Integrate Jboss Portal 2.7 with existing CAS

[sandello]

Hello.
How is it to integrate JBoss Portal with existing CAS?
I uncommented corresponding valve in jboss-portal.sar/portal-server.war/WEB-INF and wrote real CAS addresses to the elements "casLogin","casLogout","casValidate".
I think, all documentation about this integration consist a error: the casServerName attribute should contain portal server:port, not CAS.

Jboss AS was started and I tried to login to the portal. I saw the cas login screen after "LogIn" link was pressed. I authenticated successfully but the portal login form was displayed after redirection.
In the CAS some error messages was found in the portal logs:

2:34:36,365 ERROR [CASReceipt] edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://company.dnsalias.com:8843/cas/serviceValidate] ticket=[ST-64-QYJMjfLHAFFmnoebanWC-cas] service=[https%3A%2F%2Fangara.company.com%3A8443%2Fportal%2Fsec%2Fportal%2Foic%2Fdefault%2F%25D0%2594%25D0%25BE%25D0%25B1%25D1%2580%25D0%25BE%2B%25D0%25BF%25D0%25BE%25D0%25B6%25D0%25B0%25D0%25BB%25D0%25BE%25D0%25B2%25D0%25B0%25D1%2582%25D1%258C%3Fid%3Ddodemo%26action%3Df%26cacheability%3DPAGE] renew=false]]]

I tried to enter to the form existing user name/passwod but login failed.
What I did wrong?

[jpviragine]

Hi Sandello,

IMHO, casServerName should be casClientServerName (I would open a JIRA for this)

I think your problem is due to a SSL misleading configuration.
Did you generate a SSL certificate with correct hostname?
Have you been using a truststore?

Please, take a look at: http://docs.jboss.org/jbportal/sso/html_single/

Let me know if you need a further assistance.

Best,
Joao Paulo Viragine

[sandello]

Hi.

You are right. The problem is in SSL sertificate. I have add my CA cert to $JAVA_HOME/jre/lib/security/cacerts and the problem is solved.

Thanks.

[mposolda]

+1 to confusing name of casServerName attribute. Maybe it could be casClientServer? Because I think it's not only about server name but server port too.

[jpviragine]

JIRA created: https://jira.jboss.org/jira/browse/JBPORTAL-2422

Tip: To deal with certificates I do recommend the use of Portecle: http://portecle.sourceforge.net/