I confirmed that is seems related to the new TerminateWebSessionListener bean :
I use this workaround : https://issues.jasig.org/browse/CAS-1243, and the problem doesn't occurs anymore. 2013/5/17 Jérôme Rautureau <jrautur...@gmail.com> > Geoff ? > > have you a META-INF/context.xml file in your webapp ? > > > 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> > >> oups left IPs sorry... >> >> >> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> >> >>> Juste happened now : >>> >>> On click on add : >>> >>> GET add.html 302 Moved Temporarily sso-int.xxxxxxxxx.fr 0 B >>> 87.98.148.90:443 69ms >>> GET login?service=https%3A%...cegi_cas_security_check 302 Moved >>> Temporarily sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 81ms >>> GET j_acegi_cas_security_ch...int.xxxxxx.fr 302 Moved Temporarily >>> sso-int.xxxxxxxx.fr 0 B 87.98.148.90:443 94ms >>> GET manage.html 200 OK sso-int.xxxxxxx.fr 1,8 KB 87.98.148.90:443 83ms >>> >>> 4 requests >>> >>> >>> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> >>> >>>> To complete, i am in >>>> >>>> Tomcat 7.0.39 and 6.0.36 >>>> Apache 2.2.9 + page speed >>>> mod jk >>>> CAS 3.5.2 + remember me + jpa ticket registry + ldap authentication + >>>> PersonAttributes >>>> >>>> workers.properties : >>>> >>>> worker.cas.port=8010 >>>> worker.cas.host=localhost >>>> worker.cas.type=ajp13 >>>> worker.cas.socket_keepalive=1 >>>> worker.cas.socket_timeout=3 >>>> worker.cas.retries=2 >>>> worker.cas.reply_timeout=40000 >>>> worker.cas.recover_time=15 >>>> >>>> workers.conf >>>> JkWorkersFile /etc/apache2/workers.properties >>>> JkLogFile /var/log/apache2/mod_jk.log >>>> JkShmFile /var/log/apache2/mod_jk.shm >>>> JkLogLevel warn >>>> JkOptions +FlushHeader +FlushPackets +ForwardKeySize +ForwardURICompat >>>> -ForwardDirectories >>>> >>>> The same configuration was used on a cas 3.4.8 installation and there >>>> was no such issue... >>>> >>>> I have an other configuration with >>>> >>>> mod-proxy >>>> >>>> ProxyPass / ajp://localhost:8009/ >>>> ProxyPassReverse / ajp://localhost:8009/ >>>> >>>> and the same issue >>>> >>>> I have 4 serveurs with this issue. >>>> >>>> I have deactivated page speed for the test but the issu remains present. >>>> >>>> Thanks in advance >>>> >>>> >>>> >>>> 2013/5/16 Jérôme Rautureau <jrautur...@gmail.com> >>>> >>>>> Hi everybody, >>>>> >>>>> I have exactly the same issue. >>>>> >>>>> The only use case that comes with a fonctionnal UI is when I'am >>>>> totally lopout from CAS and when i'm doing a full login process. The other >>>>> times (with the remember me checkbox checked) the problem can appear (it's >>>>> not every time...) >>>>> >>>>> The problem is occuring with chrome and firefox (last version both), i >>>>> have not javascript errors in javascript console. >>>>> >>>>> And yes i'm loosing the jsession id as soon as i am clicking on a link >>>>> (edit or a add a new service). It's very strange (so i'm going directly in >>>>> the database to do my changes...). With firebug i have seen what the >>>>> jsessionid has changed between requests... >>>>> >>>>> >>>>> 2013/5/16 KaTeLmE <kate...@gmail.com> >>>>> >>>>>> The Apache Server can communicate with Tomcat using: >>>>>> - mod_proxy: >>>>>> http://stackoverflow.com/questions/956361/apache-tomcat-using-mod-proxy-instead-of-ajp >>>>>> http://tomcat.apache.org/tomcat-6.0-doc/proxy-howto.html >>>>>> - mod_proxy_ajp: >>>>>> http://www.zeitoun.net/articles/configure-mod_proxy_ajp-with-tomcat/start >>>>>> - mod_jk: http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html >>>>>> >>>>>> If, due a bad config, you not transfer the cookies from Apache to >>>>>> Tomcat (also Tomcat to Apache) the session cookie is lost and then a new >>>>>> Tomcat session is created in the next request. >>>>>> >>>>>> Can you test the CAS back-end without Apache Server (leave only the >>>>>> Tomcat) to avoid this behaviour? >>>>>> >>>>>> >>>>>> >>>>>> 2013/5/15 Whittaker, Geoffrey <geoff.whitta...@unf.edu> >>>>>> >>>>>> I’m not sure what you mean. Can you explain the reverse proxy? I’m >>>>>>> not using a separate apache instance, but I assume since tomcat’s >>>>>>> written >>>>>>> by the ASF that the underlying web server is Apache based. **** >>>>>>> >>>>>>> ** ** >>>>>>> >>>>>>> Does anyone else have any ideas what’s causing this? It’s becoming >>>>>>> incredibly frustrating. I ended up having to add a service directly to >>>>>>> the >>>>>>> database because I couldn’t get it to save after 6 attempts using the >>>>>>> web >>>>>>> interface.**** >>>>>>> >>>>>>> ** ** >>>>>>> >>>>>>> Geoff **** >>>>>>> >>>>>>> ** ** >>>>>>> >>>>>>> *From:* KaTeLmE [mailto:kate...@gmail.com] >>>>>>> *Sent:* Tuesday, May 7, 2013 2:45 PM >>>>>>> >>>>>>> *To:* cas-user@lists.jasig.org >>>>>>> *Subject:* Re: [cas-user] Changes not saving in Services Managment** >>>>>>> ** >>>>>>> >>>>>>> ** ** >>>>>>> >>>>>>> Seems java session loosing. Have you noted if the JSESSIONID cookie >>>>>>> changes during that intermittent requests?**** >>>>>>> >>>>>>> Jerome, in version 3.5.2 the TerminateWebSessionListener introduced >>>>>>> and proposed by you in 3.5.1 swf cas config was removed? Could be >>>>>>> related? >>>>>>> >>>>>>> I have a lazy idea how I solved that, but I can remember I disable >>>>>>> that feature after reading some issues.**** >>>>>>> >>>>>>> Geo, as I see u attach Apache logs... could be a bad reverse proxy >>>>>>> config between Apache + Tomcat??**** >>>>>>> >>>>>>> ** ** >>>>>>> >>>>>>> 2013/5/7 Whittaker, Geoffrey <geoff.whitta...@unf.edu>**** >>>>>>> >>>>>>> I did some googling and dug through some of the tomcat logs looking >>>>>>> for the PermGen issue. I don't see anything to indicate that's the >>>>>>> problem. But, it was definitely something I hadn't thought of. Thanks! >>>>>>> >>>>>>> Asside from not finding anything in the logs, from what I read, that >>>>>>> error primarily occurs when you're deploying lots of apps or apps with >>>>>>> lots >>>>>>> of classes. I don't know if CAS would qualify as that, but I do know >>>>>>> that >>>>>>> we're not cycling out war files. Also, I do a service restart on Tomcat >>>>>>> anytime I replace the war file to avoid any issues. >>>>>>> >>>>>>> >>>>>>> Jérôme, >>>>>>> >>>>>>> Which version of CAS do you use ? 3.5.2 >>>>>>> Do you see a round-trip to the CAS server (HTTP 302 to /cas/login) >>>>>>> when you try to save an update ? Yes, I am seeing HTTP 302 in the logs >>>>>>> when this happens, but I don't see "- Found" like I'm used to seeing. >>>>>>> Then >>>>>>> I get several web objects with status code 304. >>>>>>> >>>>>>> For example: >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>>> /services/j_acegi_cas_security_check?ticket=<ticket data> HTTP/1.1" 302 >>>>>>> - >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>>> /services/manage.html HTTP/1.1" 200 9601 >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>>> /css/services/cas.css HTTP/1.1" 304 - >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/cas.js >>>>>>> HTTP/1.1" 304 - >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>>> /js/MyInfusion.js HTTP/1.1" 304 - >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/services.js >>>>>>> HTTP/1.1" 304 - >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>>> /images/services/true.gif HTTP/1.1" 304 - >>>>>>> 139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET >>>>>>> /images/services/false.gif HTTP/1.1" 304 - >>>>>>> >>>>>>> >>>>>>> Geoff**** >>>>>>> >>>>>>> >>>>>>> -----Original Message----- >>>>>>> From: Alberto Cabello Sanchez [mailto:albe...