proxy setting questions

[Edward Chen]

I have Tomcat and cas 3.2.1 set up and up and running.  Now I want to
know how the proxy works in CAS

Before I edit anything in web.xml and my test.jsp, everything just
working fine. But, after I dump the following code in test.jsp

"
<%=request.getRemoteUser()%>

<%@ taglib prefix="cas" uri="/WEB-INF/castools.tld" %>

<cas:auth id="netid" scope="session"/>
"

I experience two problems
1. It redirect me to
https://secure.its.yale.edu/cas/servlet/login?service=http://edwardcwin.wri.wolfram.com:8080/Recruiting/test.jsp,
not to
https://edwardcwin.wri.wolfram.com:8443/cas/login?service=http://edwardcwin.wri.wolfram.com:8080/Recruiting/test.jsp
2. If I manually change to
https://edwardcwin.wri.wolfram.com:8443/cas/login?service=http://edwardcwin.wri.wolfram.com:8080/Recruiting/test.jsp,
I throw out an exception after I went through cas login page

org.apache.jasper.JasperException: Exception in JSP: /test.jsp:6

3:
4: <%@ taglib prefix="cas" uri="/WEB-INF/castools.tld" %>
5:
6: <cas:auth id="netid" scope="session"/>
7:
8:


Stacktrace:
        org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:451)
        org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:355)
        org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:329)
        org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)
        javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
        org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:163)
        org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:103)

*root cause
*

javax.servlet.ServletException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        org.apache.jasper.runtime.PageContextImpl.doHandlePageException(PageContextImpl.java:841)
        org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:774)
        org.apache.jsp.test_jsp._jspService(test_jsp.java:86)
        org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:98)
        javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
        org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:331)
        org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:329)
        org.apache.jasper.servlet.JspServlet.service(JspServlet.java:265)
        javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
        org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:163)


Here it the portion of my web.xml that I insert to


....
   <servlet>

    <servlet-name>ProxyTicketReceptor</servlet-name>

    <servlet-class>edu.yale.its.tp.cas.proxy.ProxyTicketReceptor</servlet-class>

   </servlet>

 

  <servlet-mapping>

    <servlet-name>ProxyTicketReceptor</servlet-name>

    <url-pattern>/CasProxyServlet</url-pattern>

  </servlet-mapping>

...

It seems to me that the process throw out the exception before this web.xml portion.

Can you tell what it's wrong?


Edward



 
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[Matteo Matteo]

Looks like you have SSL configuration issuer. Check that you have necessary public and private keys in you keystores on both servers and that a public key for your CA is added to your trusted JKS.
_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas