cosign 3 works in a fundamentally different way than cosign 1. When a user accesses a protected page on your site for the first time, after the central weblogin server verifies their identity, they are sent back to a well-known URL on the server -- the validation URL -- for the service-specific cookie to be set and for the URL they were originally trying to be checked.
The validation URL is determined by the configuration of your organization's central weblogin server, and it is not something you can control from your cosign-protected webserver. By default, the validation URL is https://${WEBSERVER}/cosign/valid This can be changed to use HTTP instead of HTTPS just for your server if your organization's policies permit that. Keep in mind that HTTP is not secure, so you may want to consider getting SSL certificates for each web site (or a single wildcard certificate) and configuring HTTPS. Mark Montague ITS Web/Database Team The University of Michigan [email protected] On Tue, Aug 18, 2009 4:53 PM, "Will Kerr" <[email protected]> wrote: > On version 1.0 I was able to host multiple sites using one cert and no ssl > > On version 3.0 it is sending me to an > https://instructor.uts.psu.edu/cosign/valid?cosign-... > > Even though I have <RedirectToHttps>false</RedirectToHttps> > And also > <SiteEntry>http://instructor.uts.psu.edu/Protected/ControlPanel.aspx</SiteEn > try> > > Any ideas? > > > -- Will > > * * * * * * * * Will Kerr, Manager Testing and Scanning Operations > [email protected] > * * --------------------------------------------------- > * Penn State * Schreyer Institute for Teaching Excellence > * * 114 Pollock Building > * 1 8 5 5 * University Park, PA 16802 (814) 865-2114 > * * Testing.psu.edu > * * www.SchreyerInstitute.psu.edu > * FAX: (814) 863-2322 > > > > ------------------------------------------------------------------------------ > Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day > trial. Simplify your report design, integration and deployment - and focus on > what you do best, core application coding. Discover what's new with > Crystal Reports now. http://p.sf.net/sfu/bobj-july > _______________________________________________ > Cosign-discuss mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/cosign-discuss > > > ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Cosign-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/cosign-discuss
