• Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Major Major
    • 4.0RC5
    • 4.0RC3
    • Général
    • None

      I had installed the lastest version of Ametys 4.0RC3
      I had added population in administrator's interface but when i choose CAS for authentifiaction method, I have a message who says "'L'url de rappel du proxy n'a pu être authentifiée."

      I don't understand...

          [CMS-8204] Use CAS for authentification

          Ok, it was a bug, I fixed it.

          Simon Prieul (Inactive) added a comment - Ok, it was a bug, I fixed it.

          BUARD added a comment -

          Ok, I continue, this morning I have change configuration of back office in fact I realise this night that I'm not in https for BO so I change that and proxy-tickets are working for BO

          But not for FO and that for all pages !!!

          Thanks for answers !!

          BUARD added a comment - Ok, I continue, this morning I have change configuration of back office in fact I realise this night that I'm not in https for BO so I change that and proxy-tickets are working for BO But not for FO and that for all pages !!! Thanks for answers !!

          BUARD added a comment -

          I've got logs but only for the front not for back-office ? And I don't understand, why ...

          That's what I've got for front :

          Caused by: org.jasig.cas.client.validation.TicketValidationException:
          L'url de rappel du proxy 'https://ent-demo.univ-lemans.fr/plugins/core/authenticate/0?proxy=true&contexts=%2Fsites%2Fent-new%2C%2Fsites-fo%2Fent-new' n'a pu être authentifiée.

          Previously, in Ametys 3.5 or 3.8 , I've got but not now...

          BUARD added a comment - I've got logs but only for the front not for back-office ? And I don't understand, why ... That's what I've got for front : Caused by: org.jasig.cas.client.validation.TicketValidationException: L'url de rappel du proxy 'https://ent-demo.univ-lemans.fr/plugins/core/authenticate/0?proxy=true&contexts=%2Fsites%2Fent-new%2C%2Fsites-fo%2Fent-new' n'a pu être authentifiée. Previously, in Ametys 3.5 or 3.8 , I've got but not now...

          It seems that CAS application does not succeed to authenticate on the Ametys callback URl and thus the PGT is not created.
          Any error stacktrace from Ametys application ?

          Simon Prieul (Inactive) added a comment - It seems that CAS application does not succeed to authenticate on the Ametys callback URl and thus the PGT is not created. Any error stacktrace from Ametys application ?

          BUARD added a comment -

          Yes, you're right...
          No I can not see the content from the back-office when I check proxy-tickets...

          BUARD added a comment - Yes, you're right... No I can not see the content from the back-office when I check proxy-tickets...

          This happens when you're trying to view the page on which the proxied-content service is displayed, am I right? Are you able to see the content from the back-office ?

          Simon Prieul (Inactive) added a comment - This happens when you're trying to view the page on which the proxied-content service is displayed, am I right? Are you able to see the content from the back-office ?

          BUARD added a comment - - edited

          That's what I think for the last point...

          The application which will be the source of my service 'proxied content with cas authentication' is coded in PHP so I don't know how to put this parameter..

          I join my CAS log ! logCAS.txt

          BUARD added a comment - - edited That's what I think for the last point... The application which will be the source of my service 'proxied content with cas authentication' is coded in PHP so I don't know how to put this parameter.. I join my CAS log ! logCAS.txt

          Do you have any error log/stacktrace to provide ?

          Simon Prieul (Inactive) added a comment - Do you have any error log/stacktrace to provide ?

          For the last point, I'm not talking about Ametys application, but about the application which will be the source of the service 'proxied content with cas authentication'

          Simon Prieul (Inactive) added a comment - For the last point, I'm not talking about Ametys application, but about the application which will be the source of the service 'proxied content with cas authentication'

          BUARD added a comment -

          Thanks to HELP ME !!!

          BUARD added a comment - Thanks to HELP ME !!!

          BUARD added a comment -
          • Your CAS credential provider configuration must not use "Gateway mode" ("Utiliser le mode passerelle") => DONE BUT NOT WORKING !
          • Ametys server must use HTTPS => DONE BUT NOT WORKING !
          • Ametys server must have an HTTPS certificate trusted by your CAS server => DONE BUT NOT WORKING !
          • The proxied application must accept proxys: in the CAS Validation Filter in your web.xml file => I check in "mode d'authentification" > "Autoriser n'importe quel proxy" but I'm not sure that's what you want ?

          BUARD added a comment - Your CAS credential provider configuration must not use "Gateway mode" ("Utiliser le mode passerelle") => DONE BUT NOT WORKING ! Ametys server must use HTTPS => DONE BUT NOT WORKING ! Ametys server must have an HTTPS certificate trusted by your CAS server => DONE BUT NOT WORKING ! The proxied application must accept proxys: in the CAS Validation Filter in your web.xml file => I check in "mode d'authentification" > "Autoriser n'importe quel proxy" but I'm not sure that's what you want ?

          Ok, you need the following requirements:

          • Your CAS credential provider configuration must not use "Gateway mode" ("Utiliser le mode passerelle")
          • Ametys server must use HTTPS
          • Ametys server must have an HTTPS certificate trusted by your CAS server
          • The proxied application must accept proxys:
            <init-param>
              <param-name>acceptAnyProxy</param-name>
              <param-value>true</param-value>
            </init-param>

            in the CAS Validation Filter in your web.xml file

          Simon Prieul (Inactive) added a comment - Ok, you need the following requirements: Your CAS credential provider configuration must not use "Gateway mode" ("Utiliser le mode passerelle") Ametys server must use HTTPS Ametys server must have an HTTPS certificate trusted by your CAS server The proxied application must accept proxys: <init-param> <param-name> acceptAnyProxy </param-name> <param-value> true </param-value> </init-param> in the CAS Validation Filter in your web.xml file

          BUARD added a comment -

          I need proxy tickets to use service "proxied content with cas authentification" who needs proxy tickets and not only service ticket

          BUARD added a comment - I need proxy tickets to use service "proxied content with cas authentification" who needs proxy tickets and not only service ticket

          Why do you want to use proxy tickets ?

          Simon Prieul (Inactive) added a comment - Why do you want to use proxy tickets ?

          BUARD added a comment -

          I have a problem with proxy tickets with CAS
          I try to use the function "ask Proxy-tickets" but it doesn't work

          In a first time, I want to know where are stocked the tickets, in configuration, I change database who stock ticket but I don't see which tables save that ?

          BUARD added a comment - I have a problem with proxy tickets with CAS I try to use the function "ask Proxy-tickets" but it doesn't work In a first time, I want to know where are stocked the tickets, in configuration, I change database who stock ticket but I don't see which tables save that ?

          BUARD added a comment -

          OK. It's resolved by RC4

          Thank you !
          Regards,
          Jeremy

          BUARD added a comment - OK. It's resolved by RC4 Thank you ! Regards, Jeremy

          Hello,

          I think it was fixed last week : RUNTIME-2435
          Try to download the latest nightly (or you can wait for the next milestone), and tell me if it is OK.

          Regards,
          Simon.

          Simon Prieul (Inactive) added a comment - Hello, I think it was fixed last week : RUNTIME-2435 Try to download the latest nightly (or you can wait for the next milestone), and tell me if it is OK. Regards, Simon.

            sprieul Simon Prieul (Inactive)
            jbuard BUARD
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: