We've had some problems because of our apache proxy for cas service being hosted as 'virtualhost': pam_cas couldn't validate any ticket with HTTP/1.0 protocol.
Here is a little patch, adding a 'Host: ' header with the configured
hostname, and changing CAS_PROT to HTTP/1.1.
It works for us=E2=84=A2
Hope this can help ... more than without patch ;)
--=20
___________________________________________________________
/ *Geoffroy DESVERNAY* | \
/\ `Service info` | Tel: (+33|0)4 91 05 45 24 /\
\/ Ecole Centrale de Marseille | Fax: (+33|0)4 91 05 45 98 \/
\ (ex-EGIM) | Mail: [EMAIL PROTECTED] /
-----------------------------------------------------------
--------------070904040905010704060504
Content-Type: text/x-patch;
name="pam_cas.diff"
Content-Transfer-Encoding: base64
Content-Disposition: inline;
filename="pam_cas.diff"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--------------070904040905010704060504--
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
