to my dummy app *WITH* a ticket http://locahost/test?ticket=ST. > .. > -I validate the ticket http://mycasserver:8080/cas/serviceValidate?service=http%3A%2F%2Flocalhost%2Ftest&ticket=ST. > .. > -CAS returns username > > Then, I want to authenticate for a second application, I have a SSO > ticket already, so I expect not having to login again: > > -I send a request to > http://mycasserver:8080/cas/login?gateway=true&service=http%3A%2F%2Flocalhost%2Fother_test > -I'm redirected to http://locahost/other_test *WITHOUT* a ticket > > What's the problem? I'm not supposed to receive a valid ticket if I > already connected to CAS? > > Thank you for any help or clarification. > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
-- -Scott Battaglia LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
