CAS in IdP v3

[Brian Biggs]

Thanks Scott.

I was able to change the path in the shib cookie, and that did solve 
part of the problem. But I've also got a JSESSIONID cookie with a path 
of /idp that I can't really mess with, and that seems to be causing 
jetty to insert ";jsessionid=blah" into the URL in between the location 
and the query string.

So "https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi?ST=blah" becomes 
"https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi;jsessionid=blah?ST=blah" 
in the redirect after ticket validation. I have no idea if that is being 
caused by the rewrite or it's just jetty doing it's thing.

So, regretfully I think my only option at this point is to coordinate a 
change in every CAS client with the deployment of v3.2.1.

Thanks everyone for you help.
-Brian

On 02/03/2016 09:30 AM, Cantor, Scott wrote:
> On 2/3/16, 12:17 PM, "users on behalf of Brian Biggs" <users-bounces at shibboleth.net on behalf of brian.biggs at sonoma.edu> wrote:
>
>
>
>> Is there a way to change or remove the path in the shib cookie?
> By adjusting the property in idp.properties, yes.
>
> https://wiki.shibboleth.net/confluence/display/IDP30/StorageConfiguration
>
> The cookie properties don't have a natural documentation spot right now so they're not very obvious.
>
> -- Scott
>

-- 

Brian Biggs
Sonoma State University