Hi, I think you might have a problem with the callback url : //shiro-cas/ is the context of your webapp : so /http://localhost:8080/shiro-cas// matches */* in your webapp. In that case, the /casFilter/ must be defined for the */* url (not the /shiro-cas url unless you define : http://localhost:8080/shiro-cas/shiro-cas as your CAS service).
I'm surprised by your question on the admin role : what do you expect by protecting the /admin/** urls by the roles[admin] ? I thought you have some users with admin role who are the only one allowed to access these urls. Best regards, Jérôme -- View this message in context: http://shiro-user.582556.n2.nabble.com/Cant-Integrate-Shiro-with-CAS-tp7579234p7579247.html Sent from the Shiro User mailing list archive at Nabble.com.
