Zimbra and CAS - Issuing multiple tickets and browser gets an error

[Matt Mencel <MR-Mencel@wiu.edu>]

I asked this on the cas-users mailing list but thought I'd ask it here as well as it may be a Zimbra only issue.  For those of you using CAS, have you ever seen this behavior?  We use Zimbra Proxy in case that matters.  We just turned CAS on in our production Zimbra environment in the last week, so this is pretty new to us.


A user attempts to browse to the Zimbra web UI, logs in through CAS, and gets an error in their browser saying "too many redirects".  In the CAS logs (Catalina.out) we see that CAS at times is issuing multiple service tickets...and it seems to coincide with the user receiving the "too many redirects" error.  Below is an example, and in this case there were at least 8 tickets issued...just showing a few here.

2011-10-25 20:39:09,427 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler successfully authenticated the user which provided the following credentials: [username: BLAH]>
2011-10-25 20:39:09,474 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-273941-JcWRA6oSq0m1QthmSTIA-cas] for service [https://zimbra.wiu.edu/zimbra/public/preauth.jsp] for user [JA-BLAH]>
2011-10-25 20:39:11,183 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-273942-dDZQvmp9GjBV1cW9fJmB-cas] for service [https://zimbra.wiu.edu/zimbra/public/preauth.jsp] for user [JA-BLAH]>
2011-10-25 20:39:12,732 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-273943-jQ4lWCvFwz1toe7V1bII-cas] for service [https://zimbra.wiu.edu/zimbra/public/preauth.jsp] for user [JA-BLAH]>


Anyone seen this before or know what may be causing it?

Thanks,
Matt