I do not see one.  Forgive my ignorance, but should I?

Geoff

From: Jérôme Rautureau [mailto:jrautur...@gmail.com]
Sent: Friday, May 17, 2013 1:44 PM
To: cas-user@lists.jasig.org
Subject: Re: [cas-user] Changes not saving in Services Managment

Geoff ?

have you a META-INF/context.xml file in your webapp ?

2013/5/16 Jérôme Rautureau <jrautur...@gmail.com<mailto:jrautur...@gmail.com>>
oups left IPs sorry...

2013/5/16 Jérôme Rautureau <jrautur...@gmail.com<mailto:jrautur...@gmail.com>>
Juste happened now :

On click on add :

GET add.html 302 Moved Temporarily 
sso-int.xxxxxxxxx.fr<http://sso-int.xxxxxxxxx.fr> 0 B 
87.98.148.90:443<http://87.98.148.90:443> 69ms
GET login?service=https%3A%...cegi_cas_security_check 302 Moved Temporarily 
sso-int.xxxxxxxx.fr<http://sso-int.xxxxxxxx.fr> 0 B 
87.98.148.90:443<http://87.98.148.90:443> 81ms
GET j_acegi_cas_security_ch...int.xxxxxx.fr<http://int.xxxxxx.fr> 302 Moved 
Temporarily sso-int.xxxxxxxx.fr<http://sso-int.xxxxxxxx.fr> 0 B 
87.98.148.90:443<http://87.98.148.90:443> 94ms
GET manage.html 200 OK sso-int.xxxxxxx.fr<http://sso-int.xxxxxxx.fr> 1,8 KB 
87.98.148.90:443<http://87.98.148.90:443> 83ms

4 requests

2013/5/16 Jérôme Rautureau <jrautur...@gmail.com<mailto:jrautur...@gmail.com>>
To complete, i am in

Tomcat 7.0.39 and 6.0.36
Apache 2.2.9 + page speed
mod jk
CAS 3.5.2 + remember me + jpa ticket registry + ldap authentication + 
PersonAttributes

workers.properties :

worker.cas.port=8010
worker.cas.host=localhost
worker.cas.type=ajp13
worker.cas.socket_keepalive=1
worker.cas.socket_timeout=3
worker.cas.retries=2
worker.cas.reply_timeout=40000
worker.cas.recover_time=15

workers.conf
JkWorkersFile /etc/apache2/workers.properties
JkLogFile /var/log/apache2/mod_jk.log
JkShmFile /var/log/apache2/mod_jk.shm
JkLogLevel warn
JkOptions +FlushHeader +FlushPackets +ForwardKeySize +ForwardURICompat 
-ForwardDirectories
The same configuration was used on a cas 3.4.8 installation and there was no 
such issue...
I have an other configuration with

mod-proxy

ProxyPass / ajp://localhost:8009/
ProxyPassReverse / ajp://localhost:8009/
and the same issue
I have 4 serveurs with this issue.
I have deactivated page speed for the test but the issu remains present.

Thanks in advance


2013/5/16 Jérôme Rautureau <jrautur...@gmail.com<mailto:jrautur...@gmail.com>>
Hi everybody,

I have exactly the same issue.
The only use case that comes with a fonctionnal UI is when I'am totally lopout 
from CAS and when i'm doing a full login process. The other times (with the 
remember me checkbox checked) the problem can appear (it's not every time...)
The problem is occuring with chrome and firefox (last version both), i have not 
javascript errors in javascript console.
And yes i'm loosing the jsession id as soon as i am clicking on a link (edit or 
a add a new service). It's very strange (so i'm going directly in the database 
to do my changes...). With firebug i have seen what the jsessionid has changed 
between requests...

2013/5/16 KaTeLmE <kate...@gmail.com<mailto:kate...@gmail.com>>
The Apache Server can communicate with Tomcat using:
- mod_proxy: 
http://stackoverflow.com/questions/956361/apache-tomcat-using-mod-proxy-instead-of-ajp
 http://tomcat.apache.org/tomcat-6.0-doc/proxy-howto.html
- mod_proxy_ajp: 
http://www.zeitoun.net/articles/configure-mod_proxy_ajp-with-tomcat/start
- mod_jk: http://tomcat.apache.org/tomcat-3.3-doc/mod_jk-howto.html
If, due a bad config, you not transfer the cookies from Apache to Tomcat (also 
Tomcat to Apache) the session cookie is lost and then a new Tomcat session is 
created in the next request.
Can you test the CAS back-end without Apache Server (leave only the Tomcat) to 
avoid this behaviour?


2013/5/15 Whittaker, Geoffrey 
<geoff.whitta...@unf.edu<mailto:geoff.whitta...@unf.edu>>

I'm not sure what you mean.  Can you explain the reverse proxy?  I'm not using 
a separate apache instance, but I assume since tomcat's written by the ASF that 
the underlying web server is Apache based.

Does anyone else have any ideas what's causing this?  It's becoming incredibly 
frustrating.  I ended up having to add a service directly to the database 
because I couldn't get it to save after 6 attempts using the web interface.

Geoff

From: KaTeLmE [mailto:kate...@gmail.com<mailto:kate...@gmail.com>]
Sent: Tuesday, May 7, 2013 2:45 PM

To: cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org>
Subject: Re: [cas-user] Changes not saving in Services Managment

Seems java session loosing. Have you noted if the JSESSIONID cookie changes 
during that intermittent requests?
Jerome, in version 3.5.2 the TerminateWebSessionListener introduced and 
proposed by you in 3.5.1 swf cas config was removed? Could be related?

I have a lazy idea how I solved that, but I can remember I disable that feature 
after reading some issues.
Geo, as I see u attach Apache logs... could be a bad reverse proxy config 
between Apache + Tomcat??

2013/5/7 Whittaker, Geoffrey 
<geoff.whitta...@unf.edu<mailto:geoff.whitta...@unf.edu>>
I did some googling and dug through some of the tomcat logs looking for the 
PermGen issue.  I don't see anything to indicate that's the problem.  But, it 
was definitely something I hadn't thought of.  Thanks!

Asside from not finding anything in the logs, from what I read, that error 
primarily occurs when you're deploying lots of apps or apps with lots of 
classes.  I don't know if CAS would qualify as that, but I do know that we're 
not cycling out war files.  Also, I do a service restart on Tomcat anytime I 
replace the war file to avoid any issues.


Jérôme,

Which version of CAS do you use ?  3.5.2
Do you see a round-trip to the CAS server (HTTP 302 to /cas/login) when you try 
to save an update ?  Yes, I am seeing HTTP 302 in the logs when this happens, 
but I don't see "- Found" like I'm used to seeing.  Then I get several web 
objects with status code 304.

For example:
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET 
/services/j_acegi_cas_security_check?ticket=<ticket data> HTTP/1.1" 302 -
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /services/manage.html 
HTTP/1.1" 200 9601
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /css/services/cas.css 
HTTP/1.1" 304 -
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/cas.js HTTP/1.1" 304 -
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/MyInfusion.js 
HTTP/1.1" 304 -
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /js/services.js HTTP/1.1" 
304 -
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /images/services/true.gif 
HTTP/1.1" 304 -
139.62.125.154 - - [07/May/2013:13:24:53 -0400] "GET /images/services/false.gif 
HTTP/1.1" 304 -


Geoff

-----Original Message-----
From: Alberto Cabello Sanchez [mailto:albe...@unex.es<mailto:albe...@unex.es>]
Sent: Monday, May 6, 2013 4:27 PM
To: cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org>
Subject: Re: [cas-user] Changes not saving in Services Managment

> I'm having an intermittent problem with Tomcat/CAS were sometimes I'll
> click a link or button, etc and the page will flash like it's doing a
> GET/POST and then nothing happens.
>
> For instance:  I'm trying to make a change to service in the Services
> Manager and I click save, it does it's post and redirects me to
> ManageServices main page, but the change didn't save.  Often, I'll
> click edit to go into one and the browser flashes like it's about to go the 
> next page, but it just leaves me where I started.
>
> Is this a caching problem with the Tomcat server or is this a CAS
> problem... Any ideas?

Hi, Geoff.

I ran into that same trouble while setting up CAS for the first time. I think 
it has to do with the infamous Tomcat "PermGen space error", but I didn't wrote 
it down :(

Please check Tomcat log files and look for some clue.

> Geoff
>
> --
> You are currently subscribed to 
> cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as:
> albe...@unex.es<mailto:albe...@unex.es> To unsubscribe, change settings or 
> access archives,
> see http://www.ja-sig.org/wiki/display/JSG/cas-user



--
You are currently subscribed to 
cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as: 
geoff.whitta...@unf.edu<mailto:geoff.whitta...@unf.edu> To unsubscribe, change 
settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to 
cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as: 
kate...@gmail.com<mailto:kate...@gmail.com>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


--
You are currently subscribed to 
cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as: 
geoff.whitta...@unf.edu<mailto:geoff.whitta...@unf.edu>














To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to 
cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as: 
kate...@gmail.com<mailto:kate...@gmail.com>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


--
You are currently subscribed to 
cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as: 
jrautur...@gmail.com<mailto:jrautur...@gmail.com>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


--
Jérôme Rautureau
Développeur Systèmes - CdA La Rochelle



--
Jérôme Rautureau
Développeur Systèmes - CdA La Rochelle



--
Jérôme Rautureau
Développeur Systèmes - CdA La Rochelle



--
Jérôme Rautureau
Développeur Systèmes - CdA La Rochelle



--
Jérôme Rautureau
Développeur Systèmes - CdA La Rochelle

--
You are currently subscribed to 
cas-user@lists.jasig.org<mailto:cas-user@lists.jasig.org> as: 
geoff.whitta...@unf.edu<mailto:geoff.whitta...@unf.edu>
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to