CAS proxy validation failing

[Cantor, Scott]

On 3/4/19, 7:26 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

> If this is all true, is there any setting in Shibboleth that would stop it 
> from following the redirects?  Any other Shibboleth suggestions?

I don't know if just not following them is going to help you, but if you have control over the specific HttpClient instance it's using in the CAS validate action (is that documented in the config?), there is a setting on the builder class we built that lets you disable following them.

The docs I wrote in the wiki on HttpClientConfiguration are based on using a built-in bean that has fewer options on it. The underlying class called "net.shibboleth.utilities.java.support.httpclient.HttpClientBuilder" has more properties, one of which is httpFollowRedirects.

-- Scott