0

zKoss + Spring Security + CAS

asked 2009-12-15 09:56:21 +0800

fjulbe gravatar image fjulbe
30 1

Hi all,

I've experienced a problem when setting up my zk app. using a SSO CAS authentication service (+ Spring security). It works fine when I login and logout from the very same application.

The issue is:
1- When I'm already logged in and a third party application logs me out, as we are using Single Sign-on, the zk applications logs me out too.
2- I refresh the zk application and I get redirected to the login page again (as the other app logged me out).
3- I successfully login again but now the application redirects me to a odd url, that is, the application URL + /zkau attached to it, which returns an empty xml document (<rs></rs>).

Any ideas or experiences?
I can expand the case if anyone has some idea.
Cheers

delete flag offensive retag edit

9 Replies

Sort by ยป oldest newest

answered 2009-12-18 01:20:45 +0800

jumperchen gravatar image jumperchen
3909 2 8
http://jumperchen.blogspo... ZK Team

Hi,

I have no experience in SSO CAS authentication service, so I am not sure whether it is related to ZK or not, you may try to use a simple application to see what the different they are.

link publish delete flag offensive edit

answered 2009-12-22 01:55:48 +0800

fjulbe gravatar image fjulbe
30 1

I'm pretty sure it is a problem located into zKoss side, as I have more web applications against that CAS service and they behave as they should. In fact, my zKoss application works pretty well, but in that specific case it does that weird redirection.
What is that "zkau" for? I could see it in web.xml.

link publish delete flag offensive edit

answered 2009-12-24 19:14:28 +0800

jumperchen gravatar image jumperchen
3909 2 8
http://jumperchen.blogspo... ZK Team

The "zkau" is used for AJAX request to communicate the data between client and server, if server does nothing, it will return an empty xml document(<rs></rs>).

link publish delete flag offensive edit

answered 2010-02-01 05:59:46 +0800

fjulbe gravatar image fjulbe
30 1

updated 2010-02-01 06:00:14 +0800

The case is quite specific and I couldn't fix it yet.
Would it make any sense to redirect that url ".../WepAppURL/zkau/" to ".../WepAppURL/"? Because when this happens, if I remove that zkau appended to the web app url, it works fine.
Cheers

link publish delete flag offensive edit

answered 2010-02-02 22:20:22 +0800

jumperchen gravatar image jumperchen
3909 2 8
http://jumperchen.blogspo... ZK Team

Hi,

You can modify the "zkau" from web.xml.

<init-param>
	<param-name>update-uri</param-name>
	<param-value>/zkau</param-value>
</init-param>

link publish delete flag offensive edit

answered 2010-03-05 09:33:37 +0800

libelule gravatar image libelule
15 1

Hi,

I have the same problem. I use ZK with Spring and when I logout and try to login again then it redirects me too to /zkau. Interesting problem ...

libelule

link publish delete flag offensive edit

answered 2010-08-25 09:26:06 +0800

linthar gravatar image linthar
36

I've got the same response after logout/login using CAS.

Is there some way to detect the "first" ".../WepAppURL/zkau/" request ?
Maybe We could make some hack in order to strip those "extra params" from the request? (maybe in a filter?)

link publish delete flag offensive edit

answered 2010-08-30 03:00:58 +0800

henrichen gravatar image henrichen
3869 2
ZK Team

Please post to ZK Spring issues, so we can track it. Thanks.

http://code.google.com/p/zkspring/issues/list

link publish delete flag offensive edit

answered 2010-09-02 12:22:07 +0800

linthar gravatar image linthar
36

Hi henrichen:

I've posted the issue: http://code.google.com/p/zkspring/issues/detail?id=4

thanks in advance

link publish delete flag offensive edit
Your reply
Please start posting your answer anonymously - your answer will be saved within the current session and published after you log in or create a new account. Please try to give a substantial answer, for discussions, please use comments and please do remember to vote (after you log in)!

[hide preview]

Question tools

Follow

RSS

Stats

Asked: 2009-12-15 09:56:21 +0800

Seen: 1,922 times

Last updated: Sep 02 '10

Support Options
  • Email Support
  • Training
  • Consulting
  • Outsourcing
Learn More