I'm not familiar with the Apache module at all. Unless anyone else here is
(I don't know how many people use that one vs. some of the newer or branched
ones), you may want to add some debugging statements into the code and
recompile it.
-Scott
On Nov 19, 2007 8:30 PM, Peter K AGANYO <[EMAIL PROTECTED]> wrote:
> Scott,
>
> The cas login page stays. The cas logs say the user was authenticated; the
> last line of the apache error log says "about to call CAS_validate()".
>
> Peter
>
> Peter,
>
> What URL are they redirected back to?
>
> -Scott
>
>
>
>
> Hi,
>
> I am using Apache 2.0.61. I have set up mod_cas and I have installed the
> cas server on tomcat 6.0 port 8080. All signs show that everything is
> okay; when a cas-protected url is entered user is redirected to cas server
> url and presented with login page. User logs in, is authenticated but is not
> directed back to original url. I have attached my apache config file,
> .htaccess file, cas log and apache error log files.
>
> Is there any help out there?
>
> Thanks
> Peter
>
> *httpd.conf*
>
> ServerRoot "/usr/local/apache20"
> #LockFile logs/accept.lock
> #ScoreBoardFile logs/apache_runtime_status
>
> PidFile logs/httpd.pid
>
> Timeout 300
>
> KeepAlive On
>
> MaxKeepAliveRequests 100
>
> KeepAliveTimeout 15
>
>
> StartServers 5
> MinSpareServers 5
> MaxSpareServers 10
> MaxClients 150
> MaxRequestsPerChild 0
>
>
>
> StartServers 2
> MaxClients 150
> MinSpareThreads 25
> MaxSpareThreads 75
> ThreadsPerChild 25
> MaxRequestsPerChild 0
>
>
>
> NumServers 5
> StartThreads 5
> MinSpareThreads 5
> MaxSpareThreads 10
> MaxThreadsPerChild 20
> MaxRequestsPerChild 0
>
>
>
> ThreadsPerChild 250
> MaxRequestsPerChild 0
>
>
>
> StartThreads 10
> MaxClients 50
> MaxRequestsPerThread 10000
>
>
>
> ThreadStackSize 65536
> StartThreads 250
> MinSpareThreads 25
> MaxSpareThreads 250
> MaxThreads 1000
> MaxRequestsPerChild 0
> MaxMemFree 100
>
>
>
> StArtServers 2
> MinSpareThreads 5
> MaxSpareThreads 10
> MaxRequestsPerChild 0
>
>
> Listen 80
> LoadModule cas_module /usr/local/apache20/modules/mod_cas.so
> LoadModule perl_module modules/mod_perl.so
> #LoadModule jk_module modules/mod_jk.so
>
>
>
>
> User nobody
> Group #-1
>
>
>
> ServerAdmin [EMAIL PROTECTED]
>
> #ServerName www.example.com:80
>
> ServerName 192.168.1.40
>
> UseCanonicalName Off
>
> DocumentRoot "/usr/local/apache20/htdocs"
>
>
> Options FollowSymLinks
> AllowOverride All
>
>
>
>
> Options Indexes FollowSymLinks
>
> AllowOverride All
>
> Order allow,deny
> Allow from all
>
>
>
>
> DirectoryIndex index.html index.html.var
>
> AccessFileName .htaccess
>
>
> Order allow,deny
> Deny from all
>
>
> TypesConfig conf/mime.types
>
> DefaultType text/plain
>
>
> MIMEMagicFile conf/magic
>
>
> HostnameLookups Off
>
>
> ErrorLog logs/error_log
>
> LogLevel warn
>
> LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
> combined
> LogFormat "%h %l %u %t \"%r\" %>s %b" common
> LogFormat "%{Referer}i -> %U" referer
> LogFormat "%{User-agent}i" agent
>
> CustomLog logs/access_log common
>
> ServerTokens Full
>
> ServerSignature On
>
> Alias /icons/ "/usr/local/apache20/icons/"
>
>
> Options Indexes MultiViews
> AllowOverride None
> Order allow,deny
> Allow from all
>
>
> AliasMatch ^/manual(?:/(?:de|en|es|fr|ja|ko|ru))?(/.*)?$
> "/usr/local/apache20/manual$1"
>
>
> Options Indexes
> AllowOverride None
> Order allow,deny
> Allow from all
>
>
> SetHandler type-map
>
>
> SetEnvIf Request_URI ^/manual/(de|en|es|fr|ja|ko|ru)/ prefer-language=$1
> RedirectMatch 301 ^/manual(?:/(de|en|es|fr|ja|ko|ru)){2,}(/.*)?$
> /manual/$1$2
>
>
> ScriptAlias /cgi-bin/ "/usr/local/apache20/cgi-bin/"
>
>
> #
> # Additional to mod_cgid.c settings, mod_cgid has Scriptsock
> # for setting UNIX socket for communicating with cgid.
> #
> #Scriptsock logs/cgisock
>
>
>
> AllowOverride None
> Options None
> Order allow,deny
> Allow from all
>
>
>
> IndexOptions FancyIndexing VersionSort
>
> AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
>
> AddIconByType (TXT,/icons/text.gif) text/*
> AddIconByType (IMG,/icons/image2.gif) image/*
> AddIconByType (SND,/icons/sound2.gif) audio/*
> AddIconByType (VID,/icons/movie.gif) video/*
>
> AddIcon /icons/binary.gif .bin .exe
> AddIcon /icons/binhex.gif .hqx
> AddIcon /icons/tar.gif .tar
> AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
> AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
> AddIcon /icons/a.gif .ps .ai .eps
> AddIcon /icons/layout.gif .html .shtml .htm .pdf
> AddIcon /icons/text.gif .txt
> AddIcon /icons/c.gif .c
> AddIcon /icons/p.gif .pl .py
> AddIcon /icons/f.gif .for
> AddIcon /icons/dvi.gif .dvi
> AddIcon /icons/uuencoded.gif .uu
> AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
> AddIcon /icons/tex.gif .tex
> AddIcon /icons/bomb.gif core
>
> AddIcon /icons/back.gif ..
> AddIcon /icons/hand.right.gif README
> AddIcon /icons/folder.gif ^^DIRECTORY^^
> AddIcon /icons/blank.gif ^^BLANKICON^^
>
> DefaultIcon /icons/unknown.gif
>
> ReadmeName README.html
> HeaderName HEADER.html
>
> IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
>
> AddLanguage ca .ca
> AddLanguage cs .cz .cs
> AddLanguage da .dk
> AddLanguage de .de
> AddLanguage el .el
> AddLanguage en .en
> AddLanguage eo .eo
> AddLanguage es .es
> AddLanguage et .et
> AddLanguage fr .fr
> AddLanguage he .he
> AddLanguage hr .hr
> AddLanguage it .it
> AddLanguage ja .ja
> AddLanguage ko .ko
> AddLanguage ltz .ltz
> AddLanguage nl .nl
> AddLanguage nn .nn
> AddLanguage no .no
> AddLanguage pl .po
> AddLanguage pt .pt
> AddLanguage pt-BR .pt-br
> AddLanguage ru .ru
> AddLanguage sv .sv
> AddLanguage zh-CN .zh-cn
> AddLanguage zh-TW .zh-tw
>
> ForceLanguagePriority Prefer Fallback
>
> AddCharset ISO-8859-1 .iso8859-1 .latin1
> AddCharset ISO-8859-2 .iso8859-2 .latin2 .cen
> AddCharset ISO-8859-3 .iso8859-3 .latin3
> AddCharset ISO-8859-4 .iso8859-4 .latin4
> AddCharset ISO-8859-5 .iso8859-5 .latin5 .cyr .iso-ru
> AddCharset ISO-8859-6 .iso8859-6 .latin6 .arb
> AddCharset ISO-8859-7 .iso8859-7 .latin7 .grk
> AddCharset ISO-8859-8 .iso8859-8 .latin8 .heb
> AddCharset ISO-8859-9 .iso8859-9 .latin9 .trk
> AddCharset ISO-2022-JP .iso2022-jp .jis
> AddCharset ISO-2022-KR .iso2022-kr .kis
> AddCharset ISO-2022-CN .iso2022-cn .cis
> AddCharset Big5 .Big5 .big5
> # For russian, more than one charset is used (depends on client, mostly):
> AddCharset WINDOWS-1251 .cp-1251 .win-1251
> AddCharset CP866 .cp866
> AddCharset KOI8-r .koi8-r .koi8-ru
> AddCharset KOI8-ru .koi8-uk .ua
> AddCharset ISO-10646-UCS-2 .ucs2
> AddCharset ISO-10646-UCS-4 .ucs4
