> The settings they are talking about would go in your client application. > However, if you're protecting your application with mod_cas at the > Apache level, the Java CAS clients would have no effect anyway. Oops... my mistake, sorry. I saw "Tomcat" and that made me assume you were using the Java servlet filter. I suggest using that in stead of mod_cas. -- Velpi