CASValidateURL is never called and cookie MOD_AUTH_CAS_S never created

232 views
Skip to first unread message

Michael Courcy

unread,
Dec 12, 2016, 3:21:51 PM12/12/16
to CAS Community
Hi 

We're facing a strange scenario :  

1) We submit the form to the CAS with login/password and the service : https://xxxx/cas/login?service=https://yyyy/c/portal/
2) The login and the  password are successful and we get a 302 to redirect to https://yyyy/c/portal/?ticket= ST-1462-WAVJXJe3zfeoewGKifBr-frontapp2_tomauth3 
3) But then we can see in the access_log of the cas that there's no request made to the CASValidateURL  ( https://xxxx/cas/serviceValidate) and cookie MOD_AUTH_CAS_S  is never sent to the browser 
4) We enter in an infinite loop redirection due to the fact that https://yyyy/c/portal/ is CAS protected but the missing cookie redirect to the https://xxxx/cas/login which then redirect to  https://yyyy/c/portal/ because the browser is already successfully connected to the cas and so on ....

I've been fighting the whole day to understand what was wrong here without getting any clue. I activate the debug but only get debug information from the other module but not from mod_auth_cas.

How could I investigate to see what's going on when mod_auth_cas treat the request https://yyyy/c/portal/?ticket= ST-1462-WAVJXJe3zfeoewGKifBr-frontapp2_tomauth3.

Thanks for your help

David Hawes

unread,
Dec 12, 2016, 6:00:08 PM12/12/16
to CAS Community
You'll want both:

LogLevel debug
CASDebug On

You should then be able to see what's going on in your error log.

Feel free to post log excerpts here and we'll figure out what's going on.

Michael Courcy

unread,
Dec 12, 2016, 7:01:57 PM12/12/16
to CAS Community

Ok we got it the _ (underscore) is not supported in the ticket format


--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/6d81f7e8-bc08-42ca-ab7b-2a8d234d6554%40apereo.org.
Reply all
Reply to author
Forward
0 new messages