jehan.procaccia wrote: > Scott Battaglia wrote: >> There's no reason it shouldn't work fine. It appears that mod_cas >> isn't validating the ticket correctly for whatever reason. >> > Ok, I'll double check my certificates ... Forget It, it's a stupidity of mine ! now it works fine, I just forgot to configure corectly httpd.conf directives , CASLoginURL and CASHost weren't both pointing to the same CAS server !
157.159.21.100 - - [25/Jan/2008:20:44:26 +0100] "GET /~procacci/restricted/ HTTP/1.1" 302 360 157.159.21.100 - - [25/Jan/2008:20:45:10 +0100] "GET /~procacci/restricted/?ticket=ST-15-Og62DdFNUE9BOUY9kbdZ HTTP/1.1" 200 50818 157.159.21.100 - - [25/Jan/2008:20:45:10 +0100] "GET /~procacci/restricted/index.php?=PHPE9568F35-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2146 157.159.21.100 - - [25/Jan/2008:20:45:10 +0100] "GET /~procacci/restricted/index.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 200 2524 > howaver, as I will rebuild httpd package with mod_cas for fedora and > centos5, I'am still wondering if there's a more recent mod_cas > releases (I'am using Mod_cas-2.0.11-esup-2.RC2.tar.gz) to integrate > into ? if there's a newer release (update of Mod_cas-2.0.11-esup-2.RC2.tar.gz), let me know so that I integrate it my RPMS . thanks >> Have you looked into mod_auth_cas though? (depending on your apache >> version) > no , but I will ;-) ! i'am in apache 2.2 >> >> -Scott >> >> On Jan 25, 2008 10:31 AM, jehan procaccia >> <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> >> wrote: >> >> Hello, >> I wonder if mod_cas v2 (Mod_cas-2.0.11) is compatible with CAS >> server v3.1 ? >> I use to maintain apache packages including mod_cas cf: >> http://www.ja-sig.org/wiki/display/CASC/RPM+Modules >> >> Unfortunaltly, my first tests with that mod_cas and a cas v3.1 >> server >> fails , firefox telling: >> >> "The page isn't redirecting properly >> Firefox has detected that the server is redirecting the request >> for this >> address in a way that will never complete." >> >> apache logs: >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:28:57 >> +0100] "GET >> /~procacci/restricted HTTP/1.1" 302 359 >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22 >> +0100] "GET >> /~procacci/restricted?ticket=ST-1-EwUyuaW1BKcTGFbtGeh9 HTTP/1.1" >> 302 359 >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22 >> +0100] "GET >> /~procacci/restricted?ticket=ST-2-rtJOAJbu5ec0jQP0Asoo HTTP/1.1" >> 302 359 >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22 >> +0100] "GET >> /~procacci/restricted?ticket=ST-3-JbuyD69JYw9B3zkTfVbK HTTP/1.1" >> 302 359 >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22 >> +0100] "GET >> /~procacci/restricted?ticket=ST-4-LBQuBQ0SwmmwmAkZ0CCK HTTP/1.1" >> 302 359 >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22 >> +0100] "GET >> /~procacci/restricted?ticket=ST-5-yTZWP03jErtQvp4Azrfc HTTP/1.1" >> 302 359 >> >> However, a phpcas test page (phpcas *0.5.1-1.) works fine .* >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:46:14 >> +0100] "GET >> /~procacci/phpcas/test.php HTTP/1.1" 302 482 >> *MailScanner warning: numerical links are often malicious:* >> 157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:46:14 >> +0100] "GET >> /~procacci/phpcas/test.php?ticket=ST-7-tpT4XMk7tOYSmJIf0Z9l >> HTTP/1.1" >> 200 265 >> >> Do you think I have version mismatch between mod_cas 2 and cas v3 -> >> then is their a updated mod_cas relaese ? or it is something else ? >> >> Thanks. >> >> _______________________________________________ >> Yale CAS mailing list >> [email protected] <mailto:[email protected]> >> http://tp.its.yale.edu/mailman/listinfo/cas >> >> >> >> >> -- >> -Scott Battaglia >> >> LinkedIn: http://www.linkedin.com/in/scottbattaglia >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Yale CAS mailing list >> [email protected] >> http://tp.its.yale.edu/mailman/listinfo/cas >> > > _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
