Re:[jasig-discuss] Ask cas behind haproxy problem : CASTGC cookie lost

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Re:[jasig-discuss] Ask cas behind haproxy problem : CASTGC cookie lost

Samuel_Liang

Dear Baptiste :

I had follow your instruction add below setting :
        capture response header Location len 64
       capture response header Set-Cookie len 128

and get below haproxy.log :
----------------------------------------------------------------------------------------------------------------------------------
Aug 11 14:23:13 localhost haproxy[4979]: Proxy main started.
Aug 11 14:23:13 localhost haproxy[4979]: Proxy static started.
Aug 11 14:23:13 localhost haproxy[4979]: Proxy server_health started.
Aug 11 14:23:13 localhost haproxy[4979]: Proxy tda_web_http started.
Aug 11 14:23:13 localhost haproxy[4979]: Proxy tda_web_http started.
Aug 11 14:23:13 localhost haproxy[4979]: Proxy tdf_ftp started.
Aug 11 14:23:37 localhost haproxy[4980]: 10.12.10.115:32042 [11/Aug/2014:14:23:37.014] tda_web_http tda_web_http/tdaweb02 0/0/1/3/4 302 261 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.12.10.115:32042 [11/Aug/2014:14:23:37.014] tda_web_http tda_web_http/tdaweb02 0/0/1/3/4 302 261 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51898 [11/Aug/2014:14:23:37.051] tda_web_http tda_web_http/tdaweb01 69/0/1/13/83 200 4761 - - --NN 0/0/0/0/0 0/0 {|JSESSIONID=#22iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01#22; Version=1; Path=/TdaJSFWeb} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Findex.ase HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51898 [11/Aug/2014:14:23:37.051] tda_web_http tda_web_http/tdaweb01 69/0/1/13/83 200 4761 - - --NN 0/0/0/0/0 0/0 {|JSESSIONID=#22iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01#22; Version=1; Path=/TdaJSFWeb} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Findex.ase HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51903 [11/Aug/2014:14:23:37.238] tda_web_http tda_web_http/tdaweb01 61/0/1/2/64 302 311 - - --NN 2/2/1/1/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/javax.faces.resource/primefaces.css.ase;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01?ln=primefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51903 [11/Aug/2014:14:23:37.238] tda_web_http tda_web_http/tdaweb01 61/0/1/2/64 302 311 - - --NN 2/2/1/1/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/javax.faces.resource/primefaces.css.ase;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01?ln=primefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51904 [11/Aug/2014:14:23:37.239] tda_web_http tda_web_http/tdaweb01 61/0/1/1/63 302 310 - - --NN 1/1/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/javax.faces.resource/primefaces.js.ase;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01?ln=primefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51904 [11/Aug/2014:14:23:37.239] tda_web_http tda_web_http/tdaweb01 61/0/1/1/63 302 310 - - --NN 1/1/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/javax.faces.resource/primefaces.js.ase;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01?ln=primefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51905 [11/Aug/2014:14:23:37.239] tda_web_http tda_web_http/tdaweb01 75/0/1/1/77 302 315 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/javax.faces.resource/jquery/jquery.js.ase;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01?ln=primefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51905 [11/Aug/2014:14:23:37.239] tda_web_http tda_web_http/tdaweb01 75/0/1/1/77 302 315 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/javax.faces.resource/jquery/jquery.js.ase;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01?ln=primefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51914 [11/Aug/2014:14:23:37.326] tda_web_http tda_web_http/tdaweb01 44/0/0/2/46 302 270 - - --NN 3/3/2/2/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/img/ASE_Logo.gif;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01 HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51914 [11/Aug/2014:14:23:37.326] tda_web_http tda_web_http/tdaweb01 44/0/0/2/46 302 270 - - --NN 3/3/2/2/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/img/ASE_Logo.gif;jsessionid=iXxpVQcORmLEXtVfdffR+6Zq.tdaweb01:server-tdaweb01 HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51912 [11/Aug/2014:14:23:37.325] tda_web_http tda_web_http/tdaweb01 44/0/0/8/52 200 4501 - - --NN 2/2/1/1/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fjavax.faces.resource%2Fprimefaces.css.ase%3Fln%3Dprimefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51912 [11/Aug/2014:14:23:37.325] tda_web_http tda_web_http/tdaweb01 44/0/0/8/52 200 4501 - - --NN 2/2/1/1/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fjavax.faces.resource%2Fprimefaces.css.ase%3Fln%3Dprimefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51913 [11/Aug/2014:14:23:37.324] tda_web_http tda_web_http/tdaweb01 44/0/1/11/56 200 4499 - - --NN 2/2/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fjavax.faces.resource%2Fprimefaces.js.ase%3Fln%3Dprimefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51913 [11/Aug/2014:14:23:37.324] tda_web_http tda_web_http/tdaweb01 44/0/1/11/56 200 4499 - - --NN 2/2/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fjavax.faces.resource%2Fprimefaces.js.ase%3Fln%3Dprimefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51919 [11/Aug/2014:14:23:37.336] tda_web_http tda_web_http/tdaweb01 49/0/0/6/56 200 4505 - - --NN 1/1/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fjavax.faces.resource%2Fjquery%2Fjquery.js.ase%3Fln%3Dprimefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51919 [11/Aug/2014:14:23:37.336] tda_web_http tda_web_http/tdaweb01 49/0/0/6/56 200 4505 - - --NN 1/1/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fjavax.faces.resource%2Fjquery%2Fjquery.js.ase%3Fln%3Dprimefaces HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51922 [11/Aug/2014:14:23:37.379] tda_web_http tda_web_http/tdaweb01 60/0/1/6/67 200 4427 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fimg%2FASE_Logo.gif HTTP/1.1"
Aug 11 14:23:37 localhost haproxy[4980]: 10.11.178.100:51922 [11/Aug/2014:14:23:37.379] tda_web_http tda_web_http/tdaweb01 60/0/1/6/67 200 4427 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fimg%2FASE_Logo.gif HTTP/1.1"
Aug 11 14:23:40 localhost haproxy[4980]: 10.11.178.100:51926 [11/Aug/2014:14:23:40.541] tda_web_http tda_web_http/tdaweb01 192/0/1/178/371 302 656 - CASTGC=TGT-105-2YQ27SLzddswmZppnx4Iuwy4t1FKlnGEd6t2dfrDgVOLXbbA --NP 0/0/0/0/0 0/0 {|JSESSIONID=75E0C653DA1D317C6D89478FF361DE82; Domain=khtrdsso01.xx.yy.com; Path=/cas/; Secure} "POST /TdaJSFWeb/login?service=http://tdatwo.xx.yy.com/TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:40 localhost haproxy[4980]: 10.11.178.100:51926 [11/Aug/2014:14:23:40.541] tda_web_http tda_web_http/tdaweb01 192/0/1/178/371 302 656 - CASTGC=TGT-105-2YQ27SLzddswmZppnx4Iuwy4t1FKlnGEd6t2dfrDgVOLXbbA --NP 0/0/0/0/0 0/0 {|JSESSIONID=75E0C653DA1D317C6D89478FF361DE82; Domain=khtrdsso01.xx.yy.com; Path=/cas/; Secure} "POST /TdaJSFWeb/login?service=http://tdatwo.xx.yy.com/TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51929 [11/Aug/2014:14:23:40.961] tda_web_http tda_web_http/tdaweb01 72/0/1/35/108 302 197 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/index.ase|} "GET /TdaJSFWeb/index.ase?ticket=ST-105-40gzge1jK7diCWf1WMtT-khtrdsso01.xx.yy.com HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51929 [11/Aug/2014:14:23:40.961] tda_web_http tda_web_http/tdaweb01 72/0/1/35/108 302 197 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/index.ase|} "GET /TdaJSFWeb/index.ase?ticket=ST-105-40gzge1jK7diCWf1WMtT-khtrdsso01.xx.yy.com HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51932 [11/Aug/2014:14:23:41.087] tda_web_http tda_web_http/tdaweb01 84/0/1/97/182 200 486 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51932 [11/Aug/2014:14:23:41.087] tda_web_http tda_web_http/tdaweb01 84/0/1/97/182 200 486 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51935 [11/Aug/2014:14:23:41.301] tda_web_http tda_web_http/tdaweb01 55/0/0/48/103 200 10446 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/welcome.ase HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51935 [11/Aug/2014:14:23:41.301] tda_web_http tda_web_http/tdaweb01 55/0/0/48/103 200 10446 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/welcome.ase HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51941 [11/Aug/2014:14:23:41.435] tda_web_http tda_web_http/tdaweb01 45/0/1/52/98 200 1625 - - --NN 2/2/2/2/0 0/0 {|} "GET /TdaJSFWeb/resources/css/tda_default.css HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51941 [11/Aug/2014:14:23:41.435] tda_web_http tda_web_http/tdaweb01 45/0/1/52/98 200 1625 - - --NN 2/2/2/2/0 0/0 {|} "GET /TdaJSFWeb/resources/css/tda_default.css HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51940 [11/Aug/2014:14:23:41.434] tda_web_http tda_web_http/tdaweb01 47/0/1/55/104 200 4239 - - --NN 1/1/1/1/0 0/0 {|} "GET /TdaJSFWeb/resources/css/syntaxhighlighter/syntaxhighlighter.css HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51940 [11/Aug/2014:14:23:41.434] tda_web_http tda_web_http/tdaweb01 47/0/1/55/104 200 4239 - - --NN 1/1/1/1/0 0/0 {|} "GET /TdaJSFWeb/resources/css/syntaxhighlighter/syntaxhighlighter.css HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51942 [11/Aug/2014:14:23:41.436] tda_web_http tda_web_http/tdaweb01 90/0/1/28/119 200 5373 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/resources/css/default.css HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51942 [11/Aug/2014:14:23:41.436] tda_web_http tda_web_http/tdaweb01 90/0/1/28/119 200 5373 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/resources/css/default.css HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51948 [11/Aug/2014:14:23:41.560] tda_web_http tda_web_http/tdaweb01 0/0/1/20/21 200 2096 - - --NN 1/1/1/1/0 0/0 {|} "GET /TdaJSFWeb/img/processing.gif HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51948 [11/Aug/2014:14:23:41.560] tda_web_http tda_web_http/tdaweb01 0/0/1/20/21 200 2096 - - --NN 1/1/1/1/0 0/0 {|} "GET /TdaJSFWeb/img/processing.gif HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51949 [11/Aug/2014:14:23:41.560] tda_web_http tda_web_http/tdaweb01 0/0/1/19/21 200 11097 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/img/seamlogo.png HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51949 [11/Aug/2014:14:23:41.560] tda_web_http tda_web_http/tdaweb01 0/0/1/19/21 200 11097 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/img/seamlogo.png HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51951 [11/Aug/2014:14:23:41.861] tda_web_http tda_web_http/tdaweb01 72/0/0/28/100 304 135 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/javax.faces.resource/images/ui-icons_616161_256x240.png.ase?ln=primefaces-aristo HTTP/1.1"
Aug 11 14:23:41 localhost haproxy[4980]: 10.11.178.100:51951 [11/Aug/2014:14:23:41.861] tda_web_http tda_web_http/tdaweb01 72/0/0/28/100 304 135 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/javax.faces.resource/images/ui-icons_616161_256x240.png.ase?ln=primefaces-aristo HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51958 [11/Aug/2014:14:23:51.616] tda_web_http tda_web_http/tdaweb01 1/0/1/67/69 302 324 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/index.ase|JSESSIONID=#227U1n3JeLsKGlEMutOa4ylnaX.tdaweb01:server-tdaweb01#22; Version=1; Path=/TdaJSFWeb} "POST /TdaJSFWeb/welcome.ase HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51958 [11/Aug/2014:14:23:51.616] tda_web_http tda_web_http/tdaweb01 1/0/1/67/69 302 324 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/index.ase|JSESSIONID=#227U1n3JeLsKGlEMutOa4ylnaX.tdaweb01:server-tdaweb01#22; Version=1; Path=/TdaJSFWeb} "POST /TdaJSFWeb/welcome.ase HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51960 [11/Aug/2014:14:23:51.713] tda_web_http tda_web_http/tdaweb01 1/0/1/1/3 302 261 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51960 [11/Aug/2014:14:23:51.713] tda_web_http tda_web_http/tdaweb01 1/0/1/1/3 302 261 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/index.ase HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51962 [11/Aug/2014:14:23:51.724] tda_web_http tda_web_http/tdaweb01 1/0/1/7/9 200 4413 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Findex.ase HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51962 [11/Aug/2014:14:23:51.724] tda_web_http tda_web_http/tdaweb01 1/0/1/7/9 200 4413 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Findex.ase HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51964 [11/Aug/2014:14:23:51.776] tda_web_http tda_web_http/tdaweb01 0/0/1/1/3 302 270 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/img/ASE_Logo.gif HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51964 [11/Aug/2014:14:23:51.776] tda_web_http tda_web_http/tdaweb01 0/0/1/1/3 302 270 - - --NN 0/0/0/0/0 0/0 {http://tdatwo.xx.yy.com/TdaJSFWeb/login?service=http%3A%2F|} "GET /TdaJSFWeb/img/ASE_Logo.gif HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51966 [11/Aug/2014:14:23:51.841] tda_web_http tda_web_http/tdaweb01 1/0/0/7/8 200 4427 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fimg%2FASE_Logo.gif HTTP/1.1"
Aug 11 14:23:51 localhost haproxy[4980]: 10.11.178.100:51966 [11/Aug/2014:14:23:51.841] tda_web_http tda_web_http/tdaweb01 1/0/0/7/8 200 4427 - - --NN 0/0/0/0/0 0/0 {|} "GET /TdaJSFWeb/login?service=http%3A%2F%2Ftdatwo.xx.yy.com%2FTdaJSFWeb%2Fimg%2FASE_Logo.gif HTTP/1.1"

----------------------------------------------------------------------------------------------------------------------------------

Samuel Liang
Advanced Semiconductor Engineering Group
Tel : 886-7-3636641 # 84508 .Fax : 886-7-3636663
Email Address : [hidden email]
----------------------------------------------------------------------------------------------------------------------------------

2014/08/11

Baptiste <[hidden email]> 已在 2014/08/08 下午 03:56:14 上寫入:

> On Fri, Aug 8, 2014 at 3:43 AM,  <[hidden email]> wrote:
> >
> > Dear Jonathan :
> >
> > Thanks, your suggestion!
> >
> > Problem Description :
> >         I adapted our system to CAS. On simple environment(standalone), this
> > CASTGC cookie always ok at my browser client.
> >         But, when I migrated system to complex environment(haproxy+cluster).
> > my browser always could not found this CASTGC cookie.
> >         So, I open HAProxy debug mode and review output log. This CASTGC
> > cookie had arrived to HAProxy, but can't to my browser.
> >         For this problem, I don't know how to solve it. Could you help me,
> > thanks!
> >
> > 1. Below, I redraw my architecture by ascii format.
> >                                                 +-------+
> >                                           +---> | WEB01 | <---+
> >                                           |     +-------+     |
> >     +---------+           +---------+     |                   |
> > +------------+
> >     | Browser | <-------> | HAProxy | <---+                   +---> | CAS
> > Server |
> >     +---------+           +---------+     |                   |
> > +------------+
> >                                           |     +-------+     |
> >                                           +---> | WEB02 | <---+
> >                                                 +-------+
> >
> > 2. I put whole HAProxy configure:
> >         listen tda_web_http 0.0.0.0:80
> >                 mode http
> >                 reqadd X-Forwarded-Proto:\ http
> >                 option tcpka
> >                 no option http-server-close
> >                 stats enable
> >                 stats refresh 10s
> >                 stats uri /status
> >                 stats realm Haproxy\ statistics
> >                 log global
> >                 timeout server 10m
> >                 timeout client 10m
> >                 balance source
> >                 cookie JSESSIONID prefix
> >                 cookie CASTGC indirect preserve secure
> >                 capture cookie CASTGC len 63
> >                 option httpclose
> >                 option forwardfor
> >                 option httplog
> >                 server web01 10.10.0.1:8080 cookie web01 weight 50 check
> > inter 4000
> >                 server web02 10.10.0.2:8080 cookie web02 weight 50 check
> > inter 4000
> >
> > 3. Below is our HAProxy's partial debug log :
> >         73/0/1/182/256 302 656 -
> > CASTGC=TGT-98-ADcUE6hsd5zyppApgu76EkEfscDupu9OGFazAMAy9bZPKXGnC --NP
> > 0/0/0/0/0 0/0 "POST
> > /TdaJSFWeb/login?service=http://tdatwo.kh.asegroup.com/TdaJSFWeb/welcome.ase
> > HTTP/1.1"
> >         73/0/1/182/256 302 656 -
> > CASTGC=TGT-98-ADcUE6hsd5zyppApgu76EkEfscDupu9OGFazAMAy9bZPKXGnC --NP
> > 0/0/0/0/0 0/0 "POST
> > /TdaJSFWeb/login?service=http://tdatwo.kh.asegroup.com/TdaJSFWeb/welcome.ase
> > HTTP/1.1"
> >         74/0/0/19/93 302 199 - - --NN 0/0/0/0/0 0/0 "GET
> > /TdaJSFWeb/welcome.ase?ticket=ST-98-w67V0Y3G6Z2yEQwPk0zt-
> khtrdsso01.kh.asegroup.com
> > HTTP/1.1"
> >
> >
> -------------------------------------------------------------------------------------
> > Samuel Liang
> > Advanced Semiconductor Engineering Group
> > Tel : 886-7-3636641 # 84508 .Fax : 886-7-3636663
> > Email Address : [hidden email]
> >
> -------------------------------------------------------------------------------------
> > 2014/08/08
>
>
> Hi Samuel,
>
> Could you please enable logging of response Location and Set-Cookie
> headers, then play again your test and share the new log lines with
> us?
> Add:
> capture response header Location len 64
> capture response header Set-Cookie len 128
>
> Baptiste
-- 
You are currently subscribed to [hidden email] as: [hidden email] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/jasig-discuss