Geoff ? have you a META-INF/context.xml file in your webapp ?
2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> > oups left IPs sorry... > > > 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> > >> Juste happened now : >> >> On click on add : >> >> GET add.html 302 Moved Temporarily sso-int.xxxxxxxxx.fr 0 B >> 87.98.148.90:443 69ms >> GET login?service=https%3A%...cegi_cas_security_check 302 Moved >> Temporarily sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 81ms >> GET j_acegi_cas_security_ch...int.xxxxxx.fr 302 Moved Temporarily >> sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 94ms >> GET manage.html 200 OK sso-int.xxxxxxx.fr 1,8 KB 87.98.148.90:443 83ms >> >> 4 requests >> >> >> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> >> >>> To complete, i am in >>> >>> Tomcat 7.0.39 and 6.0.36 >>> Apache 2.2.9 + page speed >>> mod jk >>> CAS 3.5.2 + remember me + jpa ticket registry + ldap authentication + >>> PersonAttributes >>> >>> workers.properties : >>> >>> worker.cas.port=8010 >>> worker.cas.host=localhost >>> worker.cas.type=ajp13 >>> worker.cas.socket_keepalive=1 >>> worker.cas.socket_timeout=3 >>> worker.cas.retries=2 >>> worker.cas.reply_timeout=40000 >>> worker.cas.recover_time=15 >>> >>> workers.conf >>> JkWorkersFile /etc/apache2/workers.properties >>> JkLogFile /var/log/apache2/mod_jk.log >>> JkShmFile /var/log/apache2/mod_jk.shm >>> JkLogLevel warn >>> JkOptions +FlushHeader +FlushPackets +ForwardKeySize +ForwardURICompat >>> -ForwardDirectories >>> >>> The same configuration was used on a cas 3.4.8 installation and there >>> was no such issue... >>> >>> I have an other configuration with >>> >>> mod-proxy >>> >>> ProxyPass / ajp://localhost:8009/ >>> ProxyPassReverse / ajp://localhost:8009/ >>> >>> and the same issue >>> >>> I have 4 serveurs with this issue. >>> >>> I have deactivated page speed for the test but the issu remains present. >>> >>> Thanks in advance >>> >>> >>> >>> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> >>> >>>> Hi everybody, >>>> >>>> I have exactly the same issue. >>>> >>>> The only use case that comes with a fonctionnal UI is when I'am totally >>>> lopout from CAS and when i'm doing a full login process. The other times >>>> (with the remember me checkbox checked) the problem can appear (it's not >>>> every time...) >>>> >>>> The problem is occuring with chrome and firefox (last version both), i >>>> have not javascript errors in javascript console. >>>> >>>> And yes i'm loosing the jsession id as soon as i am clicking on a link >>>> (edit or a add a new service). It's very strange (so i'm going directly in >>>> the database to do my changes...). With firebug i have seen what the >>>> jsessionid has changed between requests... >>>> >>>> >>>> 2013/5/16 KaTeLmE <kate...@gmail.com> >>>> >>>>> The Apache Server can communicate with Tomcat using: >>>>> - mod_proxy: >>>>> http://stackoverflow.com/questions/956361/apache-tomcat-using-mod-proxy-instead-of-ajp >>>>> http://tomcat.apache.org/tomcat-6.0-doc/proxy-howto.html >>>>> - mod_proxy_ajp: >>>>> http://www.zeitoun.net/articles/configure-mod_proxy_ajp-with-tomcat/start >>>>> - mod_jk: http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html >>>>> >>>>> If, due a bad config, you not transfer the cookies from Apache to >>>>> Tomcat (also Tomcat to Apache) the session cookie is lost and then a new >>>>> Tomcat session is created in the next request. >>>>> >>>>> Can you test the CAS back-end without Apache Server (leave only the >>>>> Tomcat) to avoid this behaviour? >>>>> >>>>> >>>>> >>>>> 2013/5/15 Whittaker, Geoffrey <geoff.whitta...@unf.edu> >>>>> >>>>> I’m not sure what you mean. Can you explain the reverse proxy? I’m >>>>>> not using a separate apache instance, but I assume since tomcat’s written >>>>>> by the ASF that the underlying web server is Apache based. **** >>>>>> >>>>>> ** ** >>>>>> >>>>>> Does anyone else have any ideas what’s causing this? It’s becoming >>>>>> incredibly frustrating. I ended up having to add a service directly to >>>>>> the >>>>>> database because I couldn’t get it to save after 6 attempts using the web >>>>>> interface.**** >>>>>> >>>>>> ** ** >>>>>> >>>>>> Geoff **** >>>>>> >>>>>> ** ** >>>>>> >>>>>> *From:* KaTeLmE [mailto:kate...@gmail.com] >>>>>> *Sent:* Tuesday, May 7, 2013 2:45 PM >>>>>> >>>>>> *To:* cas-user@lists.jasig.org >>>>>> *Subject:* Re: [cas-user] Changes not saving in Services Managment*** >>>>>> * >>>>>> >>>>>> ** ** >>>>>> >>>>>> Seems java session loosing. Have you noted if the JSESSIONID cookie >>>>>> changes during that intermittent requests?**** >>>>>> >>>>>> Jerome, in version 3.5.2 the TerminateWebSessionListener introduced >>>>>> and proposed by you in 3.5.1 swf cas config was removed? Could be >>>>>> related? >>>>>> >>>>>> I have a lazy idea how I solved that, but I can remember I disable >>>>>> that feature after reading some issues.**** >>>>>> >>>>>> Geo, as I see u attach Apache logs... could be a bad reverse proxy >>>>>> config between Apache + Tomcat??