moodle and proxy CAS(sso)

moodle and proxy CAS(sso)

由Simon Martin發表於
Number of replies: 7
Hello.
I'm a young moodle developper for the university of Rennes 1 (france).
for my project, I need to use moodle as a CAS proxy, in order to connect to an other application direct from moodle.

it works perfectly in "simple client" mode, but when I enable the proxy mode, the script
<moodle>/login/login.php prints this and exit:

php4DOMElement::__set_state(array( 'myDOMNode' => DOMElement::__set_state(array彩蛋), 'myOwnerDocument' => php4DOMDocument::__set_state(array( 'myDOMNode' => DOMDocument::__set_state(array彩蛋), 'myOwnerDocument' => php4DOMDocument::__set_state(array( 'myDOMNode' => DOMDocument::__set_state(array彩蛋), 'myOwnerDocument' => php4DOMDocument::__set_state(array( 'myDOMNode' => DOMDocument::__set_state(array彩蛋), 'myOwnerDocument' => php4DOMDocument::__set_state(array(*RECURSION*

It seems to be a problem with PGT validation.(I'm not realy friendly with the concepts of CAS)

Maybe my apache configuration is not well done. But I did not find any documentation about this.

Any food for thought is welcomed!!

Thanks in advance, and sorry for my "frenchy" english.

Simon MARTIN
評比平均分數： -
In reply to Simon Martin

Re: moodle and proxy CAS(sso)

由Raimon Lapuente發表於
Hi Simon!

I'm having exactly the same problem. I'm not familiar with the CAS code either but I know how it works: apparently Moodle will send a query to your 3rd app, then this app will connect with the CAS Server and ask for a Tiket, then your app must send back the tiket to moodle to validate the account...

Maybe its an issue with the las connection and the XML generated (or the tiket sent in xml), in our browser url you must find something like: URL?tiket=something.

I still haven't fought the problem...
評比平均分數： -
In reply to Simon Martin

Re: moodle and proxy CAS(sso)

由Iñaki Arenaza發表於
Core developers的相片 Documentation writers的相片 Peer reviewers的相片 Plugin developers的相片

Hi Simon,

the phpCAS library bundled with Moodle was a bit old, and the integration with Moodle had a couple of glitches.

We have just (today!) upgraded the phpCAS library to the latest available version (1.1.0) and fixed the integration glitches. If you want to try if the problem you are having with proxy mode has been fixed with this upgrade, you should use the latest Moodle version from CVS (or wait for the next weekly version that should be out on Wednesday, if I'm not mistaken).

Saludos, Iñaki.

評比平均分數： -
In reply to Iñaki Arenaza

Re: moodle and proxy CAS(sso)

由Raimon Lapuente發表於
Hi Iñaki,

I have upgraded Moodle to the last 1.9.x version (last week). The warnings are now gone. The CAS plugin autentication works great.

But when I turn the CAS Proxy Mode, ON, the autentication to moodle gives a :

CAS Authentication failed!

You were not authenticated.

You may submit your request again by clicking here.

If the problem persists, you may contact the administrator of this site.


Even that I get this "error", the platform linked to the Moodle makes the login correctly.

評比平均分數： -
In reply to Raimon Lapuente

Re: moodle and proxy CAS(sso)

由Iñaki Arenaza發表於
Core developers的相片 Documentation writers的相片 Peer reviewers的相片 Plugin developers的相片

I'm afraid I don't have a proxied application at hand to test all of this.

If you described your working scenario in a more detailed way, maybe we could make it a go.

Saludos, Iñaki.

評比平均分數： -
In reply to Raimon Lapuente

Re: moodle and proxy CAS(sso)

由Matthew Selwood發表於
I've upgraded to Moodle 1.9.9+20100714 and receive the same error when I turn Proxy mode to Yes.

Have you made any progress on this?
評比平均分數： -
In reply to Matthew Selwood

Re: moodle and proxy CAS(sso)

由Matthew Selwood發表於
I resolved my issue. The problem was our load balancer redirecting us during the proxy hand-shaking with the CAS server to a different server in the web cluster (and then not able to find the .plain file that's generated by phpCAS on one of the redirects).
評比平均分數： -