With a fresh installation of Nuxeo 5.5, I want to authenticate users with CAS.
I follow tutorials and forum about installation of this module.
When I connect to Nuxeo, I come to CAS login form. But when form is submit, my browser show this error.
Erreur 310 (net::ERR_TOO_MANY_REDIRECTS) : Trop de redirections
The log of Tomcat is follow :
2012-07-06 14:56:27,542 DEBUG [org.nuxeo.ecm.platform.ui.web.auth.cas2.Cas2Authenticator] serviceUrl: https://cas.myserver.com/cas/serviceValidate
2012-07-06 14:56:27,570 ERROR [org.nuxeo.ecm.platform.ui.web.auth.cas2.Cas2Authenticator] checkCasTicket failed with IOException:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1868)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1337)
I have import my certificat to a private keystore that I have mentionned in file nuxeoctl.bat.
I add these arguments to command line : "-Djavax.net.debug=ssl -Djavax.net.ssl.keyStore=cas.cacerts -Djavax.net.ssl.keyStorePassword=password".
But I have alway the same result.
How can I configure CAS properly in order to authenticate users with it ?
How can I show what keystore it is used ?
Thank's in advance