Re: [cas-user] SSO over 2 applications in same Tomcat

2011-08-02 Thread Roland Kofler
On 08/02/2011 03:43 AM, Scott Battaglia wrote: > he only other thing that could prevent it is if you are rejecting > cookies. Other than that I've never seen the CAS server not do SSO. making all web-apps https did it. thanks -- Roland Kofler Software Architect Free Software & Open Technologie

Re: [cas-user] SSO over 2 applications in same Tomcat

2011-08-01 Thread Scott Battaglia
For SSO to work, only the server has to be over HTTPs. The only other thing that could prevent it is if you are rejecting cookies. Other than that I've never seen the CAS server not do SSO. On Mon, Aug 1, 2011 at 11:35 AM, Roland Kofler wrote: > > > Are you running CAS over HTTP? We disable SS

Re: [cas-user] SSO over 2 applications in same Tomcat

2011-08-01 Thread Marvin Addison
> But both applications /share and /bonita are not https. > Must they? Not strictly, no, but we _strongly_ recommend that at least the application entry points are accessible over SSL. If you must overcome the default behavior of requiring SSL for transmitting the CASTGC cookie (and thereby enabl

Re: [cas-user] SSO over 2 applications in same Tomcat

2011-08-01 Thread Roland Kofler
> Are you running CAS over HTTP? We disable SSO over HTTP by default (we > require HTTPS) I am redirected to a HTTPS CAS login site. But both applications /share and /bonita are not https. Must they? -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To un

Re: [cas-user] SSO over 2 applications in same Tomcat

2011-08-01 Thread Scott Battaglia
Are you running CAS over HTTP? We disable SSO over HTTP by default (we require HTTPS) On Mon, Aug 1, 2011 at 11:29 AM, Roland Kofler wrote: > ** > Finally managed to integrate /bonita and /share and /alfresco with CAS > > But: I experience that I have to login to /bonita and /share separately >

[cas-user] SSO over 2 applications in same Tomcat

2011-08-01 Thread Roland Kofler
Finally managed to integrate /bonita and /share and /alfresco with CAS But: I experience that I have to login to /bonita and /share separately Not really SSO Is this because of the SimpleTestUsernamePasswordAuthenticationHandler? Would it go away if I have LDAP configured? Or do I need extra con