[cvs] [Wiki] changed: CASAuthHowTo

[Wiki Guest]

guest [193.191.9.29]  Wed, 28 Jan 2009 03:00:01 -0500

Modified page: http://wiki.horde.org/CASAuthHowTo
New Revision:  2.20
Change log:  adde debug hint

@@ -441,6 +441,9 @@
  * HORDE: see /tmp/hordeaai-cas.log (when debug=true and configured  
like in this document; needs to be writable by user that runs  
PHP/horde; possibly see apache on SSL errors)
    => if contains "domxml_open_mem failed": the response from CAS  
server is not XML: use your browser to go to the URL that phpCAS shows  
in the logs right above the error
  * IMAP proxy: see /var/log/mail.log (also see "pimpstat")
  * IMAP server: see /var/log/auth (and /var/log/syslog)
+  => if contains "<time> mail imapd[22677]: Command stream end of  
file, while reading line user=... host=...
+                  <time> mail PAM_cas[22732]: authentication failure  
for user '...' : bad CAS ticket."
+     then check /etc/pam.d/imapd whether the "old" PAM login module  
(system-auth? shadow?) is set to "sufficient" (NOT to "required"!)
  * CAS server: see $TOMCAT/logs/cas3-server.log