<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Thank you. Will do that and see how it goes. I hope my hair grows back.... <br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Rene<span id="ms-outlook-android-cursor"></span><br>
<br>
</div>
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
<span id="OutlookSignature">
<div dir="auto" style="direction: ltr; margin: 0; padding: 0; font-family: sans-serif; font-size: 11pt; color: black; ">
Get <a href="https://aka.ms/ghei36">Outlook for Android</a></div>
</span><br>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Hucker, Taylor <taylor.hucker@tamucc.edu><br>
<b>Sent:</b> Friday, March 26, 2021 4:23:15 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: CAS authentication issue</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
@font-face
{font-family:"Segoe UI"}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.x_MsoHyperlink
{color:blue;
text-decoration:underline}
span.x_EmailStyle19
{font-family:"Calibri",sans-serif;
color:windowtext}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
ol
{margin-bottom:0in}
ul
{margin-bottom:0in}
-->
</style>
<div lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="x_WordSection1">
<p class="x_MsoNormal">Took us a few weeks to rule out CAS then our Banner Admin did this:</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"><span style="font-size:10.5pt; font-family:Symbol">·</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif">
</span><span style="font-family:"Segoe UI",sans-serif">Assumes tomcat is running as user banner</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif">
</span></p>
<p class="x_MsoNormal"><span style="font-size:10.5pt; font-family:Symbol">·</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif">
</span><span style="font-size:10.5pt; font-family:Symbol">·</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif"> sudo to root
</span></p>
<p class="x_MsoNormal"><span style="font-size:10.5pt; font-family:Symbol">·</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif">
</span><span style="font-size:12.0pt; font-family:"Segoe UI",sans-serif">echo -e "banner soft nofile 65536\nbanner hard nofile 65536" > /etc/security/limits.d/99-banner.conf</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif">
</span></p>
<p class="x_MsoNormal"><span style="font-size:10.5pt; font-family:Symbol">·</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif">
</span><span style="font-size:12.0pt; font-family:"Segoe UI",sans-serif">exit root and restart banner user processes</span><span style="font-size:10.5pt; font-family:"Segoe UI",sans-serif"></span></p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
<div>
<p class="x_MsoNormal"><span style="color:black"> </span></p>
<p class="x_MsoNormal" style="background:white"><span style="color:black">Thanks,</span></p>
<p class="x_MsoNormal" style="background:white"><span style="color:black">Taylor</span></p>
<p class="x_MsoNormal" style="background:white"><b><span style="font-family:"Tahoma",sans-serif; color:black"> </span></b><span style="color:black"></span></p>
<p class="x_MsoNormal" style="background:white"><b><span style="font-family:"Tahoma",sans-serif; color:black">--------------------------------</span></b><span style="color:black"></span></p>
<p class="x_MsoNormal" style="background:white"><b><span style="font-family:"Tahoma",sans-serif; color:black">Taylor Hucker</span></b><span style="font-size:10.0pt; font-family:"Tahoma",sans-serif; color:black"><br>
Applications System Administrator<br>
Texas A&M University - Corpus Christi<br>
</span><span style="color:black; background:white"><a href="mailto:Taylor.Hucker@tamucc.edu"><span style="color:#0563C1">Taylor.Hucker@tamucc.edu</span></a></span><span style="color:black"></span></p>
</div>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt; color:black">From:
</span></b><span style="font-size:12.0pt; color:black">users <users-bounces@shibboleth.net> on behalf of Rene Paquin <rpaquin@wlu.ca><br>
<b>Date: </b>Friday, March 26, 2021 at 2:45 PM<br>
<b>To: </b>Shib Users <users@shibboleth.net><br>
<b>Subject: </b>RE: CAS authentication issue</span></p>
</div>
<p class="x_MsoNormal">Hi Taylor,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Thanks for the response. Our issue is with Ellucian Banner. I will look into this. What did you set the file limit to?</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Thanks again,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Rene</p>
<p class="x_MsoNormal"> </p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal"><b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of
</b>Hucker, Taylor<br>
<b>Sent:</b> March 26, 2021 3:35 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Subject:</b> Re: CAS authentication issue</p>
</div>
</div>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Rene,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">We had a similar issue with an Ellucian application.</p>
<p class="x_MsoNormal">Which unexplained IdP reboots seemed to clear items up but wasn’t the cause it was just coincidental it worked.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Our issue was an open file limit on our linux application side (Ellucian banner, not IdP).
</p>
<p class="x_MsoNormal"> </p>
<div>
<p class="x_MsoNormal"><span style="color:black"> </span></p>
<p class="x_MsoNormal" style="background:white"><span style="color:black">Thanks,</span></p>
<p class="x_MsoNormal" style="background:white"><span style="color:black">Taylor</span></p>
<p class="x_MsoNormal" style="background:white"><b><span style="font-family:"Tahoma",sans-serif; color:black"> </span></b></p>
<p class="x_MsoNormal" style="background:white"><b><span style="font-family:"Tahoma",sans-serif; color:black">--------------------------------</span></b></p>
<p class="x_MsoNormal" style="background:white"><b><span style="font-family:"Tahoma",sans-serif; color:black">Taylor Hucker</span></b><span style="font-size:10.0pt; font-family:"Tahoma",sans-serif; color:black"><br>
Applications System Administrator<br>
Texas A&M University - Corpus Christi<br>
</span><span style="color:black; background:white"><a href="mailto:Taylor.Hucker@tamucc.edu"><span style="color:#0563C1">Taylor.Hucker@tamucc.edu</span></a></span></p>
</div>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal"> </p>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt; color:black">From:
</span></b><span style="font-size:12.0pt; color:black">users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> on behalf of Rene Paquin <<a href="mailto:rpaquin@wlu.ca">rpaquin@wlu.ca</a>><br>
<b>Date: </b>Friday, March 26, 2021 at 1:43 PM<br>
<b>To: </b>Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<b>Subject: </b>CAS authentication issue</span></p>
</div>
<p class="x_MsoNormal">Since moving to IDP 4.01 we are having some CAS authentication issues. It seems quite random, maybe 2 -3 times a week and a reboot of one or sometimes both IDP servers resolves the issue until it happens again. Here is what is happening</p>
<p class="x_MsoNormal"> </p>
<ol start="1" type="1" style="margin-top:0in">
<li class="x_MsoNormal" style="">User browser accesses CAS application</li><li class="x_MsoNormal" style="">Browser is redirected to IDP login page</li><li class="x_MsoNormal" style="">User enters credential (browser) authenticated at IDP</li><li class="x_MsoNormal" style="">IDP sent a CAS ticket back to the browser, and redirect the browser back to CAS application</li><li class="x_MsoNormal" style="">Browser presents the CAS ticket number to CAS application</li><li class="x_MsoNormal" style="">CAS application server sends ticket validation request to IDP server</li><li class="x_MsoNormal" style="">IDP validates the ticket, and return to the CAS application server a SOAP wrapped SAML response.
</li><li class="x_MsoNormal" style="">User only sees a blank page in the browser</li></ol>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">When it’s working, between step 7 and 8, it should be the CAS application servers received SOAP message and continue to display the resources to user in the browser.
</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Any ideas? This is really puzzling us.</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal">Thanks,</p>
<p class="x_MsoNormal"> </p>
<p class="x_MsoNormal" style=""><span style="font-size:12.0pt; font-family:"Times New Roman",serif">********************************<br>
Rene Paquin - Systems Administrator <br>
Wilfrid Laurier University<br>
Waterloo, Ontario<br>
(519)884-0710 x3795<br>
<a href="mailto:rpaquin@wlu.ca" target="_blank">rpaquin@wlu.ca</a></span></p>
<p class="x_MsoNormal"> </p>
</div>
</div>
</body>
</html>