Cas server not working with http

64 views
Skip to first unread message

Suhas Bansude

unread,
May 12, 2020, 12:37:36 AM5/12/20
to cas-...@apereo.org

Hello Sir,

 

I have 2 cas clients(Spring Boot) which are working on App1(localhost:8080) and App1(localhost:8081) both are running on http port. My cas server is configured on localhost:8082 also running on http port.

 

My issue is when I authenticate App1 I am not able to access App2 without authentication. This issue is for only http.

 

For https cas server working fine.

 

Thanks

Suhas Bansude

Nguyen Tran Thanh Lam

unread,
May 12, 2020, 12:55:19 AM5/12/20
to cas-...@apereo.org
Hi,
Have you set this property to false?
image.png
BRs

Vào Th 3, 12 thg 5, 2020 vào lúc 11:37 'Suhas Bansude' via CAS Community <cas-...@apereo.org> đã viết:
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/4b1214ab1d9810002989f3184fa5ff6d%40mail.gmail.com.

Suhas Bansude

unread,
May 12, 2020, 1:34:09 AM5/12/20
to cas-...@apereo.org

Yes already set this property  

successfully disabled https with property (server.ssl.enabled=false)

 

My issue is

 

I have 2  sites /App1 and /App2. CAS was working without SSL in that it would take App1 to the login site and authenticate correctly. The issue was if you tried to access via another site(App2), it would ask you to sign in again.

Once I enabled SSL and tried it, it was working correctly. Once logged into client App1, it would automatically authenticate you in client App2.

Suhas Bansude

unread,
May 13, 2020, 1:45:48 AM5/13/20
to cas-...@apereo.org

Hi..

 

Please help me with this issue

 

I have 2  sites /App1 and /App2. CAS was working without SSL in that it would take App1 to the login site and authenticate correctly. The issue was if you tried to access via another site(App2), it would ask you to sign in again.

Once I enabled SSL and tried it, it was working correctly. Once logged into client App1, it would automatically authenticate you in client App2.

 

Thanks

Suhas Bansude

 

From: Suhas Bansude [mailto:suh...@mkcl.org]
Sent: 12 May 2020 11:04 AM
To: 'cas-...@apereo.org'
Subject: RE: [cas-user] Cas server not working with http

 

Yes already set this property  

successfully disabled https with property (server.ssl.enabled=false)

 

My issue is

 

I have 2  sites /App1 and /App2. CAS was working without SSL in that it would take App1 to the login site and authenticate correctly. The issue was if you tried to access via another site(App2), it would ask you to sign in again.

Once I enabled SSL and tried it, it was working correctly. Once logged into client App1, it would automatically authenticate you in client App2.

 

From: cas-...@apereo.org [mailto:cas-...@apereo.org] On Behalf Of Nguyen Tran Thanh Lam
Sent: 12 May 2020 10:25 AM
To: cas-...@apereo.org
Subject: Re: [cas-user] Cas server not working with http

 

Hi,

Root

unread,
May 16, 2020, 1:53:05 AM5/16/20
to CAS Community

Suhas,

Does your App1 and App2 have identical settings?, check in App2 settings  whether any HTTPS is enforced!, also check the App2 log if any and you can also monitor the cas log while authenticating in App2, see what error you get.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-...@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-...@apereo.org.

Suhas Bansude

unread,
May 18, 2020, 12:47:24 AM5/18/20
to cas-...@apereo.org

Hello Sir,

 

Not able to solve problem. Verified all settings

Please check attached cas properties file I am using.

 

For client in am using spring boot and cas client(Spring boot settings).

Please check below settings  client settings

 

App-1

cas.server-url-prefix=http://localhost:8082/cas

cas.server-login-url=http://localhost:8082/cas/login

cas.client-host-url=http://localhost:8080

cas.validation-type=CAS3

cas.redirect-after-validation =true

cas.use-session=false

cas.authentication-url-patterns=/common/home

 

 

App2-

cas.server-url-prefix=http://localhost:8082/cas

cas.server-login-url=http://localhost:8082/cas/login

cas.client-host-url=http://localhost:8081

cas.validation-type=CAS3

cas.redirect-after-validation =true

cas.use-session=false

cas.authentication-url-patterns=/common/home

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/b6dfc164-236a-4433-aea5-36f28347f3d1%40apereo.org.

application.properties
casSecuredApp-8080.json
casSecuredApp-8081.json

Ray Bon

unread,
May 19, 2020, 3:52:46 PM5/19/20
to cas-...@apereo.org
Suhas,

If it works with https, why do you want to enable the insecure htttp?

Turn your logs up to debug and see why CAS is not processing app2 SSO.

Ray

On Mon, 2020-05-18 at 10:17 +0530, 'Suhas Bansude' via CAS Community wrote:
Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. 
--
Ray Bon
Programmer Analyst
Development Services, University Systems

I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.

Gandhi

unread,
May 20, 2020, 6:07:14 AM5/20/20
to CAS Community
Hi, Can you check the TGT cookie and check whether 'secure' attribute is true / false? If true, this cookie will not be sent with http requests.
Reply all
Reply to author
Forward
0 new messages