CAS Server Setup Problems with Apache 2 over Tomcat 5.5

[Kristina P. Boysen]

I confirmed it is an SSL issue, since opening up the Tomcat 8080 default 
connector and turning off the redirect allowed me to access CAS.  I 
installed my existing SSL certs into the JDK as per the instructions on 
the wiki, but I still can't get to the webapp.  I already have uPortal 
running on the server and its SSL works, so are there any other 
configuration points I can check?

Thanks!

Kristina

Scott Battaglia wrote:
> Kristina,
>
> The first thing to do is attempt to access CAS via a normal HTTP 
> connection to see if the SSL configuration is the problem.  If it 
> still doesn't load in Apache, then try accessing Tomcat directly (if 
> you still have the  HTTP connectors enabled, if not enable them).  If 
> it loads in Apache over HTTP and not HTTPS there may be a problem with 
> the SSL configuration.  If it doesn't load at all in Apache but does 
> in Tomcat, then it may be a mod_jk configuration issue.
>
> -Scott
>
> On Jan 25, 2008 1:37 PM, Kristina P. Boysen <kboysen at iastate.edu 
> <mailto:kboysen at iastate.edu>> wrote:
>
>     I'm currently trying to setup a CAS server on a machine running
>     Apache 2
>     through SSL, connected via mod_jk to my Tomcat server.  The demo CAS
>     setup worked on my local machine, but when I moved it to the server
>     (with some tweaks to the database username access), I can't access the
>     page at https://myserver/cas.  Firefox seems to partially load the
>     page
>     but then stops short of actually rendering the normal login page.  I'm
>     not getting any error messages in my log files, and even setting it on
>     DEBUG doesn't seem to reveal anything.  I've looked around the
>     web, and
>     I'm wondering if its SSL-related.  I've seen things about the JVM
>     keystore, but a lot of those examples seem to be about running
>     Tomcat as
>     the SSL endpoint and not Apache (which I probably want).  So I'm
>     wondering
>
>     * if Apache is handling SSL, then does Tomcat also have to have
>     the key
>     in its keystore for the account running tomcat?
>     * in this situation, are there any changes to cas.properties that
>     I must
>     make?
>     * could there be any other configuration issues that I don't know
>     about?
>
>     Here are my system specs:
>     Tomcat 5.5
>     Apache 2.2
>     Sun JVM: 1.6.0_03
>     CAS Server 3.1.1
>
>     I'm quite new to handling SSL, so thanks in advance for any help.
>
>     Kristina
>
>     --
>     Kristina Boysen
>
>     Masters Graduate Student
>     Department of Computer Science
>     Iowa State University
>     Email: kboysen at iastate.edu <mailto:kboysen at iastate.edu>
>
>     _______________________________________________
>     Yale CAS mailing list
>     cas at tp.its.yale.edu <mailto:cas at tp.its.yale.edu>
>     http://tp.its.yale.edu/mailman/listinfo/cas
>
>
>
>
> -- 
> -Scott Battaglia
>
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
> ------------------------------------------------------------------------
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>   
> ------------------------------------------------------------------------
>
> No virus found in this incoming message.
> Checked by AVG Free Edition. 
> Version: 7.5.516 / Virus Database: 269.19.11/1242 - Release Date: 1/24/2008 8:32 PM
>   


-- 
Masters Graduate Student
Department of Computer Science
Iowa State University
Email: kboysen at iastate.edu