> AddCharset UTF-8 .utf8
>
> AddCharset GB2312 .gb2312 .gb
> AddCharset utf-7 .utf7
> AddCharset utf-8 .utf8
> AddCharset big5 .big5 .b5
> AddCharset EUC-TW .euc-tw
> AddCharset EUC-JP .euc-jp
> AddCharset EUC-KR .euc-kr
> AddCharset shift_jis .sjis
>
> AddType application/x-compress .Z
> AddType application/x-gzip .gz .tgz
>
> AddHandler type-map var
>
> BrowserMatch "Mozilla/2" nokeepalive
> BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
> BrowserMatch "RealPlayer 4\.0" force-response-1.0
> BrowserMatch "Java/1\.0" force-response-1.0
> BrowserMatch "JDK/1\.0" force-response-1.0
>
> BrowserMatch "Microsoft Data Access Internet Publishing Provider"
> redirect-carefully
> BrowserMatch "MS FrontPage" redirect-carefully
> BrowserMatch "^WebDrive" redirect-carefully
> BrowserMatch "^WebDAVFS/1.[0123]" redirect-carefully
> BrowserMatch "^gnome-vfs" redirect-carefully
> BrowserMatch "^XML Spy" redirect-carefully
> BrowserMatch "^Dreamweaver-WebDAV-SCM1" redirect-carefully
>
>
> Include conf/ssl.conf
>
>
>
> CASLocalCacheInsecure On
> CASLocalCacheFile /tmp/CAScache
> CASLoginURL http://192.168.1.40:8080/cas/login
> CASHost 192.168.1.40
> CASPort 8080
> CASValidate /cas/validate
> CASDebug on
>
> *.htaccess*
>
> AuthType CAS
> AuthName "My CAS Test Site"
> Require valid-user
>
> *cas log*
>
> 2007-11-19 19:22:17,606 INFO
> [org.jasig.cas.authentication.AuthenticationManagerImpl] -
> AuthenticationHandler:
> org.jasig.cas.authentication.handler.support.SimpleTestUsernamePasswordAuthenticationHandler
> successfully authenticated the user which provided the following
> credentials: peter.aganyo
> 2007-11-19 19:22:17,620 INFO [org.jasig.cas.CentralAuthenticationServiceImpl]
> - Granted service ticket [ST-3-oryKtRQOg1QQzrLGbQccIjwMI7sW0iIFS3N-20] for
> service [http://192.168.1.40/cas] for user [peter.aganyo]
>
> *apache error log*
>
> [Mon Nov 19 19:21:21 2007] [notice] SIGHUP received. Attempting to restart
> [Mon Nov 19 19:21:22 2007] [notice] in init_child()
> [Mon Nov 19 19:21:22 2007] [notice] -> c is not null
> [Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
> [Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
> [Mon Nov 19 19:21:22 2007] [notice] in init_child()
> [Mon Nov 19 19:21:22 2007] [notice] -> c is not null
> [Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
> [Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
> [Mon Nov 19 19:21:22 2007] [notice] in init_child()
> [Mon Nov 19 19:21:22 2007] [notice] -> c is not null
> [Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
> [Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
> [Mon Nov 19 19:21:22 2007] [notice] in init_child()
> [Mon Nov 19 19:21:22 2007] [notice] -> c is not null
> [Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
> [Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
> [Mon Nov 19 19:21:22 2007] [notice] in init_child()
> [Mon Nov 19 19:21:22 2007] [notice] -> c is not null
> [Mon Nov 19 19:21:22 2007] [notice] -> dereferenced c
> [Mon Nov 19 19:21:22 2007] [notice] -> init_child() done
> [Mon Nov 19 19:21:22 2007] [notice] Apache/2.0.61 (Unix) mod_ssl/2.0.61
> /usr/local/apache20/lib/perl mod_perl/2.0.3 Perl/v5.8.8 configured --
> resuming normal operations
> [Mon Nov 19 19:22:01 2007] [notice] in do_cas()
> [Mon Nov 19 19:22:01 2007] [notice] in check_individual_cookie()
> [Mon Nov 19 19:22:01 2007] [notice] portstr:
> [Mon Nov 19 19:22:01 2007] [notice] 80
> [Mon Nov 19 19:22:01 2007] [notice] \n
> [Mon Nov 19 19:22:01 2007] [notice] service = 'http://192.168.1.40/cas';
> ticket = '(null)'
> [Mon Nov 19 19:22:01 2007] [notice] about to call CAS_validate()
> [Mon Nov 19 19:22:01 2007] [notice] in init_child()
> [Mon Nov 19 19:22:01 2007] [notice] -> c is not null
> [Mon Nov 19 19:22:01 2007] [notice] -> dereferenced c
> [Mon Nov 19 19:22:01 2007] [notice] -> init_child() done
> [Mon Nov 19 19:22:17 2007] [notice] in do_cas()
> [Mon Nov 19 19:22:17 2007] [notice] in check_individual_cookie()
> [Mon Nov 19 19:22:17 2007] [notice] portstr:
> [Mon Nov 19 19:22:17 2007] [notice] 80
> [Mon Nov 19 19:22:17 2007] [notice] \n
> [Mon Nov 19 19:22:17 2007] [notice] service = 'http://192.168.1.40/cas';
> ticket = 'ST-3-oryKtRQOg1QQzrLGbQccIjwMI7sW0iIFS3N-20'
> [Mon Nov 19 19:22:17 2007] [notice] about to call CAS_validate()
>
>
>
>
> Scott Battaglia wrote:
>
> Peter,
>
> What version of Apache are you using? We also offer:
>
> mod_auth_cas: http://www.ja-sig.org/wiki/display/CASC/mod_auth_cas
> mod_cas: http://www.ja-sig.org/wiki/display/CASC/MOD_CAS
>
> If you need to use AuthCAS, you can try posting your configuration details
> here to see if anyone sees an discrepancies.
>
> Thanks
> -Scott
>
> On Nov 18, 2007 12:28 PM, Peter K AGANYO <[EMAIL PROTECTED]> wrote:
>
> > Hi,
> >
> > I am trying to set up Apache::AuthCAS and I seem to have run out of
> > options. When I thought that it is now working all I get is a blank page on
> > the CAS-protected folder (on my browser), no redirection and this error in
> > the error log: "failed to resolve handler Apache::AuthCAS".
> >
> > Has anyone successfully setup AuthCAS? Please help me.
> >
> > Thanks
> >
> > Peter
> >
> >
> > _______________________________________________
> > Yale CAS mailing list
> > [email protected]
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
> >
>
>
> --
> -Scott Battaglia
>
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
>
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
--
-Scott Battaglia
LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas
