Geoff ?

have you a META-INF/context.xml file in your webapp ?


2013/5/16 Jérôme Rautureau <jrautur...@gmail.com>

> oups left IPs sorry...
>
>
> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com>
>
>> Juste happened now :
>>
>> On click on add :
>>
>> GET add.html 302 Moved Temporarily sso-int.xxxxxxxxx.fr 0 B
>> 87.98.148.90:443 69ms
>>  GET login?service=https%3A%...cegi_cas_security_check 302 Moved
>> Temporarily sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 81ms
>>  GET j_acegi_cas_security_ch...int.xxxxxx.fr 302 Moved Temporarily
>> sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 94ms
>>  GET manage.html 200 OK sso-int.xxxxxxx.fr 1,8 KB 87.98.148.90:443 83ms
>>
>> 4 requests
>>
>>
>> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com>
>>
>>> To complete, i am in
>>>
>>> Tomcat 7.0.39 and 6.0.36
>>> Apache 2.2.9 + page speed
>>> mod jk
>>> CAS 3.5.2 + remember me + jpa ticket registry + ldap authentication +
>>> PersonAttributes
>>>
>>> workers.properties :
>>>
>>> worker.cas.port=8010
>>> worker.cas.host=localhost
>>> worker.cas.type=ajp13
>>> worker.cas.socket_keepalive=1
>>> worker.cas.socket_timeout=3
>>> worker.cas.retries=2
>>> worker.cas.reply_timeout=40000
>>> worker.cas.recover_time=15
>>>
>>> workers.conf
>>> JkWorkersFile /etc/apache2/workers.properties
>>> JkLogFile /var/log/apache2/mod_jk.log
>>> JkShmFile /var/log/apache2/mod_jk.shm
>>> JkLogLevel warn
>>> JkOptions +FlushHeader +FlushPackets +ForwardKeySize +ForwardURICompat
>>> -ForwardDirectories
>>>
>>> The same configuration was used on a cas 3.4.8 installation and there
>>> was no such issue...
>>>
>>> I have an other configuration with
>>>
>>> mod-proxy
>>>
>>> ProxyPass / ajp://localhost:8009/
>>> ProxyPassReverse / ajp://localhost:8009/
>>>
>>> and the same issue
>>>
>>> I have 4 serveurs with this issue.
>>>
>>> I have deactivated page speed for the test but the issu remains present.
>>>
>>> Thanks in advance
>>>
>>>
>>>
>>> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com>
>>>
>>>> Hi everybody,
>>>>
>>>> I have exactly the same issue.
>>>>
>>>> The only use case that comes with a fonctionnal UI is when I'am totally
>>>> lopout from CAS and when i'm doing a full login process. The other times
>>>> (with the remember me checkbox checked) the problem can appear (it's not
>>>> every time...)
>>>>
>>>> The problem is occuring with chrome and firefox (last version both), i
>>>> have not javascript errors in javascript console.
>>>>
>>>> And yes i'm loosing the jsession id as soon as i am clicking on a link
>>>> (edit or a add a new service). It's very strange (so i'm going directly in
>>>> the database to do my changes...). With firebug i have seen what the
>>>> jsessionid has changed between requests...
>>>>
>>>>
>>>> 2013/5/16 KaTeLmE <kate...@gmail.com>
>>>>
>>>>> The Apache Server can communicate with Tomcat using:
>>>>> - mod_proxy:
>>>>> http://stackoverflow.com/questions/956361/apache-tomcat-using-mod-proxy-instead-of-ajp
>>>>> http://tomcat.apache.org/tomcat-6.0-doc/proxy-howto.html
>>>>> - mod_proxy_ajp:
>>>>> http://www.zeitoun.net/articles/configure-mod_proxy_ajp-with-tomcat/start
>>>>> - mod_jk: http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html
>>>>>
>>>>> If, due a bad config, you not transfer the cookies from Apache to
>>>>> Tomcat (also Tomcat to Apache) the session cookie is lost and then a new
>>>>> Tomcat session is created in the next request.
