[cas-user] Re: Re: [cas-user] [cas-user] Re: Re: [cas-user] cas service not authorized proxy

[zjzhao]

Thank you very much Misagh, maybe I have to look in the client code to see what happened on the client side with the callback, I can see nothing more then a normal http call on the server side function. So do you have any idea how can we test with localhost? which is not possible to reach from the cas server?

Misagh Moayyed 在 Wed, 31 Dec 2014 10:50:36 写道：

There is no localhost-specific functionality. The fact that this works when you deploy cas on localhost, the same box that hosts your application, and does not work when you deploy cas on a separate server means an issue with the network. Your CAS callback probably refers to localhost which of course the CAS server does not know about and cannot reach. Use FQDNs and make sure the two can reach each other. Simply returning true will have pretty much no effect to what you are trying to do.   

On Dec 31, 2014, at 3:22 AM, zjzhao <zjz...@miitgxt.com> wrote:

hi Misagh,
     thank you, I have fixed this, but I still get null session on the client side. do you have any idea why it happens? if I deploy cas on my local machine, it works fine, but if I deploy it on the server, it is not working. I figured out there is a function  

 @Override
    public boolean isValidEndPoint(final URL url) {
       
        System.out.println("this is the host: "+url.getHost());
        if (url.getHost().contains("localhost"))
            return true;

which causes the server cant visit localhost, and throws an exception. but the client cookie is still null even if I return it to true anyway, any hint?





Misagh Moayyed 在 Tue, 30 Dec 2014 20:20:02 写道：

It's not something you do with the client. You configure it at the server:
http://jasig.github.io/cas/4.0.x/installation/Service-Management.html
--
Misagh @ K9Mail on Android

On December 30, 2014 8:23:49 PM MST, zjzhao wrote:

thank you very much, can you tell me how to do it with .net client?


Misagh Moayyed 在 Tue, 30 Dec 2014 10:36:17 写道：

This is because proxy authn is turned off by default. Set the proxy flag in your service registry and off it goes.

On Dec 30, 2014, at 4:04 AM, zjzhao <zjz...@miitgxt.com> wrote:

<="" span="">http://localhost/tc/Restricted/AdministratorsRoleOnly/default.aspx] attempted to proxy, but is not allowed.>

-- 
You are currently subscribed to cas-user@lists.jasig.org as: zjz...@miitgxt.com
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: mmoay...@unicon.net
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: zjz...@miitgxt.com
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: mmoay...@unicon.net
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: zjz...@miitgxt.com
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user