...
Starting with the Case mod_cas distribution as a base ~ceharris Unlicensed user wrote a modification to support the XML objects returned by CAS 2 and up. It was also modified to support a chain of trusted CA certificates, rather than a single certificate. The attached mod_cas-VATECH.tar.gz can be used with the instructions posted on the Case wiki to produce the improved mod_cas. The CASTrustedCerts directive can now point to a file containing a trusted CA cert chain.
For a documented sample Apache configuration file, Andrew Feller Unlicensed user has provided a base for new and experienced deployers to use; see the mod_cas-VATECH.conf attachment.
...
(Per Scott Lundgren's email).
- mod_cas not should not be used with pages that use frames
- directories of images files should be moved out from under mod_cas protection because browsers (IE 6 & Firefox 1.06) do not know how to handle the redirects for the requests for images embedded in an HTML page
- directories of CSS files should be moved out from under mod_cas protection for the same reasons
- mod_cas cannot be used with server generated images where scripts return an image stream