You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by BenDDD <be...@esiee.fr> on 2020/01/21 15:33:01 UTC

CAS Authentication problem

Hi everyone,

I have installed the CAS authentication extension and configure the
guacamole.properties to our CAS server.

But when i try to reach my Guacamole server, i get an error that says "Error
- An error has occurred and this action cannot be completed. If the problem
persists, please notify your system administrator or check your system
logs." :

<http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/file/t1130/Capture-20200121162541-595x232.png> 

At this moment the URL is :
"https://guacamole.ourdomain.fr/guacamole/#/?ticket=ST-501-s2XgeTi42S6dLkOSZwlf-cas.ourdomain.fr".

Does anybody, please, have an idea of what's going wrong ?

Thank you for your answers.

Benjamin



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: CAS Authentication problem

Posted by BenDDD <be...@esiee.fr>.
Hi mjumper,

Thank you for your answer?

There is nothing external to CAS wich can intercept the request.

As it looks like more a CAS problem, i have posted in the CAS mailing-list
too. But if anyone here have an idea, it would be great ;-).

Thank in advance.



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: CAS Authentication problem

Posted by Mike Jumper <mj...@apache.org>.
On Wed, Jan 22, 2020 at 6:25 AM BenDDD <be...@esiee.fr> wrote:

> Hi Adrian,
>
> Thank you for your answer.
>
> Here is the CAS server Tomcat logs. <https://pastebin.com/5SnDjvr7>
>
> Everything seems to be OK ?
>
> And the Guacamole server Tomcat logs. <https://pastebin.com/KKS3ijs2>
>
> These logs seem to indicate that the error comes from the CAS server.
>

It looks like the CAS server is responding with invalid XML, which the CAS
library used by Guacamole then chokes on:

[2020-01-21 16:39:29] [info] org.xml.sax.SAXParseException: Le type
d'élément "img" doit se terminer par la balise de fin correspondante
"</img>".

I'm not personally familiar with what CAS sends in its responses, but this
looks suspiciously like what might happen if an XML parser were expecting
an XML response but was fed HTML. Perhaps something external to CAS is
intercepting the request to validate the token and is responding with a web
page?

- Mike

RE: CAS Authentication problem

Posted by BenDDD <be...@esiee.fr>.
Hi Adrian,

Thank you for your answer.

Here is the CAS server Tomcat logs. <https://pastebin.com/5SnDjvr7>  

Everything seems to be OK ?

And the Guacamole server Tomcat logs. <https://pastebin.com/KKS3ijs2>  

These logs seem to indicate that the error comes from the CAS server. 



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

RE: CAS Authentication problem

Posted by Adrian Owen <ad...@eesm.com>.
Always send detailed information for help.

It will speed up your response.

Adrian

-----Original Message-----
From: BenDDD [mailto:benjamin.dupalut@esiee.fr] 
Sent: Wednesday, January 22, 2020 1:51 PM
To: user@guacamole.apache.org
Subject: Re: CAS Authentication problem

Hi everyone,

Does somebody got an idea ?

Should i bring more informations ?

Benjamin



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: CAS Authentication problem

Posted by BenDDD <be...@esiee.fr>.
Hi everyone,

Does somebody got an idea ?

Should i bring more informations ?

Benjamin



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: CAS Authentication problem

Posted by BenDDD <be...@esiee.fr>.
Hi,

More informations. 

Here is the CAS server Tomcat logs :


Everything seems to be OK ?

And the Guacamole server Tomcat logs :


These logs seem to indicate that the error comes from the CAS server.

Thanks in advance.

Benjamin



--
Sent from: http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org