CAS 4.1.10关闭HTTPS

1.修改WEB-INF/deployerConfigContext.xml

1 2 3 4

< bean  id = "proxyAuthenticationHandler"            class = "org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler"            p:httpClient-ref = "supportsTrustStoreSslSocketFactoryHttpClient"            p:requireSecure = "false"  />

在p:httpClient-ref="supportsTrustStoreSslSocketFactoryHttpClient"后

增加p:requireSecure="false"

2.修改WEB-INF/spring-configuration/ticketGrantingTicketCookieGenerator.xml

1 2 3 4 5 6

< bean  id = "ticketGrantingTicketCookieGenerator"  class = "org.jasig.cas.web.support.CookieRetrievingCookieGenerator"            c:casCookieValueManager-ref = "cookieValueManager"            p:cookieSecure = "false"            p:cookieMaxAge = "-1"            p:cookieName = "TGC"            p:cookiePath = "" />

将p:cookieSecure="true"修改为p:cookieSecure="false"

3.修改WEB-INF/spring-configuration/warnCookieGenerator.xml

1 2 3 4 5 6

< bean  id = "warnCookieGenerator"  class = "org.jasig.cas.web.support.CookieRetrievingCookieGenerator"            p:cookieHttpOnly = "false"            p:cookieSecure = "false"            p:cookieMaxAge = "-1"            p:cookieName = "CASPRIVACY"            p:cookiePath = "" />

将p:cookieSecure="true"修改为p:cookieSecure="false"

4.修改注册服务WEB-INF/classes/services/HTTPSandIMAPS-10000001.json

将"serviceId" : "^(https|imaps)://.*"修改为"serviceId" : "^(https|http|imaps)://.*"

5.测试HTTP/HTTPS

http://192.168.10.102:8080/cas/login?service=http://www.a.com

网上很多资料只提示修改前面3个配置，却没有更改注册服务配置，所以就会出现

Application Not Authorized to Use CAS

The application you attempted to authenticate to is not authorized to use CAS.

本文转自 rong341233 51CTO博客，原文链接:http://blog.51cto.com/fengwan/1876603