about edu.yale.its.tp.cas.client.filter.serverName, need help

[ianwong]

Some javascript/style in this post has been disabled (why?)

Hi gurus,

In my application, I specified multiple domain names to same web app. As result, users can access my site via different domain names. But the problem is that I also use https, and only one certificate is used for one of domains. As result, users have to face "Secure Connection Failed, xxx uses an invalid security certificate" if login on other domain. I am using tomcat.

So I thought CAS might help me to solve that issue. but finally I found I have to configure edu.yale.its.tp.cas.client.filter.serverName in web app. I want to know is any chance to configure mutiple servername in edu.yale.its.tp.cas.client.filter.serverName or use localhost:8080 as instead?

I am also looking for other non-cas solution for my situation.

Thanks!

Ian

-- 
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user

[Marvin Addison]

> I am also looking for other non-cas solution for my situation.

There is a straightforward solution to your problem.  Use a  
certificate that makes use of the "Subject Alternative Name" field of  
the X.509 certificate.  You can have as many of those entries as you  
want, one for each host name at which your application is available.  
That will relieve browsers of the ominous warning messages.  See  
section "4.2.1.7 Subject Alternative Name" of http://www.faqs.org/rfcs/rfc2459.html 
  for more information.

You should by all means use CAS if you truly have a need for single  
sign-on, but from your post it sounds like you want a simple solution  
to your certificate hostname mismatch problem. The SubjectAltName  
field is the way to go in that case.

M

--
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user