Re: mod_auth_cas service URL

[Phil Ames-2]

Hi Carl,
This was recently discussed on this mailing list:

http://www.nabble.com/problems-with-mod_auth_cas-to25645698.html

As no one has chimed in with any complaints regarding the proposed
solutions, it seems likely that Nicolas' strategy will be used to
implement this fix.  Please feel free to review and comment if you
think that would not meet your needs so I can adjust the final
implementation accordingly.

Thanks,
-Phil

On Mon, Oct 5, 2009 at 4:34 PM, Carl Hall <[hidden email]> wrote:
> Is there a way with mod_auth_cas to specify the service URL that the user should return to after authentication rather than returning to the URL that was requested by the user?  I saw a JIRA that I think addresses this [1] but wanted to make sure I'm not overlooking anything.
>
> [1]  http://www.ja-sig.org/issues/browse/MAS-28
> --
> You are currently subscribed to [hidden email] as: [hidden email]
> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
>

--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Phil Ames-2]

Hi Carl,
Sorry it has taken a while to respond.  An example like this should
make things clear:


External user URL: http://www.example.com/app/
Internal server URL: http://internal.example.com/
CASRootProxiedAs http://www.example.com/app/

If the user requests http://www.example.com/app/foo/bar/ then this
will be proxied through to the internal server as
http://internal.example.com/foo/bar/.  The service URL will be
constructed as [CASRootProxiedAs][Local URL] where the "Local URL" in
this case would be /foo/bar/ (the first proxy will strip the leading
/app/).  A limitation is if you have http://www.example.com/app/
proxied to http://internal.example.com/TheRealFancyNameOfTheApp/.
This is where another directive might come in handy to remove a
leading portion of the URI from the returned URL.

HTH,

-Phil

On Tue, Oct 6, 2009 at 1:54 PM, Carl Hall <[hidden email]> wrote:
> Thanks for the link to the conversation.
>
> I believe that Nicolas' strategy will work just fine for me.  How do you plan to append the requested URL to the service URL (querystring, etc)?
> --
> You are currently subscribed to [hidden email] as: [hidden email]
> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
>

--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user