Joe,

You'll probably actually want to look at this:
http://ja-sig.org/wiki/display/CASUM/Trusted

which is the implementation included in most of the recent releases.

You'll probably want to tweak the "error" transition to check for gatewaying
instead of showing the form.

-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia


On Wed, Sep 24, 2008 at 3:02 PM, Joseph Conder <[EMAIL PROTECTED]> wrote:

> I am using Shibboleth-enabled Apache to front CAS so that we can issue CAS
> tickets against a Shibboleth SP.  We are doing this via the REMOTE_USER
> mechanism detailed on the wiki at *
> http://ja-sig.org/wiki/display/CAS/Using+the+REMOTE_USER*<http://ja-sig.org/wiki/display/CAS/Using+the+REMOTE_USER>.
>
> The only problem we have is if we want to configure a CAS client filter in
> gateway mode against this CAS instance.   In this case, we have been able to
> get the gateway mode to validate an existing CAS ticket but CAS does not
> seem to return nicely when there is no ticket/session.  I think it has
> something to do with the actual code on the WIKI.... I tried tampering with
> the PrincipalBearingCredentialsAuthnHandler but it didn't help matters.
>  It seems that everytime I fail the authentication it simply tries again and
> I end up in an endless loop...
>
> Thanks,
> Joe
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to