Scott,
The cas login page stays. The cas logs say the user was authenticated;
the last line of the apache error log says "about to call CAS_validate()".
Peter
Peter,
What URL are they redirected back to?
-Scott
--- Begin Message ---
Hi,
I am using Apache 2.0.61. I have set up mod_cas and I have installed the
cas server on tomcat 6.0 port 8080. All signs show that everything is
okay; when a cas-protected url is entered user is redirected to cas
server url and presented with login page. User logs in, is authenticated
but is not directed back to original url. I have attached my apache
config file, .htaccess file, cas log and apache error log files.
Is there any help out there?
Thanks
Peter
_*httpd.conf*_
ServerRoot "/usr/local/apache20"
#LockFile logs/accept.lock
#ScoreBoardFile logs/apache_runtime_status
PidFile logs/httpd.pid
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15
StartServers 5
MinSpareServers 5
MaxSpareServers 10
MaxClients 150
MaxRequestsPerChild 0
StartServers 2
MaxClients 150
MinSpareThreads 25
MaxSpareThreads 75
ThreadsPerChild 25
MaxRequestsPerChild 0
NumServers 5
StartThreads 5
MinSpareThreads 5
MaxSpareThreads 10
MaxThreadsPerChild 20
MaxRequestsPerChild 0
ThreadsPerChild 250
MaxRequestsPerChild 0
StartThreads 10
MaxClients 50
MaxRequestsPerThread 10000
ThreadStackSize 65536
StartThreads 250
MinSpareThreads 25
MaxSpareThreads 250
MaxThreads 1000
MaxRequestsPerChild 0
MaxMemFree 100
StArtServers 2
MinSpareThreads 5
MaxSpareThreads 10
MaxRequestsPerChild 0
Listen 80
LoadModule cas_module /usr/local/apache20/modules/mod_cas.so
LoadModule perl_module modules/mod_perl.so
#LoadModule jk_module modules/mod_jk.so
User nobody
Group #-1
ServerAdmin [EMAIL PROTECTED]
#ServerName www.example.com:80
ServerName 192.168.1.40
UseCanonicalName Off
DocumentRoot "/usr/local/apache20/htdocs"
Options FollowSymLinks
AllowOverride All
Options Indexes FollowSymLinks
AllowOverride All
Order allow,deny
Allow from all
DirectoryIndex index.html index.html.var
AccessFileName .htaccess
Order allow,deny
Deny from all
TypesConfig conf/mime.types
DefaultType text/plain
MIMEMagicFile conf/magic
HostnameLookups Off
ErrorLog logs/error_log
LogLevel warn
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog logs/access_log common
ServerTokens Full
ServerSignature On
Alias /icons/ "/usr/local/apache20/icons/"
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
AliasMatch ^/manual(?:/(?:de|en|es|fr|ja|ko|ru))?(/.*)?$
"/usr/local/apache20/manual$1"
Options Indexes
AllowOverride None
Order allow,deny
Allow from all
SetHandler type-map
SetEnvIf Request_URI ^/manual/(de|en|es|fr|ja|ko|ru)/ prefer-language=$1
RedirectMatch 301 ^/manual(?:/(de|en|es|fr|ja|ko|ru)){2,}(/.*)?$ /manual/$1$2
ScriptAlias /cgi-bin/ "/usr/local/apache20/cgi-bin/"
#
# Additional to mod_cgid.c settings, mod_cgid has Scriptsock
# for setting UNIX socket for communicating with cgid.
#
#Scriptsock logs/cgisock
AllowOverride None
Options None
Order allow,deny
Allow from all
IndexOptions FancyIndexing VersionSort
AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
AddIconByType (TXT,/icons/text.gif) text/*
AddIconByType (IMG,/icons/image2.gif) image/*
AddIconByType (SND,/icons/sound2.gif) audio/*
AddIconByType (VID,/icons/movie.gif) video/*
AddIcon /icons/binary.gif .bin .exe
AddIcon /icons/binhex.gif .hqx
AddIcon /icons/tar.gif .tar
AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
AddIcon /icons/a.gif .ps .ai .eps
AddIcon /icons/layout.gif .html .shtml .htm .pdf
AddIcon /icons/text.gif .txt
AddIcon /icons/c.gif .c
AddIcon /icons/p.gif .pl .py
AddIcon /icons/f.gif .for
AddIcon /icons/dvi.gif .dvi
AddIcon /icons/uuencoded.gif .uu
AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
AddIcon /icons/tex.gif .tex
AddIcon /icons/bomb.gif core
AddIcon /icons/back.gif ..
