CAS authentication issue

[Rene Paquin]

Hi Taylor,

Thanks for the response.  Our issue is with Ellucian Banner.  I will look into this.  What did you set the file limit to?

Thanks again,

Rene

From: users <users-bounces at shibboleth.net> On Behalf Of Hucker, Taylor
Sent: March 26, 2021 3:35 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: CAS authentication issue

Rene,

We had a similar issue with an Ellucian application.
Which unexplained IdP reboots seemed to clear items up but wasn't the cause it was just coincidental it worked.

Our issue was an open file limit on our linux application side (Ellucian banner, not IdP).


Thanks,
Taylor

--------------------------------
Taylor Hucker
Applications System Administrator
Texas A&M University - Corpus Christi
Taylor.Hucker at tamucc.edu<mailto:Taylor.Hucker at tamucc.edu>


From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> on behalf of Rene Paquin <rpaquin at wlu.ca<mailto:rpaquin at wlu.ca>>
Date: Friday, March 26, 2021 at 1:43 PM
To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: CAS authentication issue
Since moving to IDP 4.01 we are having some CAS authentication issues. It seems quite random, maybe 2 -3 times a week and a reboot of one or sometimes both IDP servers resolves the issue until it happens again. Here is what is happening


  1.  User browser accesses  CAS application
  2.  Browser is redirected to IDP login page
  3.  User enters credential (browser) authenticated at IDP
  4.  IDP sent a CAS ticket back to the browser, and redirect the browser back to  CAS application
  5.  Browser presents the CAS ticket number to  CAS application
  6.  CAS application server sends ticket validation request to IDP server
  7.  IDP validates the ticket, and return to the  CAS application server a SOAP wrapped SAML response.
  8.  User only sees a blank page in the browser

When it's working, between step 7 and 8, it should be the  CAS application servers received SOAP message and continue to display the resources to user in the browser.

Any ideas?   This is really puzzling us.

Thanks,

********************************
Rene Paquin - Systems Administrator
Wilfrid Laurier University
Waterloo, Ontario
(519)884-0710 x3795
rpaquin at wlu.ca<mailto:rpaquin at wlu.ca>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210326/b0bd28cf/attachment.htm>