@unex.es] >>>>>>> Sent: Monday, May 6, 2013 4:27 PM >>>>>>> To: cas-user@lists.jasig.org >>>>>>> Subject: Re: [cas-user] Changes not saving in Services Managment >>>>>>> >>>>>>> > I'm having an intermittent problem with Tomcat/CAS were sometimes >>>>>>> I'll >>>>>>> > click a link or button, etc and the page will flash like it's >>>>>>> doing a >>>>>>> > GET/POST and then nothing happens. >>>>>>> > >>>>>>> > For instance: I'm trying to make a change to service in the >>>>>>> Services >>>>>>> > Manager and I click save, it does it's post and redirects me to >>>>>>> > ManageServices main page, but the change didn't save. Often, I'll >>>>>>> > click edit to go into one and the browser flashes like it's about >>>>>>> to go the next page, but it just leaves me where I started. >>>>>>> > >>>>>>> > Is this a caching problem with the Tomcat server or is this a CAS >>>>>>> > problem... Any ideas? >>>>>>> >>>>>>> Hi, Geoff. >>>>>>> >>>>>>> I ran into that same trouble while setting up CAS for the first >>>>>>> time. I think it has to do with the infamous Tomcat "PermGen space >>>>>>> error", >>>>>>> but I didn't wrote it down :( >>>>>>> >>>>>>> Please check Tomcat log files and look for some clue. >>>>>>> >>>>>>> > Geoff >>>>>>> > >>>>>>> > -- >>>>>>> > You are currently subscribed to cas-user@lists.jasig.org as: >>>>>>> > albe...@unex.es To unsubscribe, change settings or access >>>>>>> archives, >>>>>>> > see http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>>>> >>>>>>> >>>>>>> >>>>>>> --**** >>>>>>> >>>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>>> geoff.whitta...@unf.edu To unsubscribe, change settings or access >>>>>>> archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>>> kate...@gmail.com >>>>>>> To unsubscribe, change settings or access archives, see >>>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>>>> >>>>>>> ** ** >>>>>>> >>>>>>> -- >>>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>>> geoff.whitta...@unf.edu >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> To unsubscribe, change settings or access archives, see >>>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user**** >>>>>>> >>>>>>> -- >>>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>>> kate...@gmail.com >>>>>>> To unsubscribe, change settings or access archives, see >>>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>>>> >>>>>>> >>>>>> -- >>>>>> You are currently subscribed to cas-user@lists.jasig.org as: >>>>>> jrautur...@gmail.com >>>>>> To unsubscribe, change settings or access archives, see >>>>>> http://www.ja-sig.org/wiki/display/JSG/cas-user >>>>>> >>>>>> >>>>> >>>>> >>>>> -- >>>>> Jérôme Rautureau >>>>> Développeur Systèmes - CdA La Rochelle >>>>> >>>> >>>> >>>> >>>> -- >>>> Jérôme Rautureau >>>> Développeur Systèmes - CdA La Rochelle >>>> >>> >>> >>> >>> -- >>> Jérôme Rautureau >>> Développeur Systèmes - CdA La Rochelle >>> >> >> >> >> -- >> Jérôme Rautureau >> Développeur Systèmes - CdA La Rochelle >> > > > > -- > Jérôme Rautureau > Développeur Systèmes - CdA La Rochelle > -- Jérôme Rautureau Développeur Systèmes - CdA La Rochelle -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
