CAS does not work in clustered environments

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.1 EE SP4 (5.1.7), 5.2 EE SP2 (5.2.6)
• Fix Version/s: 5.1 EE SP5 (5.1.8), 5.2 EE SP3 (5.2.7)
• Component/s: Application Security, Fault Tolerance > Clustering Framework
• Labels: None
• Environment: All

CAS authentication does not work in clustered environments because CASReceipt is not serializable.

UPGRADE NOTE:

In order to address this issue, the Yale CAS client has been replaced with Jasig CAS client. The Jasig CAS client does not use a validate URL but uses a server URL instead. The server URL should point to the location of the CAS server. For example, https://localhost:8443/cas-web.

The Control Panel's user interface (or Enterprise Admin portlet in 5.1.8) has been updated to reflect this change. The server URL setting must be set for CAS to continue working.

If you are configuring CAS using portal(-ext).property, add the following property to your property file:
cas.server.url=https://localhost:8443/cas-web
The old property, cas.validate.url, can safely be removed.