-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The headers you sent showed "http://webapp/"; as the destination location -- is "webapp" the real server name, or is this a masking of the real FQDN?
On 03/31/2011 02:40 PM, Vincent Hurtevent wrote: > I changed servers names in the logs but all CAS server, webapp > server are accessed by fqdn not short name and neither ip and are > in the same domain covered by the mstgc cookie domain. > > I read about problem with IE and IP or fqdn and I alreadey checked > the whole config. The Apache ServerName is an fqdn and I try to > access by its fqdn. > > In fact It's like IE9 cached the first redirect from webapp to CAS > and replays it in a loop with the tgc and mstgc already gotten. > > > > On 31/03/2011 20:34, Smith, Matthew J. wrote: It looks like you use > the short-name "webapp" to connect to the server. Do you see the > same behavior if you use the FQDN? > > -Matt > > On 03/31/2011 08:48 AM, Vincent Hurtevent wrote: >>>> Hello, >>>> >>>> I'm facing a problem using IE9 with mod_auth_cas. This >>>> mod_auth_cas configuration is working very well with other >>>> browsers (Chrome, Firefox, IE 7/8) but not IE9. >>>> >>>> After examining http headers (attached file), IE9 enters a >>>> loop between the webapp+mod_auth_cas and the CAS server. >>>> After getting the ST from CAS and transmits it to >>>> mod_auth_cas which validates it (I've set debug mode on >>>> mod_auth_cas to check this), IE9 returns to the CAS asking a >>>> new ST whereas it receives a good 302 redirect to the >>>> webapp. >>>> >>>> I really don't understand such a behaviour. I tested IE9 >>>> with another webapp+mod_auth_cas with no problem, >>>> mod_auth_cas is exactly the same version and dll module >>>> (servers are Windows here), only Apaches are different but I >>>> don't see any mistake in the configuration files. And why it >>>> works with other IE versions and other browser ? >>>> >>>> I supposed that IE9 handles cache weirdly, but I played with >>>> IE conf and headers dealing with cache/no-cache in Apache >>>> with no success. >>>> >>>> If anyone has a clue, please don't hesitate >>>> >>>> Thank you > >> >> - -- Matthew J. Smith University of Connecticut UITS matt.sm...@uconn.edu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk2Uy9cACgkQGER0Au6g8xBAsgCfTpY5i19Yql3UZkWn9zy/c2VY I8QAoIxGxtkwsh0zQavsquKWVii0D0hZ =R6gW -----END PGP SIGNATURE----- -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
