> The helloCosign test scrips are failing, the user in the headers  
> isn’t being recognized and I don’t know why.  Also I think it’s not  
> getting the correct Plone URL (http://web01.company.com/plone works  
> fine) redirected back, but I don’t know.

Wes is right. Concentrate on getting the test scripts working first.  
cosign 3.0 adds one additional validation step to the cosign scheme,  
which involves redirection to a well-known location intercepted by the  
cosign module. mod_cosign steps in to claim requests for the /cosign/ 
valid URI, setting the cookie and redirecting to the protected page if  
both cookie and destination are valid. Are you sure cookies are being  
set? Check your browser's cookie cache for the "cosign-plone" cookie.

> Here’s the URL redirected back when Zope reports the error of  
> Resource not found - Resource: cosign GET:  ...

It sounds like Zope is somehow intercepting the request for /cosign/ 
valid before mod_cosign is getting to it. Zope is looking for a  
resource called "cosign" at the docroot, and not finding it. It  
shouldn't, since /cosign/valid is a virtual URI only meaningful to  
mod_cosign, but it's possible Zope won't be happy until you create / 
cosign/valid. Certain java implementations seem to require the  
presence of /cosign/valid for the 3.0 java cosign filter to work  
correctly.

> I’ve also been getting a lot of loop errors, not sure why.  Any help  
> is greatly appreciated!

If validation fails at the well-known location, mod_cosign redirects  
to the protected page without setting a cookie, on the best thing to  
do is to try running through things once more. If some error in  
configuration is preventing mod_cosign from handling requests for / 
cosign/valid (e.g., /cosign/valid is itself cosign-protected, a  
rewrite rule is mangling the URL, etc), you'll get the looping errors.

andrew
------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises 
looking to deploy the next generation of Solaris that includes the latest 
innovations from Sun and the OpenSource community. Download a copy and 
enjoy capabilities such as Networking, Storage and Virtualization. 
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to