CA 5.0.3 SPENGO Issues: SPNEGO Authorization header not found under Authorization

677 views
Skip to first unread message

RJ

unread,
Feb 27, 2017, 10:37:41 AM2/27/17
to CAS Community
CAS 5.0.3 ; Windows AD: 2008 R2 ; Client: Windows 7

2017-02-27 01:41:56,071 DEBUG [org.apereo.cas.web.support.WebUtils] - <Evaluating request to determine if warning cookie should be generated>
2017-02-27 01:41:56,098 WARN [org.apereo.cas.web.flow.SpnegoCredentialsAction] - <SPNEGO Authorization header not found under Authorization or it does not begin with the prefix NTLM >
2017-02-27 01:41:56,100 WARN [org.apereo.cas.web.flow.SpnegoCredentialsAction] - <No credentials detected. Navigating to error...>
2017-02-27 01:41:56,102 INFO [org.apereo.cas.web.flow.SpnegoCredentialsAction] - <Action execution disallowed; pre-execution result is 'error'>


login-webflow.xml:
    <action-state id="initializeLoginForm">
        <evaluate expression="initializeLoginAction" />
        <!--
        <transition on="success" to="viewLoginForm"/>
        -->
        <transition on="success" to="startSpnegoAuthenticate"/>
    </action-state>


Spengo seems to be having issues in 5.0.3. I have tried a lot of cryptos and properties.

I have seen Win 7 sending NTLM first, and CAS is supposed to send the Negotiate with 401.. that seems to be missing.

Did you guys get it working ? Please share cas properties. thanks

RJ Guroo

unread,
Mar 4, 2017, 6:11:15 AM3/4/17
to cas-...@apereo.org
Mixed Mode is not working in CAS 5.0.x ?

cas.authn.spnego.mixedModeAuthentication=true
cas.authn.spnego.send401OnAuthenticationFailure=false

--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/4d8c0d08-8163-423f-b936-627c1c6f12a0%40apereo.org.

Reply all
Reply to author
Forward
0 new messages