Troubleshooting CAS Clearpass configuration

Owned by James Wennmacher (Deactivated)
Last updated: Aug 06, 2015

To troubleshoot CAS Clearpass configuration, enable logging as specified in 

Error rendering macro 'jira' : Unable to locate Jira server for this macro. It may be due to Application Link configuration.
.  Also review  Unable to locate Jira server for this macro. It may be due to Application Link configuration.  to see what a valid CAS Clearpass transaction looks like.  This page lists some observations from experiences troubleshooting CAS Clearpass.

Scenario: uPortal is not able to obtain password from CAS, CAS has java.net.SocketTimeoutException: Read timed out

This can be caused by one of the following:

  • In filters/*.properties and how the cas clearpass property is specified in security.properties, CAS is making an HTTP call to uPortal to send the PGTIOU-PGT message.
  • In uPortal ehcache.xml, RMI cache replication is setup for clustered uPortal configuration but the RMI server list in filters/*.properties lists a server that is not accessible so RMI replication of the PGTIOU-PGT message holds up a response to CAS and CAS times out.

Scenario: password is not passed to portlets

This can be caused by having the cachedPasswordUserInfoService bean set to use encryption.

 

Also see