cas5.3X Multiple system login

李雁敏

unread,

Apr 11, 2019, 9:21:30 PM4/11/19

to CAS Community

With cas5.3x, in the LAN, multiple different systems are connected to the same cas, and you need to log in again when you enter different systems.

How do I log in once to enter different systems without logging in? This place is very confused, I found that tiket is saved under / service

Andy Ng

unread,

Apr 11, 2019, 9:51:18 PM4/11/19

to CAS Community

Hi Lee,

This should not happen, you should be able to login once and it will be fine, please provider some more info, specifically in:

- Are you using https or http? http SSO for CAS will not work, if so please change to using https

- Do you have your debug log, can you see any issue there?

- What is your ticketing system? Are you using the default ticketing system?

More information will help us deduce your issue.

Cheers!

- Andy

李雁敏

unread,

Apr 12, 2019, 4:31:14 AM4/12/19

to CAS Community

I am in the LAN, there is no https protocol.

I can understand that in the hppt protocol, there is always no way to achieve one login, and multiple systems are free to log in?

在 2019年4月12日星期五 UTC+8上午9:21:30，李雁敏写道：

Andy Ng

unread,

Apr 12, 2019, 4:56:50 AM4/12/19

to CAS Community

Hi Lee,

CAS 5.3.x only works when you use https due to security reason. You cannot use http if you don't change CAS.

There might be work around, but they will be highly discourage and I haven't try it myself.

One way you can try to modified (again I didn't tested this and not responsible if it don't work) is this:
https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html#ticket-granting-cookie

Maybe you can try setting this cas.tgc.secure=true to false, maybe it will work...

Otherwise can't help you more...

- Andy

李雁敏

unread,

Apr 12, 2019, 5:09:36 AM4/12/19

to CAS Community

Ok, thank you very much for your answer.

在 2019年4月12日星期五 UTC+8上午9:21:30，李雁敏写道：

With cas5.3x, in the LAN, multiple different systems are connected to the same cas, and you need to log in again when you enter different systems.

Andy Ng

unread,

Apr 12, 2019, 5:14:45 AM4/12/19

to CAS Community

No problem!

I am curious to know, did my workaround worked or not? If worked next time I can recommend with confidence.

Cheers!

- Andy

李雁敏

unread,

Apr 12, 2019, 6:02:09 AM4/12/19

to CAS Community

I have not installed https certificate on the LAN, I am getting this certificate, the verification is successful, I reply to you

在 2019年4月12日星期五 UTC+8上午9:21:30，李雁敏写道：

With cas5.3x, in the LAN, multiple different systems are connected to the same cas, and you need to log in again when you enter different systems.

李雁敏

unread,

Apr 16, 2019, 8:54:47 PM4/16/19

to CAS Community

I configured the https certificate and also logged in successfully. However, it still does not solve the problem of one login and multiple applications no longer log in.

I found the JSESSIONID when I located it. This JSESSIONID is in the path of different applications. When cas is verifying the cookie, will JSESSIONID affect it?

在 2019年4月12日星期五 UTC+8上午9:21:30，李雁敏写道：

With cas5.3x, in the LAN, multiple different systems are connected to the same cas, and you need to log in again when you enter different systems.

Andy Ng

unread,

Apr 16, 2019, 9:22:16 PM4/16/19

to CAS Community

Hmm... interesting, don't know why it doesn't work...

For your question about JSESSIONID, CAS mostly do not relies on JSESSIONID to check if user login-ed or not.

Instead, CAS will generate a cookie called TGC cookie, and look at this instead.

About the login problem, can you enable debug logs (https://apereo.github.io/cas/5.3.x/installation/Troubleshooting-Guide.html#review-logs) and show the log to this group (of course need to hide the sensitive information),

because it is hard to debug without more information.

Cheers!

- Andy

李雁敏

unread,

Apr 22, 2019, 10:34:31 PM4/22/19

to CAS Community

Yes, I got the tgc information when I entered the second application, but I still need to log in to get in. At this time, tgc is regenerated.

Google also made some configuration information, but it didn't work.

在 2019年4月12日星期五 UTC+8上午9:21:30，李雁敏写道：

With cas5.3x, in the LAN, multiple different systems are connected to the same cas, and you need to log in again when you enter different systems.

Łukasz Woźniak

unread,

Jun 12, 2019, 5:53:48 PM6/12/19

to CAS Community

i got the same problem with version 5.3.10. But I saw that when i'm again on login page. when i hit F5 it will log me in.

Łukasz Woźniak

unread,

Jun 13, 2019, 3:46:00 AM6/13/19

to CAS Community

Solved. The problem in my case was in FirePHP:

Invalid cookie.

 Required user-agent Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36 FirePHP/4Chrome
  does not match     Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36 FirePHP/4Chrome FirePHP/4Chrome

Reply all

Reply to author

Forward