Cas-Shib Gateway Problems

[Joseph Conder]

I am using Shibboleth-enabled Apache to front CAS so that we can  
issue CAS tickets against a Shibboleth SP.  We are doing this via the  
REMOTE_USER mechanism detailed on the wiki at http://ja-sig.org/wiki/ 
display/CAS/Using+the+REMOTE_USER .

The only problem we have is if we want to configure a CAS client  
filter in gateway mode against this CAS instance.   In this case, we  
have been able to get the gateway mode to validate an existing CAS  
ticket but CAS does not seem to return nicely when there is no ticket/ 
session.  I think it has something to do with the actual code on the  
WIKI.... I tried tampering with the  
PrincipalBearingCredentialsAuthnHandler but it didn't help matters.   
It seems that everytime I fail the authentication it simply tries  
again and I end up in an endless loop...

Thanks,
Joe
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080924/b06223ff/attachment.html