Hi All, I'm facing out with a very strange problem with CAS 5.2.0-RC4 accessed via httpd proxy.

SAML2 authentication fails through httpd proxy. It seems that the cause is that the SAMLRequest is truncated ... but the strange thing is that it is truncated in the callback.

I mean,

1. CAS receives the request from the SP (POST binding)
2. CAS validates successfully the SAMLRequest and asks me for the
   credentials
3. I provide credentials
4. Callback request is generated but the base64 encoded attribute value
   SAMLRequest resuts to be truncated in its decrypted value

maxHttpHeaderSize has been provided on tomcat

And the followings on httpd

        ProxyIOBufferSize 2097152
        LimitRequestBody 20971520
        LimitRequestLine 2097152
        LimitRequestFieldSize 2097152
        LimitXMLRequestBody 0

... but without any success.

Is there someone that can help me?

Thank you in advance.

BR,

F.

--
Fabio Martelli
https://it.linkedin.com/pub/fabio-martelli/1/974/a44
http://blog.tirasa.net/author/fabio/index.html

Tirasa - Open Source Excellence
http://www.tirasa.net/index.html?pk_campaign=email&pk_kwd=fm

Apache Syncope PMC
http://people.apache.org/~fmartelli/

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/e7b6db7b-f4c7-3148-1214-facc949556c2%40gmail.com.

Reply via email to