Liferay 6.0.6 integration with CAS

[Mitko Zafirovski, modificado hace 11 años.]

Hi All,

I am having some problems with Liferay (6.0.6 CE) and CAS (5.2.0.1).

My setup includes two LR servers (running on Glassfish bundle) and one tomcat server running CAS. They are all on different machines, the LR machines are on the same domain but different subdomains and the CAS one is running on an internal IP. They can all communicate with each other properly!

Whenever I log in through one of the LR servers, I am redirected to the CAS login page and succsefully redirected back with a valid ticket and logged in to LR. However, if after that I visit the other LR server, the same process repeats, I am not automatically logged in !!!

I am configuring CAS with the following properties:

cas.auth.enabled=true

cas.login.url=http://192.168.xx.yyy:8181/cas-web/login
cas.logout.url=http://192.168.xx.yyy:8181/cas-web/logout
cas.server.name=subdomain.domain.com
cas.server.url=http://192.168.xx.yyy:8181/cas-web
cas.service.url=

auto.login.hooks=com.liferay.portal.security.auth.CASAutoLogin
com.liferay.portal.servlet.filters.sso.cas.CASFilter=true

Also, I've stumbled upon this property 'cas.validate.url', is it still available in LR 6.0.6.

Does anyone have any insight on this issue?

Best,
Mitko

[Ivo Neskovic, modificado hace 11 años.]

Hey guys,

We have a very simillar issue, with 3 LR servers and we are experiencing the same problem + single sign off. It just won't work. You sign of from one server and you are still logged on the other 2. I guess these issues are related?

Would appreciate all help!!

/Ivo

[Al-Mothafar Al-Hasan, modificado hace 11 años.]

I think its related to application server , i mean Glassfish it self or/and liferay configuration, there is no replication as I see, you need to do some configuration for it, seems you need to setup a cluster environment and load balancer.

Another hint, you need also sticky session.

[Apoorva Prakash, modificado hace 11 años.]

Hi all,

Please try putting the following in your web.xml:

   <filter>
                <filter-name>CAS Single Sign Out Filter</filter-name>
                <filter-class>org.jasig.cas.client.session.SingleSignOutFilter</filter-class>
            </filter>

            <filter-mapping>
                <filter-name>CAS Single Sign Out Filter</filter-name>
                <url-pattern>/c/portal/logout</url-pattern>
            </filter-mapping>
            
            <listener>
                <listener-class>org.jasig.cas.client.session.SingleSignOutHttpSessionListener</listener-class>
            </listener>

In the very same fashion, you have to make entry for SingleSignOutHttpSessionListener. I've done this in Alfresco with */faces and it works very fine.

Hope this will help...

Thanks and Regards,
Apoorva Prakash