Hello, I've patched up Dspace 5.2 to enable CAS Login authentication. When using an IP address (eg. https://cas-server.example.com/cas/login?service=https://172.16.0.1:8443/xmlui/cas-login) the login works. However when I put the app server behind an nginx proxy (eg. https://cas-server.example.com/cas/login?service=https://app-server.example.com/xmlui/cas-login where points to 172.16.0.1:8443/xmlui/) it doesn't work. It says Authentication Failed
I've looked at the logs and it outputs something like this: 2015-09-28 09:30:32,255 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/1/cas-login 2015-09-28 09:30:32,375 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/2/cas-login 2015-09-28 09:30:32,490 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/3/cas-login 2015-09-28 09:30:32,584 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/4/cas-login 2015-09-28 09:30:32,695 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login: ticket\colon; ST-31-oFW6L5IUb9m2Vifb0puT-172.32.0.31 2015-09-28 09:30:32,695 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login:service\colon; https\colon;//app-server.example.com/xmlui//cas-login 2015-09-28 09:30:32,695 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login:CAS ticket\colon; ST-31-oFW6L5IUb9m2Vifb0puT-172.32.0.31 2015-09-28 09:30:32,695 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login:CAS service\colon; https\colon;//app-server.example.com/xmlui//cas-login 2015-09-28 09:30:33,056 ERROR org.dspace.authenticate.CASAuthentication @ org.dspace.authenticate.CASAuthentication.authenticate(CASAuthentication.java:152) 2015-09-28 09:30:33,057 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login: ticket\colon; ST-31-oFW6L5IUb9m2Vifb0puT-172.32.0.31 2015-09-28 09:30:33,057 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login:service\colon; https\colon;//app-server.example.com/xmlui//cas-login 2015-09-28 09:30:33,057 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login:CAS ticket\colon; ST-31-oFW6L5IUb9m2Vifb0puT-172.32.0.31 2015-09-28 09:30:33,057 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:login:CAS service\colon; https\colon;//app-server.example.com/xmlui//cas-login 2015-09-28 09:30:33,084 ERROR org.dspace.authenticate.CASAuthentication @ org.dspace.authenticate.CASAuthentication.authenticate(CASAuthentication.java:152) 2015-09-28 09:30:33,085 INFO org.dspace.authenticate.LDAPAuthentication @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:auth:attempting trivial auth of user=null 2015-09-28 09:30:33,085 INFO org.dspace.app.xmlui.utils.AuthenticationUtil @ anonymous:session_id=4C8BFC564233F78B04C440B196DDC333:ip_addr=172.16.0.232:failed_login:email=null, realm=null, result=5 2015-09-28 09:30:33,091 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/5/cas-login 2015-09-28 09:30:33,444 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/6/cas-login 2015-09-28 09:30:33,547 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/7/cas-login 2015-09-28 09:30:33,636 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/8/cas-login 2015-09-28 09:30:33,759 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/9/cas-login 2015-09-28 09:30:33,778 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/9/cas-login resolved to cocoon://DRI/9/cas-login?pipelinehash=-3983196624749804755 2015-09-28 09:30:33,784 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/8/cas-login resolved to cocoon://DRI/8/cas-login?pipelinehash=-6688634643225531088 2015-09-28 09:30:33,785 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/7/cas-login resolved to cocoon://DRI/7/cas-login?pipelinehash=-7904451038231442283 2015-09-28 09:30:33,785 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/6/cas-login resolved to cocoon://DRI/6/cas-login?pipelinehash=-4548287742655953408 2015-09-28 09:30:33,787 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/5/cas-login resolved to cocoon://DRI/5/cas-login?pipelinehash=-5710316335294949100 2015-09-28 09:30:33,788 