Hi Bruno,

On 01/28/2015 09:53 AM, Bruno Richard wrote:
> 2015-01-21 10:49:25,962 DEBUG
> [org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler]
> - Attempting to resolve credentials for [callbackUrl:
> https://webmail.mydomain.fr/SOGo/casProxy]
> 2015-01-21 10:49:26,261 DEBUG [org.jasig.cas.util.HttpClient] -
> Response Code did not match any of the acceptable response codes. Code
> returned was 403 
there is an HTTP 403  error, so it's an apache configuration problem,
cas-proxy-validate.py is a CGI  as you have "allow from all" for the
proxy directive
the parameter for Directory "/usr/lib/cgi-bin" should be the problem.

you can directly verify the url
https://webmail.mydomain.fr/SOGo/casProxy  to see if there is a 403 error

I have in our httpS site configuration:
ProxyPass /SOGo/casProxy http://127.0.0.1:8080/cgi-bin/cas-proxy-validate.py
   <Proxy http://127.0.0.1:8080/cgi-bin/cas-proxy-validate.py>
      Order deny,allow
      Allow from cas.mydomain.fr
   </Proxy>

and for our VirtualHost on 127.0.0.1:8080 :
<VirtualHost 127.0.0.1:8080>
   Servername localhost
   ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
        <Directory "/usr/lib/cgi-bin">
                AllowOverride None
                Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
                Order allow,deny
                Allow from all
        </Directory>
        ErrorLog ${APACHE_LOG_DIR}/error-cas-proxy.log
        CustomLog ${APACHE_LOG_DIR}/access-cas-proxy.log combined
</VirtualHost>

Regards

Aurélien
-- 
users@sogo.nu
https://inverse.ca/sogo/lists

Reply via email to