I am really thankful to this prompt response. Regarding my configuration detail, I am using cas-server-3.2.1 and cas-client-3.1.3. Due to some of the issues with our version compatibility with the product, I have changed the client part slightly to support java version 1.4. The infinite redirection problem after login does not occur in firefox as far as I am aware and does not occur in other versions of IE (except for IE6 Sp1) as well. Let me detail this problem some more.. When I browse to productA it redirects to CAS server. I provide my credentials there. Then the browser keeps showing the same page. When I look in the console of productA, it is displaying the following message in an infinite loop.
/No Proxy Ticket found for
/I am not using any proxy service so I think this message is appropriate. Now, if I stop this loop and hit productA in the same browser instance it can display productA's landing page. This shows that Browser is not being able to render the productA's landing page while redirecting from the CAS server. The first problem I mentioned is the problem of infinite redirection before login- if I add a view to default-views.properties. This occurs in any browser. This problem actually occurs before displaying the login view. My view parameter is resolved like this:
   <view-state id="interActiveLogin"
view="${externalContext.requestParameterMap['view'] != '' &amp;&amp; externalContext.requestParameterMap['view']!=null ? externalContext.requestParameterMap['view'] : 'casLoginView'}"> Is there any limitation in ResourceBundleViewResolver or I am missing something in configuration?
Regards,
Lekhnath
Scott Battaglia wrote:
My guess would be that the client application is failing to show an error message if it can't correctly validate the ticket and instead just redirecting to the CAS server.

-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia


On Fri, Dec 5, 2008 at 8:41 AM, Robert Oschwald <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:

    I bet this is a ssl certificate issue.

    Please check whether the ssl cert is trusted by the jre. If not, add
    it to the keystore.
    See the casum wiki for details.

    Robert

    Am 05.12.2008 um 14:26 schrieb Andrew Feller:

    > Lekhnath,
    >
    > 1. What is your setup?  Which version of the CAS Server and
    which CAS
    > client?  Does this only happen in IE6?  What about Firefox?
    >
    > 2. Could you diagram the HTTP activity in the endless loop? (e.g. /
    > login w/
    > view A => ...)
    >
    > 3. The CAS server is configured with a 5 minute session timeout in
    > web.xml.
    > You would either need to extend this timeout or say it is an
    > acceptable
    > loss.
    >
    > As far as the endless loop is concerned, I believe there is
    probably a
    > misconfiguration where there CAS client you are using to protect
    your
    > application is not seeing the service ticket provided by the CAS
    > server.  It
    > would help if you could give us more.
    >
    > If you want an easy way to recording what is going on when you do
    > this, use
    > FireFox and the "Live HTTP Headers" add-on.  This will allow you to
    > capture
    > all HTTP requests made so they can be analyzed.
    >
    > HTH,
    > A-
    >
    > On 12/5/08 5:46 AM, "Lekhnath Bhusal" <[EMAIL PROTECTED]
    <mailto:[EMAIL PROTECTED]>> wrote:
    >
    >> Hello team,
    >> I am working on to integrate three products in our product line to
    >> centrally authenticate through CAS. I changed the login page that
    >> JASIG
    >> provides by default and customize it. The list of issues are
    >> 1. I use request parameter 'view' to dynamically use different
    login
    >> view for different product line. Now, when I add more views to
    >> default_views.properties file the request goes to infinite
    >> redirection loop.
    >> 2.If I leave the login page idle for some time (5 minutes or more),
    >> then
    >> I have to enter my credentials twice. i.e. when I enter
    userName and
    >> password first time no response occurs just the username and
    password
    >> fields are reset and I have to re-enter the credentials and this
    >> time I
    >> am successfully authenticated.
    >> 3. In IE6 Service pack 1, when I browse to a product it
    redirects to
    >> login server where I provide my credentials. After that the
    >> application
    >> redirects to the requested product and runs in an infinite loop in
    >> the
    >> product side. While it is looping if I provide the url directly
    >> then the
    >> product page is seen. This shows that in IE 6 SP1 CAS server
    >> authenticates the user but after redirecting to the product the
    >> browser
    >> can not open the product page.
    >> I need your help in this regard.
    >> Regards,
    >> Lekhnath
    >>
    >>
    >>
    >> PRIVACY NOTICE
    >>
    >> This email and any attachments may be confidential and/or
    >> privileged. Use of
    >> the information contained in this email by anyone other than the
    >> intended
    >> recipient is strictly prohibited. If you have received this email
    >> in error,
    >> please notify the sender by replying to this message and delete
    >> this email.
    >> _______________________________________________
    >> cas-dev mailing list
    >> [email protected] <mailto:[email protected]>
    >> http://tp.its.yale.edu/mailman/listinfo/cas-dev
    >
    > _______________________________________________
    > cas-dev mailing list
    > [email protected] <mailto:[email protected]>
    > http://tp.its.yale.edu/mailman/listinfo/cas-dev


    _______________________________________________
    cas-dev mailing list
    [email protected] <mailto:[email protected]>
    http://tp.its.yale.edu/mailman/listinfo/cas-dev


------------------------------------------------------------------------

_______________________________________________
cas-dev mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas-dev


PRIVACY NOTICE

This email and any attachments may be confidential and/or privileged. Use of 
the information contained in this email by anyone other than the intended 
recipient is strictly prohibited. If you have received this email in error, 
please notify the sender by replying to this message and delete this email.
_______________________________________________
cas-dev mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas-dev

Reply via email to