Your proxy callback is failing which is why you're not getting a PGT. You
can see that by the fact that the AuthenticationHandler failed to
authenticate the proxy callback url. My guess is it got a server 400
error. I'm not sure why you would be generating a server 400 error.
Cheers,
Scott
On
I apologize for the long post.
After struggling through getting SPNEGO to work with CAS behind a load
balancer with an ActiveDirectory Kerberos KDC I decided to test the
configuration with an actual application, not the CAS login url. My CAS
configuration is as follows:
• F5 BigIP Load