>>>>>
>>>>> Can you test the CAS back-end without Apache Server (leave only the
>>>>> Tomcat) to avoid this behaviour?
>>>>>
>>>>>
>>>>>
>>>>> 2013/5/15 Whittaker, Geoffrey <geoff.whitta...@unf.edu>
>>>>>
>>>>> I’m not sure what you mean.  Can you explain the reverse proxy?  I’m
>>>>>> not using a separate apache instance, but I assume since tomcat’s written
>>>>>> by the ASF that the underlying web server is Apache based.  ****
>>>>>>
>>>>>> ** **
>>>>>>
>>>>>> Does anyone else have any ideas what’s causing this?  It’s becoming
>>>>>> incredibly frustrating.  I ended up having to add a service directly to 
>>>>>> the
>>>>>> database because I couldn’t get it to save after 6 attempts using the web
>>>>>> interface.****
>>>>>>
>>>>>> ** **
>>>>>>
>>>>>> Geoff ****
>>>>>>
>>>>>> ** **
>>>>>>
>>>>>> *From:* KaTeLmE [mailto:kate...@gmail.com]
>>>>>> *Sent:* Tuesday, May 7, 2013 2:45 PM
>>>>>>
>>>>>> *To:* cas-user@lists.jasig.org
>>>>>> *Subject:* Re: [cas-user] Changes not saving in Services Managment***
>>>>>> *
>>>>>>
>>>>>> ** **
>>>>>>
>>>>>> Seems java session loosing. Have you noted if the JSESSIONID cookie
>>>>>> changes during that intermittent requests?****
>>>>>>
>>>>>> Jerome, in version 3.5.2 the TerminateWebSessionListener introduced
>>>>>> and proposed by you in 3.5.1 swf cas config was removed? Could be 
>>>>>> related?
>>>>>>
>>>>>> I have a lazy idea how I solved that, but I can remember I disable
>>>>>> that feature after reading some issues.****
>>>>>>
>>>>>> Geo, as I see u attach Apache logs... could be a bad reverse proxy
>>>>>> config between Apache + Tomcat??****
>>>>>>
>>>>>> ** **
>>>>>>
>>>>>> 2013/5/7 Whittaker, Geoffrey <geoff.whitta...@unf.edu>****
>>>>>>
>>>>>> I did some googling and dug through some of the tomcat logs looking
>>>>>> for the PermGen issue.  I don't see anything to indicate that's the
>>>>>> problem.  But, it was definitely something I hadn't thought of.  Thanks!
>>>>>>
>>>>>> Asside from not finding anything in the logs, from what I read, that
>>>>>> error primarily occurs when you're deploying lots of apps or apps with 
>>>>>> lots
>>>>>> of classes.  I don't know if CAS would qualify as that, but I do know 
>>>>>> that
>>>>>> we're not cycling out war files.  Also, I do a service restart on Tomcat
>>>>>> anytime I replace the war file to avoid any issues.
>>>>>>
>>>>>>
>>>>>> Jérôme,
>>>>>>
>>>>>> Which version of CAS do you use ?  3.5.2
>>>>>> Do you see a round-trip to the CAS server (HTTP 302 to /cas/login)
>>>>>> when you try to save an update ?  Yes, I am seeing HTTP 302 in the logs
>>>>>> when this happens, but I don't see "- Found" like I'm used to seeing.  
>>>>>> Then
>>>>>> I get several web objects with status code 304.
>>>>>>
>>>>>> For example:
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET
>>>>>> /services/j_acegi_cas_security_check?ticket=<ticket data> HTTP/1.1" 302 -
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET
>>>>>> /services/manage.html HTTP/1.1" 200 9601
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET
>>>>>> /css/services/cas.css HTTP/1.1" 304 -
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/cas.js
>>>>>> HTTP/1.1" 304 -
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET
>>>>>> /js/MyInfusion.js HTTP/1.1" 304 -
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/services.js
>>>>>> HTTP/1.1" 304 -
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET
>>>>>> /images/services/true.gif HTTP/1.1" 304 -
>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET
>>>>>> /images/services/false.gif HTTP/1.1" 304 -
>>>>>>
>>>>>>
>>>>>> Geoff****
>>>>>>
>>>>>>
>>>>>> -----Original Message-----
>>>>>> From: Alberto Cabello Sanchez [mailto:albe...@unex.es]
>>>>>> Sent: Monday, May 6, 2013 4:27 PM
>>>>>> To: cas-user@lists.jasig.org
>>>>>> Subject: Re: [cas-user] Changes not saving in Services Managment
>>>>>>
>>>>>> > I'm having an intermittent problem with Tomcat/CAS were sometimes
>>>>>> I'll
>>>>>> > click a link or button, etc and the page will flash like it's doing
>>>>>> a
>>>>>> > GET/POST and then nothing happens.
>>>>>> >
>>>>>> > For instance:  I'm trying to make a change to service in the
>>>>>> Services
>>>>>> > Manager and I click save, it does it's post and redirects me to
>>>>>> > ManageServices main page, but the change didn't save.  Often, I'll
>>>>>> > click edit to go into one and the browser flashes like it's about
>>>>>> to go the next page, but it just leaves me where I started.
>>>>>> >
>>>>>> > Is this a caching problem with the Tomcat server or is this a CAS
>>>>>> > problem... Any ideas?
>>>>>>
>>>>>> Hi, Geoff.
>>>>>>
>>>>>> I ran into that same trouble while setting up CAS for the first time.
>>>>>> I think it has to do with the infamous Tomcat "PermGen space error", but 
>>>>>> I
>>>>>> didn't wrote it down :(
>>>>>>
>>>>>> Please check Tomcat log files and look for some clue.
>>>>>>
>>>>>> > Geoff
>>>>>> >
>>>>>> > --
>>>>>> > You are currently subscribed to cas-user@lists.jasig.org as:
>>>>>> > albe...@unex.es To unsubscribe, change settings or access archives,
>>>>>> > see http://www.ja-sig.org/wiki/display/JSG/cas-user
>>>>>>
>>>>>>
>>>>>>
>>>>>> --****
>>>>>>
>>>>>> You are currently subscribed to cas-user@lists.jasig.org as:
>>>>>> geoff.whitta...@unf.edu To unsubscribe, change settings or access
>>>>>> archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user****
>>>>>>
>>>>>>
>>>>>> --
>>>>>> You are currently subscribed to cas-user@lists.jasig.org as:
>>>>>> kate...@gmail.com
>>>>>> To unsubscribe, change settings or access archives, see
>>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user****
>>>>>>
>>>>>> ** **
>>>>>>
>>>>>> --
>>>>>> You are currently subscribed to cas-user@lists.jasig.org as: 
>>>>>> geoff.whitta...@unf.edu
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> To unsubscribe, change settings or access archives, see 
>>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user****
>>>>>>
>>>>>>  --
>>>>>> You are currently subscribed to cas-user@lists.jasig.org as: 
>>>>>> kate...@gmail.com
>>>>>> To unsubscribe, change settings or access archives, see 
>>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>>>>>>
>>>>>>
>>>>> --
>>>>> You are currently subscribed to cas-user@lists.jasig.org as: 
>>>>> jrautur...@gmail.com
>>>>> To unsubscribe, change settings or access archives, see 
>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>>>>>
>>>>>
>>>>
>>>>
>>>> --
>>>> Jérôme Rautureau
>>>> Développeur Systèmes - CdA La Rochelle
>>>>
>>>
>>>
>>>
>>> --
>>> Jérôme Rautureau
>>> Développeur Systèmes - CdA La Rochelle
>>>
>>
>>
>>
>> --
>> Jérôme Rautureau
>> Développeur Systèmes - CdA La Rochelle
>>
>
>
>
> --
> Jérôme Rautureau
> Développeur Systèmes - CdA La Rochelle
>



-- 
Jérôme Rautureau
Développeur Systèmes - CdA La Rochelle

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to