**** >>>>>> >>>>>> ** ** >>>>>> >>>>>> 2013/5/7 Whittaker, Geoffrey <geoff.whitta...@unf.edu>**** >>>>>> >>>>>> I did some googling and dug through some of the tomcat logs looking >>>>>> for the PermGen issue. I don't see anything to indicate that's the >>>>>> problem. But, it was definitely something I hadn't thought of. Thanks! >>>>>> >>>>>> Asside from not finding anything in the logs, from what I read, that >>>>>> error primarily occurs when you're deploying lots of apps or apps with >>>>>> lots >>>>>> of classes. I don't know if CAS would qualify as that, but I do know >>>>>> that >>>>>> we're not cycling out war files. Also, I do a service restart on Tomcat >>>>>> anytime I replace the war file to avoid any issues. >>>>>> >>>>>> >>>>>> Jérôme, >>>>>> >>>>>> Which version of CAS do you use ? 3.5.2 >>>>>> Do you see a round-trip to the CAS server (HTTP 302 to /cas/login) >>>>>> when you try to save an update ? Yes, I am seeing HTTP 302 in the logs >>>>>> when this happens, but I don't see "- Found" like I'm used to seeing. >>>>>> Then >>>>>> I get several web objects with status code 304. >>>>>> >>>>>> For example: >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>> /services/j_acegi_cas_security_check?ticket=<ticket data> HTTP/1.1" 302 - >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>> /services/manage.html HTTP/1.1" 200 9601 >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>> /css/services/cas.css HTTP/1.1" 304 - >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/cas.js >>>>>> HTTP/1.1" 304 - >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>> /js/MyInfusion.js HTTP/1.1" 304 - >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/services.js >>>>>> HTTP/1.1" 304 - >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>> /images/services/true.gif HTTP/1.1" 304 - >>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>> /images/services/false.gif HTTP/1.1" 304 - >>>>>> >>>>>> >>>>>> Geoff**** >>>>>> >>>>>> >>>>>> -----Original Message----- >>>>>> From: Alberto Cabello Sanchez [mailto:albe...@unex.es] >>>>>> Sent: Monday, May 6, 2013 4:27 PM >>>>>> To: cas-user@lists.jasig.org >>>>>> Subject: Re: [cas-user] Changes not saving in Services Managment >>>>>> >>>>>> > I'm having an intermittent problem with Tomcat/CAS were sometimes >>>>>> I'll >>>>>> > click a link or button, etc and the page will flash like it's doing >>>>>> a >>>>>> > GET/POST and then nothing happens. >>>>>> > >>>>>> > For instance: I'm trying to make a change to service in the >>>>>> Services >>>>>> > Manager and I click save, it does it's post and redirects me to >>>>>> > ManageServices main page, but the change didn't save. Often, I'll >>>>>> > click edit to go into one and the browser flashes like it's about >>>>>> to go the next page, but it just leaves me where I started. >>>>>> > >>>>>> > Is this a caching problem with the Tomcat server or is this a CAS >>>>>> > problem... Any ideas? >>>>>> >>>>>> Hi, Geoff. >>>>>> >>>>>> I ran into that same trouble while setting up CAS for the first time. >>>>>> I think it has to do with the infamous Tomcat "PermGen space error", but >>>>>> I >>>>>> didn't wrote it down :( >>>>>> >>>>>> Please check Tomcat log files and look for some clue. >>>>>> >>>>>> > Geoff >>>>>> > >>>>>> > -- >>>>>> > You are currently subscribed to cas-user@lists.jasig.org as: >>>>>> > albe...@unex.es To unsubscribe, change settings or access archives, >>>>>> > see http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>>> >>>>>> >>>>>> >>>>>> --**** >>>>>> >>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>> geoff.whitta...@unf.edu To unsubscribe, change settings or access >>>>>> archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>>> >>>>>> >>>>>> -- >>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>> kate...@gmail.com >>>>>> To unsubscribe, change settings or access archives, see >>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>>> >>>>>> ** ** >>>>>> >>>>>> -- >>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>> geoff.whitta...@unf.edu >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> To unsubscribe, change settings or access archives, see >>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>>> >>>>>> -- >>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>> kate...@gmail.com >>>>>> To unsubscribe, change settings or access archives, see >>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>>> >>>>>> >>>>> -- >>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>> jrautur...@gmail.com >>>>> To unsubscribe, change settings or access archives, see >>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>> >>>>> >>>> >>>> >>>> -- >>>> Jérôme Rautureau >>>> Développeur Systèmes - CdA La Rochelle >>>> >>> >>> >>> >>> -- >>> Jérôme Rautureau >>> Développeur Systèmes - CdA La Rochelle >>> >> >> >> >> -- >> Jérôme Rautureau >> Développeur Systèmes - CdA La Rochelle >> > > > > -- > Jérôme Rautureau > Développeur Systèmes - CdA La Rochelle > -- Jérôme Rautureau Développeur Systèmes - CdA La Rochelle -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user