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/4/cas-login resolved to cocoon://DRI/4/cas-login 2015-09-28 09:30:33,788 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/3/cas-login resolved to cocoon://DRI/3/cas-login 2015-09-28 09:30:33,789 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/2/cas-login resolved to cocoon://DRI/2/cas-login 2015-09-28 09:30:33,789 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ Source cocoon://DRI/1/cas-login resolved to cocoon://DRI/1/cas-login 172.16.0.232 is my proxy server and 172.32.0.31 is my computer. And here's the log for a successful login: 2015-09-28 09:38:12,452 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/1/cas-login 2015-09-28 09:38:12,454 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/2/cas-login 2015-09-28 09:38:12,456 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/3/cas-login 2015-09-28 09:38:12,458 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/4/cas-login 2015-09-28 09:38:12,460 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=9B771FD7FE6C3AE2839248DEE9306948:ip_addr=172.32.0.31:login: ticket\colon; ST-32-bMg7fNzCuCc4ynTaPf9L-172.32.0.31 2015-09-28 09:38:12,460 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=9B771FD7FE6C3AE2839248DEE9306948:ip_addr=172.32.0.31:login:service\colon; https\colon;//172.16.0.1\colon;8443/xmlui/cas-login 2015-09-28 09:38:12,461 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=9B771FD7FE6C3AE2839248DEE9306948:ip_addr=172.32.0.31:login:CAS ticket\colon; ST-32-bMg7fNzCuCc4ynTaPf9L-172.32.0.31 2015-09-28 09:38:12,461 INFO org.dspace.authenticate.CASAuthentication @ anonymous:session_id=9B771FD7FE6C3AE2839248DEE9306948:ip_addr=172.32.0.31:login:CAS service\colon; https\colon;//172.16.0.1\colon;8443/xmlui/cas-login 2015-09-28 09:38:12,838 INFO org.dspace.authenticate.CASAuthentication @ Authenticated user via CAS: test_asac 2015-09-28 09:38:12,846 DEBUG org.dspace.storage.rdbms.DatabaseManager @ Running query "select * from eperson where netid = ? " with parameters: test_asac 2015-09-28 09:38:12,855 INFO org.dspace.authenticate.CASAuthentication @ [email protected]:session_id=9B771FD7FE6C3AE2839248DEE9306948:ip_addr=172.32.0.31:authenticate:type=CAS 2015-09-28 09:38:12,855 DEBUG org.dspace.storage.rdbms.DatabaseManager @ Running query "update eperson set last_active = ? where eperson_id = ?" 2015-09-28 09:38:12,857 INFO org.dspace.eperson.EPerson @ [email protected]:session_id=9B771FD7FE6C3AE2839248DEE9306948:ip_addr=172.32.0.31:update_eperson:eperson_id=5 2015-09-28 09:38:12,857 INFO org.dspace.app.xmlui.utils.AuthenticationUtil @ [email protected]:session_id=9B771FD7FE6C3AE2839248DEE9306948:ip_addr=172.32.0.31:login:type=implicit 2015-09-28 09:38:12,857 DEBUG org.dspace.storage.rdbms.DatabaseManager @ Running query "SELECT * FROM epersongroup2eperson WHERE eperson_id= ?" with parameters: 5 2015-09-28 09:38:12,864 DEBUG org.dspace.storage.rdbms.DatabaseManager @ Running query "SELECT * FROM group2groupcache WHERE child_id= ? OR child_id= ? " with parameters: 0,7 2015-09-28 09:38:12,865 DEBUG org.dspace.storage.rdbms.DatabaseManager @ Running query "select * from epersongroup e LEFT JOIN metadatavalue m on (m.resource_id = e.eperson_group_id and m.resource_type_id = ? and m.metadata_field_id = ?) where m.text_value = ?" with parameters: 6,64,ldap-users 2015-09-28 09:38:12,873 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/5/cas-login 2015-09-28 09:38:12,876 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/6/cas-login 2015-09-28 09:38:12,878 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/7/cas-login 2015-09-28 09:38:12,881 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/8/cas-login 2015-09-28 09:38:12,884 DEBUG org.dspace.app.xmlui.cocoon.AspectGenerator @ aspectgenerator path: cocoon://DRI/9/cas-login Thanks for your help. All the best, Shem Pasamba -- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/dspace-tech. For more options, visit https://groups.google.com/d/optout.
