Hi José, Since Tomcat 9.03x and AJP v1.3, if I am correct, the AJP connector needs to have the Secret declared in it as in here: <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" requiredSecret="myComplexKeyComesHereButIHaveNotUsedItElseWhere" secretRequired="true">
Could it be that you should simply replace cas.server.tomcat.ajp.attributes.secret = isasecret with cas.server.tomcat.ajp.attributes.requiredSecret = isasecret I was in the same position last year: new to Docker, Overlays, CAS, ApacheDS, and more... a tough year! CAS really is great but with such a hard learning curve, this is insane LOL but a lot of good and knowledgeable (not me!) guys hang around here :-) Good luck Kink On Thu, Jun 18, 2020 at 5:32 PM José Ramón Martín Magdalena < [email protected]> wrote: > Good afternoon group, > > I have been for some time, more than desired being honest, trying to > deploy a CAS server in my organization on a cluster Kubernetes and I think > I have almost succeeded. > > The truth is that if I had previously known how difficult it has been, I > will not get on the boat. Previously, I had never worked with Docker, > Kubernetes, or CAS. The upside is that my confinement has not been boring. > > I am currently trying to publish the service abroad using reverse apache > proxy but the container dies returning the following error: > > *The AJP Connector is configured with secretRequired = "true" but the > secret attribute is either null or "". This combination is not valid.* > > The configuration that I have included for proxy in cas.properties is the > following: > > ## config for proxy > server.port = 8080 > server.ssl.enabled = false > cas.server.tomcat.http.enabled = false > cas.server.tomcat.httpProxy.enabled = true > cas.server.tomcat.httpProxy.secure = true > cas.server.tomcat.httpProxy.scheme = https > cas.server.tomcat.ajp.attributes.secret = isasecret << I thought this > would solve the problem but no. > > Could someone tell me, for heaven's sake, where is the fault? > > Thanks in advance for your contribution. > > Regards. > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/8ef35652-960b-402d-b65b-716710d1dee8o%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/8ef35652-960b-402d-b65b-716710d1dee8o%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAL5n_WSoVjqbYeMmEasfTdAH9vyZTwfjm1gZ3ZiyZ-ggrE3dHw%40mail.gmail.com.
