CAS in IdP v3

[Cantor, Scott]

On 2/3/16, 4:44 PM, "users on behalf of Brian Biggs" <users-bounces at shibboleth.net on behalf of brian.biggs at sonoma.edu> wrote:



>13:29:42.783 - DEBUG 
>[org.eclipse.jetty.rewrite.handler.RuleContainer:166] - app
>lied 
>org.eclipse.jetty.rewrite.handler.RewritePatternRule[ht][/cas-server/login]
>[/idp/profile/cas/login]

Rewriting it to go to the actual IdP URL.

>Location:
>https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi;jsessionid=qq7wly12b
>jqbw1rg6ogoltdn?ticket=ST-1454534983074-PNvIpJ7iyd0KrHFy9drsCnoZV

And that, I guess, is the result of the IdP's CAS flow doing work. And suddenly there's a parameter stuck in there. Seems like that has to be a bug in the IdP...we'll have to see what Marvin thinks.

Don't quite see though how this could be something triggered by a rewrite, but I'm thinking maybe the issue has to do with that interfering with the normal JSESSIONID sequence due to the cookie issue, and causing it to appear back in the URL somehow that isn't typical. And then the bug is causing it to get copied inadvertently into the redirect back.

-- Scott