Shibboleth setup Cas redirect Issue

Juan Quintanilla jquin014 at fiu.edu
Mon Oct 17 19:51:49 BST 2011


Hi,

I just recently configured Shibboleth IDP using CAS Authentication and I'm running into the problem were after Authenticating with CAS it does not redirect you back to the Shibboleth SP.  Cas authenticates my username and The url contains the service ticket provided by CAS but in my case it just hangs and the only thing the idp-process.log contains is the following:

14:20:15.926 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:460] - Selecting appropriate login handler from filtered set {urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified=edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler at 53e64a3b, urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport=edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler at 53e64a3b}
14:20:15.926 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:493] - Authenticating user with login handler of type edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler
14:20:15.927 - DEBUG [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:169] - Storing LoginContext to StorageService partition loginContexts, key 2ae92b27-d566-4269-9d76-5e4b3cd3e828
14:20:15.927 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler:66] - Redirecting to https://hostname:443/idp/Authn/RemoteUser

My setup is Tomcat 6 using jsvc. Has anybody encountered a similar issue.

Thanks!


___________________
Juan Quintanilla
UTS - Enterprise Group
305-348-6573
jquin014 at fiu.edu
________________________________________
From: users-bounces at shibboleth.net [users-bounces at shibboleth.net] on behalf of Terry Soucy [terry.soucy at unb.ca]
Sent: Friday, September 23, 2011 1:01 PM
To: Shib Users
Subject: Re: Shibboleth setup.. So close but can use some help..

Hi Juan,

We just completed our IdP setup to auth against our CAS server (instead
of ldap).  All information was grabbed from the following URL ..

https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration

The only thing they left out (I thought it was obvious, but you never
know) was that you have to comment out the standard UsernamePassword
login handler, since you'll be using the RemoteUser handler supplied in
the documentation.

Terry

On 09/23/2011 01:28 PM, Juan Quintanilla wrote:
> Hi,
>
> Has anyone setup Shibboleth to work with CAS? If so can anyone provide some information regarding that initial setup.

--
Terry Soucy, Systems Analyst             Integrated Technology Services
University of New Brunswick, Fredericton Campus  http://www.unbf.ca/its
Voice: 506.447.3018     Fax: 506.453.3590    E-mail: terry.soucy at unb.ca
**    ITS is a scent-reduced workplace - www.unbf.ca/its/policies    **
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list