Hello guys, It looked promising, right! But no, exactly the same result. Frustrating. Any ideas?
El viernes, 19 de junio de 2020, 9:42:50 (UTC+1), José Ramón Martín Magdalena escribió: > > Hi King, > > First of all, thank you for your quick reply. I tried your solution > unfortunately without success. Having a look at the Tomcat documentation > <http://tomcat.apache.org/tomcat-9.0-doc/config/ajp.html#Standard_Implementations> > I > found that the correct attribute name is 'secret' so I decided to try with : > > cas.server.tomcat.ajp.attributes.secretRequired=true > cas.server.tomcat.ajp.attributes.secret=TheSecret > > But same result. Now I'm moved to the AJP CAS Properties > <https://apereo.github.io/cas/6.1.x/configuration/Configuration-Properties.html#ajp> > and > right now I'm trying > > cas.server.tomcat.ajp.enabled=true > > > Finger crossing. > > > > > El jueves, 18 de junio de 2020, 21:26:49 (UTC+1), Kink escribió: >> >> Hi José, >> >> Since Tomcat 9.03x and AJP v1.3, if I am correct, the AJP connector needs >> to have the Secret declared in it as in here: >> <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" >> requiredSecret="myComplexKeyComesHereButIHaveNotUsedItElseWhere" >> secretRequired="true"> >> >> Could it be that you should simply replace >> cas.server.tomcat.ajp.attributes.secret = isasecret >> with >> cas.server.tomcat.ajp.attributes.requiredSecret = isasecret >> >> I was in the same position last year: new to Docker, Overlays, CAS, >> ApacheDS, and more... a tough year! >> CAS really is great but with such a hard learning curve, this is insane >> LOL but a lot of good and knowledgeable (not me!) guys hang around here :-) >> >> Good luck >> Kink >> >> On Thu, Jun 18, 2020 at 5:32 PM José Ramón Martín Magdalena < >> [email protected]> wrote: >> >>> Good afternoon group, >>> >>> I have been for some time, more than desired being honest, trying to >>> deploy a CAS server in my organization on a cluster Kubernetes and I think >>> I have almost succeeded. >>> >>> The truth is that if I had previously known how difficult it has been, I >>> will not get on the boat. Previously, I had never worked with Docker, >>> Kubernetes, or CAS. The upside is that my confinement has not been boring. >>> >>> I am currently trying to publish the service abroad using reverse apache >>> proxy but the container dies returning the following error: >>> >>> *The AJP Connector is configured with secretRequired = "true" but the >>> secret attribute is either null or "". This combination is not valid.* >>> >>> The configuration that I have included for proxy in cas.properties is >>> the following: >>> >>> ## config for proxy >>> server.port = 8080 >>> server.ssl.enabled = false >>> cas.server.tomcat.http.enabled = false >>> cas.server.tomcat.httpProxy.enabled = true >>> cas.server.tomcat.httpProxy.secure = true >>> cas.server.tomcat.httpProxy.scheme = https >>> cas.server.tomcat.ajp.attributes.secret = isasecret << I thought this >>> would solve the problem but no. >>> >>> Could someone tell me, for heaven's sake, where is the fault? >>> >>> Thanks in advance for your contribution. >>> >>> Regards. >>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/8ef35652-960b-402d-b65b-716710d1dee8o%40apereo.org >>> >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/8ef35652-960b-402d-b65b-716710d1dee8o%40apereo.org?utm_medium=email&utm_source=footer> >>> . >>> >> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/fabeab2c-fd76-48db-89f0-9ed03e459cb8o%40apereo.org.
