The mailing list for listmasters using Sympa

[Robert Beer <address@concealed>]

On Mar 18, 2014, at 9:30 AM, Aaron Bennett <address@concealed> wrote:

> Hi, 
> 
> I've made some progress with getting CAS Authentication to work, once I got 
> perl-AuthCAS installed.  Here's what I'm seeing in the logs from my cas 
> server.
> 
> 
> Mar 18 09:11:43 odo-665 cas: INFO  Audit trail record BEGIN
> =============================================================
> WHO: address@concealed
> WHAT: ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu for 
> http://testlists.clarku.edu/sso_login_succeeded/Login
> ACTION: SERVICE_TICKET_CREATED
> APPLICATION: CAS
> WHEN: Tue Mar 18 09:11:43 EDT 2014
> CLIENT IP ADDRESS: 140.232.0.61
> SERVER IP ADDRESS: 10.6.65.22
> =============================================================
> 
> Mar 18 09:11:43 odo-665 cas: ERROR ServiceTicket 
> [ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu] with service 
> [http://testlists.clarku.edu/sso_login_succeeded/Login does not match 
> supplied service [http://testlists.clarku.edu://sso_login_succeeded/Login]
> Mar 18 09:11:43 odo-665 cas: INFO  Audit trail record BEGIN
> =============================================================
> WHO: audit:unknown
> WHAT: ST-13-sPDJBVCa7YUP6bSrBorJ-cas.clarku.edu
> ACTION: SERVICE_TICKET_VALIDATE_FAILED
> APPLICATION: CAS
> WHEN: Tue Mar 18 09:11:43 EDT 2014
> CLIENT IP ADDRESS: 140.232.1.46
> SERVER IP ADDRESS: 10.6.65.22
> =============================================================
> 
> Where is that extra ":" in the error coming from in the service supplied by 
> Sympa?  
> 
> -Aaron
> 
> 
> ---
> Aaron Bennett
> Manager of Systems Administration
> Clark University ITS
> W:508.793.7315

I would remove the colon and port specification on auth.conf on the Sympa 
host and add:

        use_ssl                         1
        ssl_version                     sslv3
        ssl_ciphers                     MEDIUM:HIGH


-- 
Bob Beer <address@concealed>
Ohio Northern University, Information Technology, Ada, OH  45810