AddIcon /icons/hand.right.gif README
AddIcon /icons/folder.gif ^^DIRECTORY^^
AddIcon /icons/blank.gif ^^BLANKICON^^
DefaultIcon /icons/unknown.gif
ReadmeName README.html
HeaderName HEADER.html
IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
AddLanguage ca .ca
AddLanguage cs .cz .cs
AddLanguage da .dk
AddLanguage de .de
AddLanguage el .el
AddLanguage en .en
AddLanguage eo .eo
AddLanguage es .es
AddLanguage et .et
AddLanguage fr .fr
AddLanguage he .he
AddLanguage hr .hr
AddLanguage it .it
AddLanguage ja .ja
AddLanguage ko .ko
AddLanguage ltz .ltz
AddLanguage nl .nl
AddLanguage nn .nn
AddLanguage no .no
AddLanguage pl .po
AddLanguage pt .pt
AddLanguage pt-BR .pt-br
AddLanguage ru .ru
AddLanguage sv .sv
AddLanguage zh-CN .zh-cn
AddLanguage zh-TW .zh-tw
ForceLanguagePriority Prefer Fallback
AddCharset ISO-8859-1 .iso8859-1 .latin1
AddCharset ISO-8859-2 .iso8859-2 .latin2 .cen
AddCharset ISO-8859-3 .iso8859-3 .latin3
AddCharset ISO-8859-4 .iso8859-4 .latin4
AddCharset ISO-8859-5 .iso8859-5 .latin5 .cyr .iso-ru
AddCharset ISO-8859-6 .iso8859-6 .latin6 .arb
AddCharset ISO-8859-7 .iso8859-7 .latin7 .grk
AddCharset ISO-8859-8 .iso8859-8 .latin8 .heb
AddCharset ISO-8859-9 .iso8859-9 .latin9 .trk
AddCharset ISO-2022-JP .iso2022-jp .jis
AddCharset ISO-2022-KR .iso2022-kr .kis
AddCharset ISO-2022-CN .iso2022-cn .cis
AddCharset Big5 .Big5 .big5
# For russian, more than one charset is used (depends on client, mostly):
AddCharset WINDOWS-1251 .cp-1251 .win-1251
AddCharset CP866 .cp866
AddCharset KOI8-r .koi8-r .koi8-ru
AddCharset KOI8-ru .koi8-uk .ua
AddCharset ISO-10646-UCS-2 .ucs2
AddCharset ISO-10646-UCS-4 .ucs4
AddCharset UTF-8 .utf8
AddCharset GB2312 .gb2312 .gb
AddCharset utf-7 .utf7
AddCharset utf-8 .utf8
AddCharset big5 .big5 .b5
AddCharset EUC-TW .euc-tw
AddCharset EUC-JP .euc-jp
AddCharset EUC-KR .euc-kr
AddCharset shift_jis .sjis
AddType application/x-compress .Z
AddType application/x-gzip .gz .tgz
AddHandler type-map var
BrowserMatch "Mozilla/2" nokeepalive
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
BrowserMatch "RealPlayer 4\.0" force-response-1.0
BrowserMatch "Java/1\.0" force-response-1.0
BrowserMatch "JDK/1\.0" force-response-1.0
BrowserMatch "Microsoft Data Access Internet Publishing Provider"
redirect-carefully
BrowserMatch "MS FrontPage" redirect-carefully
BrowserMatch "^WebDrive" redirect-carefully
BrowserMatch "^WebDAVFS/1.[0123]" redirect-carefully
BrowserMatch "^gnome-vfs" redirect-carefully
BrowserMatch "^XML Spy" redirect-carefully
BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully
Include conf/ssl.conf
CASLocalCacheInsecure On
CASLocalCacheFile /tmp/CAScache
CASLoginURL http://192.168.1.40:8080/cas/login
CASHost 192.168.1.40
CASPort 8080
CASValidate /cas/validate
CASDebug on
_*.htaccess*_
AuthType CAS
AuthName "My CAS Test Site"
Require valid-user
_*cas log*_
2007-11-19 19:22:17,606 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] -
AuthenticationHandler:
org.jasig.cas.authentication.handler.support.SimpleTestUsernamePasswordAuthenticationHandler
successfully authenticated the user which provided the following credentials:
peter.aganyo
2007-11-19 19:22:17,620 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] -
Granted service ticket [ST-3-oryKtRQOg1QQzrLGbQccIjwMI7sW0iIFS3N-20] for
service [http://192.168.1.40/cas] for user [peter.aganyo]
_*apache error log*_
[Mon Nov 19 19:21:21 2007] [notice] SIGHUP received. Attempting to restart
