Is here anyone have used the Yale's CAS SSO solution?pls help me,I am in puzzle!

[lei li]

First of all,pls excuse for my poor English
in China, we use English as "Chinglish"

I wanna use the Yale's CAS to solve Single Sign-On problem in my web app,
I followed the step mentioned in this article:
http://www-128.ibm.com/developerworks/web/library/wa-singlesign/

1.I enable the SSL for my Tomcat 5.5
just uncomment the SSL configuration in the %catalina_home%\conf\server.xml.

2.Make a new self-assign credential
%java_home%\bin\keytool -genkey -alias tomcat -keyalg RSA
password is "changeit" and input "localhost" for the first&last name
then
%java_home%\bin\keytool -export -alias tomcat -file server.crt
then
%java_home%\bin\keytool -import -file server.crt -keystore %java_home%/jre/lib/security/cacerts
after complete all above, I open my IE and input "https://localhost:8443" for test.it's look fine because I see the tomcat welcome page clearly.

3.I copy the cas-server-3.0.2\cas-server-3.0.2\target\cas.war file to %catalina_home%\webapps.

4.put the cas-client-java-2.1.1\dist\casclient.jar into %catalina_home%\common\lib.

5.Modified the %catalina_home%webapps\servlets-examples\WEB-INF\web.xml to add the CAS filter,like this:

<filter>
 <filter-name>CAS Filter</filter-name>
 <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
 <init-param>
  <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
  <param-value>https://localhost:8443/cas/login</param-value>
 </init-param>
 <init-param>
  <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
  <param-value>https://localhost:8443/cas/proxyValidate</param-value>
 </init-param>
 <init-param>
  <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
  <param-value>localhost</param-value>
 </init-param>
</filter>
 
<filter-mapping>
 <filter-name>CAS Filter</filter-name>
 <url-pattern>/*</url-pattern>
</filter-mapping>

6.start up my Tomcat,everything seems OK
then I access the page https://localhost:8443/servlets-examples
the CAS filter redirect me to the CAS login screen,The default authenticator simply requires me to enter the same string for both the username and password,so I enter "aa" for both the username and password then click the login button.
after that the CAS should redirect me to the servlet-exaxmlple but it doesn't,the only thing I can see is "can not find the server, cannot open this page".

Could you please tell me if any thing i did wrong?
what can i do to deal with the problem?

thank you very much!!

li lei from China
[ December 22, 2005: Message edited by: lei li ]

[Ulf Dittmer]

Hello and Welcome to JavaRanch.

Can you determine which server or server URL it is trying to take you to? Are there any entries or error messages in the Tomcat log files?
[ December 23, 2005: Message edited by: Ulf Dittmer ]

[lei li]

<a href="https://localhost:8443/servlets-examples/" target="_blank" rel="nofollow">https://localhost:8443/servlets-examples/</a>

in this page I can choose the example-app I'd like to launch.there are HelloWorld,Request Info,Request Headers and so on.

Then I choosed the HelloWorld example ,

<a href="https://localhost:8443/servlets-examples/HelloWorldExample" target="_blank" rel="nofollow">https://localhost:8443/servlets-examples/HelloWorldExample</a>

and because of the CAS's filter ,my Tomcat 5.0 took me to the

<a href="https://localhost:8443/cas/login?service=https%3A%2F%2Flocalhost%2Fservlets-examples%2Fservlet%2FHelloWorldExample" target="_blank" rel="nofollow">https://localhost:8443/cas/login?service=https%3A%2F%2Flocalhost%2Fservlets-examples%2Fservlet%2FHelloWorldExample</a>

the CAS authentication page,it prompt me to enter the NetID and password ,after I entered the pair(e.g. ,NetID = aaa password = aaa)I click the Login buttton.

but ,there was always no effect completely, the URL still stayed in the
https://localhost:8443/cas/login?service=https%3A%2F%2Flocalhost%2Fservlets-examples%2Fservlet%2FHelloWorldExample
and the page showed me a "can not find the server" title and a "can not display this page" content.

At last, i really want to tell you something about my environment.
I use the MS windows xp
j2sdk1.4.2_10
tomcat 5.0.28
and CAS server 3.0.2
CAS client java 2.1.1

Of course, I made a credential for the SSL,
when it prompt me to enter the first and last name ,i give a "localhost" to it.

Are there anything I did miss or wrong?
Any clue are welcome!

thanks!!!
[ December 25, 2005: Message edited by: lei li ]

[lei li]

Originally posted by Ulf Dittmer:
Hello and Welcome to JavaRanch.

Can you determine which server or server URL it is trying to take you to? Are there any entries or error messages in the Tomcat log files?

[ December 23, 2005: Message edited by: Ulf Dittmer ]

Ulf Dittmer :
Thanks for your reply!Merry Christmas!!Wish you have a good year!

please, let me tell you the things you reminded me.
First, I accessed the this URL:

<a href="https://localhost:8443/servlets-examples/" target="_blank" rel="nofollow">https://localhost:8443/servlets-examples/</a>

in this page I can choose the example-app I'd like to launch.there are HelloWorld,Request Info,Request Headers and so on.

Then I choosed the HelloWorld example ,

<a href="https://localhost:8443/servlets-examples/HelloWorldExample" target="_blank" rel="nofollow">https://localhost:8443/servlets-examples/HelloWorldExample</a>

and because of the CAS's filter ,my Tomcat 5.0 took me to the

<a href="https://localhost:8443/cas/login?service=https%3A%2F%2Flocalhost%2Fservlets-examples%2Fservlet%2FHelloWorldExample" target="_blank" rel="nofollow">https://localhost:8443/cas/login?service=https%3A%2F%2Flocalhost%2Fservlets-examples%2Fservlet%2FHelloWorldExample</a>

the CAS authentication page,it prompt me to enter the NetID and password ,after I entered the pair(e.g. ,NetID = aaa password = aaa)I click the Login buttton.

but ,there was always no effect completely, the URL still stayed in the

<a href="https://localhost:8443/cas/login?service=https%3A%2F%2Flocalhost%2Fservlets-examples%2Fservlet%2FHelloWorldExample" target="_blank" rel="nofollow">https://localhost:8443/cas/login?service=https%3A%2F%2Flocalhost%2Fservlets-examples%2Fservlet%2FHelloWorldExample</a>

and the page showed me a "can not find the server" title and a "can not display this page" content.

At last, i really want to tell you something about my environment.
I use the MS windows xp
j2sdk1.4.2_10
tomcat 5.0.28
and CAS server 3.0.2
CAS client java 2.1.1

Of course, I made a credential for the SSL,
when it prompt me to enter the first and last name ,i give a "localhost" to it.

Are there anything I did miss or wrong?
Any clue are welcome!

thanks!!!