compatibility mod_cas v2 and cas v3.1 ?

[jehan procaccia]

jehan.procaccia wrote:
> Scott Battaglia wrote:
>> There's no reason it shouldn't work fine.  It appears that mod_cas 
>> isn't validating the ticket correctly for whatever reason.
>>
> Ok, I'll double check my certificates ...
Forget It, it's a stupidity of mine ! now it works fine,
I just forgot to configure corectly httpd.conf directives , CASLoginURL
and  CASHost weren't both pointing to the same CAS server !

157.159.21.100 - - [25/Jan/2008:20:44:26 +0100] "GET
/~procacci/restricted/ HTTP/1.1" 302 360
157.159.21.100 - - [25/Jan/2008:20:45:10 +0100] "GET
/~procacci/restricted/?ticket=ST-15-Og62DdFNUE9BOUY9kbdZ HTTP/1.1" 200 50818
157.159.21.100 - - [25/Jan/2008:20:45:10 +0100] "GET
/~procacci/restricted/index.php?=PHPE9568F35-D428-11d2-A769-00AA001ACF42
HTTP/1.1" 200 2146
157.159.21.100 - - [25/Jan/2008:20:45:10 +0100] "GET
/~procacci/restricted/index.php?=PHPE9568F34-D428-11d2-A769-00AA001ACF42
HTTP/1.1" 200 2524

> howaver, as I will rebuild httpd package with mod_cas for fedora  and 
> centos5, I'am still wondering if there's a more recent mod_cas 
> releases  (I'am using Mod_cas-2.0.11-esup-2.RC2.tar.gz) to integrate 
> into  ?

if there's a newer release (update of Mod_cas-2.0.11-esup-2.RC2.tar.gz), 
let me know so that I integrate it my RPMS .

thanks

>> Have you looked into mod_auth_cas though? (depending on your apache 
>> version)
> no , but I will ;-) ! i'am in apache 2.2
>>
>> -Scott
>>
>> On Jan 25, 2008 10:31 AM, jehan procaccia 
>> <jehan.procaccia at int-evry.fr <mailto:jehan.procaccia at int-evry.fr>> 
>> wrote:
>>
>>     Hello,
>>     I wonder if mod_cas v2 (Mod_cas-2.0.11) is compatible with CAS
>>     server v3.1 ?
>>     I use to maintain apache packages including mod_cas cf:
>>     http://www.ja-sig.org/wiki/display/CASC/RPM+Modules
>>
>>     Unfortunaltly, my first tests with  that mod_cas and a cas  v3.1
>>     server
>>     fails , firefox telling:
>>
>>     "The page isn't redirecting properly
>>     Firefox has detected that the server is redirecting the request
>>     for this
>>     address in a way that will never complete."
>>
>>     apache logs:
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:28:57
>>     +0100] "GET
>>     /~procacci/restricted HTTP/1.1" 302 359
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22
>>     +0100] "GET
>>     /~procacci/restricted?ticket=ST-1-EwUyuaW1BKcTGFbtGeh9 HTTP/1.1"
>>     302 359
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22
>>     +0100] "GET
>>     /~procacci/restricted?ticket=ST-2-rtJOAJbu5ec0jQP0Asoo HTTP/1.1"
>>     302 359
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22
>>     +0100] "GET
>>     /~procacci/restricted?ticket=ST-3-JbuyD69JYw9B3zkTfVbK HTTP/1.1"
>>     302 359
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22
>>     +0100] "GET
>>     /~procacci/restricted?ticket=ST-4-LBQuBQ0SwmmwmAkZ0CCK HTTP/1.1"
>>     302 359
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:29:22
>>     +0100] "GET
>>     /~procacci/restricted?ticket=ST-5-yTZWP03jErtQvp4Azrfc HTTP/1.1"
>>     302 359
>>
>>     However, a phpcas test page (phpcas *0.5.1-1.) works fine .*
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:46:14
>>     +0100] "GET
>>     /~procacci/phpcas/test.php HTTP/1.1" 302 482
>>     *MailScanner warning: numerical links are often malicious:*
>>     157.159.50.197 <http://157.159.50.197> - - [25/Jan/2008:15:46:14
>>     +0100] "GET
>>     /~procacci/phpcas/test.php?ticket=ST-7-tpT4XMk7tOYSmJIf0Z9l 
>> HTTP/1.1"
>>     200 265
>>
>>     Do you think I have version mismatch between mod_cas 2 and cas v3 ->
>>     then is their a updated mod_cas relaese ? or it is something else ?
>>
>>     Thanks.
>>
>>     _______________________________________________
>>     Yale CAS mailing list
>>     cas at tp.its.yale.edu <mailto:cas at tp.its.yale.edu>
>>     http://tp.its.yale.edu/mailman/listinfo/cas
>>
>>
>>
>>
>> -- 
>> -Scott Battaglia
>>
>> LinkedIn: http://www.linkedin.com/in/scottbattaglia
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Yale CAS mailing list
>> cas at tp.its.yale.edu
>> http://tp.its.yale.edu/mailman/listinfo/cas
>>   
>
>