[Mon Nov 19 19:21:22 2007] [notice] in init_child()
[Mon Nov 19 19:21:22 2007] [notice] -> c is not null
[Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
[Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
[Mon Nov 19 19:21:22 2007] [notice] in init_child()
[Mon Nov 19 19:21:22 2007] [notice] -> c is not null
[Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
[Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
[Mon Nov 19 19:21:22 2007] [notice] in init_child()
[Mon Nov 19 19:21:22 2007] [notice] -> c is not null
[Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
[Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
[Mon Nov 19 19:21:22 2007] [notice] in init_child()
[Mon Nov 19 19:21:22 2007] [notice] -> c is not null
[Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
[Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
[Mon Nov 19 19:21:22 2007] [notice] in init_child()
[Mon Nov 19 19:21:22 2007] [notice] -> c is not null
[Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
[Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
[Mon Nov 19 19:21:22 2007] [notice] Apache/2.0.61 (Unix) mod_ssl/2.0.61
/usr/local/apache20/lib/perl mod_perl/2.0.3 Perl/v5.8.8 configured -- resuming
normal operations
[Mon Nov 19 19:22:01 2007] [notice] in do_cas()
[Mon Nov 19 19:22:01 2007] [notice] in check_individual_cookie()
[Mon Nov 19 19:22:01 2007] [notice] portstr:
[Mon Nov 19 19:22:01 2007] [notice] 80
[Mon Nov 19 19:22:01 2007] [notice] \n
[Mon Nov 19 19:22:01 2007] [notice] service = 'http://192.168.1.40/cas';
ticket = '(null)'
[Mon Nov 19 19:22:01 2007] [notice] about to call CAS_validate()
[Mon Nov 19 19:22:01 2007] [notice] in init_child()
[Mon Nov 19 19:22:01 2007] [notice] -> c is not null
[Mon Nov 19 19:22:01 2007] [notice] -> dereferenced c
[Mon Nov 19 19:22:01 2007] [notice] -> init_child() done
[Mon Nov 19 19:22:17 2007] [notice] in do_cas()
[Mon Nov 19 19:22:17 2007] [notice] in check_individual_cookie()
[Mon Nov 19 19:22:17 2007] [notice] portstr:
[Mon Nov 19 19:22:17 2007] [notice] 80
[Mon Nov 19 19:22:17 2007] [notice] \n
[Mon Nov 19 19:22:17 2007] [notice] service = 'http://192.168.1.40/cas';
ticket = 'ST-3-oryKtRQOg1QQzrLGbQccIjwMI7sW0iIFS3N-20'
[Mon Nov 19 19:22:17 2007] [notice] about to call CAS_validate()
Scott Battaglia wrote:
Peter,
What version of Apache are you using? We also offer:
mod_auth_cas: http://www.ja-sig.org/wiki/display/CASC/mod_auth_cas
mod_cas: http://www.ja-sig.org/wiki/display/CASC/MOD_CAS
If you need to use AuthCAS, you can try posting your configuration
details here to see if anyone sees an discrepancies.
Thanks
-Scott
On Nov 18, 2007 12:28 PM, Peter K AGANYO <[EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>> wrote:
Hi,
I am trying to set up Apache::AuthCAS and I seem to have run out
of options. When I thought that it is now working all I get is a
blank page on the CAS-protected folder (on my browser), no
redirection and this error in the error log: "failed to resolve
handler Apache::AuthCAS".
Has anyone successfully setup AuthCAS? Please help me.
Thanks
Peter
_______________________________________________
Yale CAS mailing list
[email protected] <mailto:[email protected]>
http://tp.its.yale.edu/mailman/listinfo/cas
<http://tp.its.yale.edu/mailman/listinfo/cas>
--
-Scott Battaglia
LinkedIn: http://www.linkedin.com/in/scottbattaglia
--- End Message ---
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas
