Hello Just in case anybody stumbles upon this in the archives: I solved my problem by removing the "final" statement from AbstractCasFilter's constructServiceUrl() and then subclassed it for use as "CAS Validation Filter" in web.xml. Inside that overwritten method I now can check the X-Forwarded-Host HTTP header and then adjust the service URL.
best regards -christian- Am Wed, 30 Sep 2015 11:52:26 +0200 schrieb Christian Brunotte <c...@lathspell.de>: > Hello > > One of my applications is reachable und different domain names like > "www.foo.de", "www.bar.de" etc. which are configured as Apache > ServerName/ServerAlias. The requests are then proxies to a Glassfish > server which runs one single myapp.war file with a JSF application > that uses CAS authentication. > > I planned to use the X-Forwarded-Host header to tell which domain was > originally requested and depending on this change some CSS stylings. > > After adding CAS though, I ran into the problem that I have to supply a > "cas/service" or "cas/serverName" JNDI variable which is then used by > AuthenticationFilter and Cas20ProxyReceivingTicketValidationFilter to > create this service= URL parameter. If that service parameter always > contains the same values though, my clients are always redirected back > to the same domain name :-( > > What could I do to make the "service" parameter depending on the > X-Forwarded-Host header? > > > (I already tried to add a filter init param > "authenticationRedirectStrategyClass" > which modifies the redirect URL. The validation filter always sends the same > hostname though which is why the CAS server does not find the Service Ticket > and rejects the request.) > > best regards > > -christian- > -- Content Delivery Server & Dienste _________________________________________________________________________ NETCOLOGNE Gesellschaft für Telekommunikation mbH Am Coloneum 9 | 50829 Köln Tel: 0221 2222-8711 | Fax: 0221 2222-78711 www.netcologne.koeln Geschäftsführer: Jost Hermanns Mario Wilhelm Vorsitzender des Aufsichtsrates: Dr. Andreas Cerbe HRB 25580, AG Köln Diese Nachricht (inklusive aller Anhänge) ist vertraulich. Sollten Sie diese Nachricht versehentlich erhalten haben, bitten wir, den Absender (durch Antwort-E-Mail) hiervon unverzüglich zu informieren und die Nachricht zu löschen. Die E-Mail darf in diesem Fall weder vervielfältigt noch in anderer Weise verwendet werden. -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
