CAS replies via whatever was passed as the service parameter.  Service
parameters NEVER (for the official clients at least) trust the HOST header,
and are always configured in the client itself.  In the Java client, for
example, you must specify either the serverName or the serviceUrl (which
contains the server name).


Take a look at your client configuration if you'd prefer to always use the
IP address.


On Wed, Sep 15, 2010 at 6:17 PM, Steve Fiske <[email protected]>wrote:

> Website is defined with some pages that all users can view and some pages
> that require CAS authentication to view.
>
> When website is accessed using numeric IP address on Internet Explorer 6, 7
> and 8 and user attempts to access CAS protected web page, user enters valid
> username and password, CAS creates service ticket (that references the DNS
> name for the website not the website IP address) as observed in CAS log, CAS
> does not navigate to intended target web page; browser just sits on the CAS
> login page.
>
> With Internet Explorer 6, 7 and 8, CAS navigates to the intended target
> page for the above scenario if website is accessed using the DNS website
> name.
>
> With Firefox 2 and 3, CAS navigates to the intended target page regardless
> of whether the website was accessed by numeric IP address or DNS website
> name.
>
> For both Internet Explorer and Firefox, the service tickets identified in
> the CAS log always have the website DNS address even if the website was
> accessed using numeric IP address.
>
> Server is running Windows Server 2003, Apache HTTP Server 2.2.14, Apache
> Tomcat 6.0.20, CAS 3.3.4.
>
> Does anyone have any ideas for getting CAS to navigate to intended webpage
> after user enters valid username/password when website accessed using
> numeric IP address on Internet Explorer 6, 7 and 8?
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to