CAS authentication issue

[Rene Paquin]

Since moving to IDP 4.01 we are having some CAS authentication issues. It seems quite random, maybe 2 -3 times a week and a reboot of one or sometimes both IDP servers resolves the issue until it happens again. Here is what is happening


  1.  User browser accesses  CAS application
  2.  Browser is redirected to IDP login page
  3.  User enters credential (browser) authenticated at IDP
  4.  IDP sent a CAS ticket back to the browser, and redirect the browser back to  CAS application
  5.  Browser presents the CAS ticket number to  CAS application
  6.  CAS application server sends ticket validation request to IDP server
  7.  IDP validates the ticket, and return to the  CAS application server a SOAP wrapped SAML response.
  8.  User only sees a blank page in the browser

When it's working, between step 7 and 8, it should be the  CAS application servers received SOAP message and continue to display the resources to user in the browser.

Any ideas?   This is really puzzling us.

Thanks,

********************************
Rene Paquin - Systems Administrator
Wilfrid Laurier University
Waterloo, Ontario
(519)884-0710 x3795
rpaquin at wlu.ca<mailto:rpaquin at wlu.ca>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210326/daa68bfd/attachment.htm>