The location has changed after cas redirection.

The location has changed after CAS redirection, which may be caused by incorrect configuration of CAS client and application server or network environment problems.

In the process of CAS login, three redirections will be involved. If it is in the same LAN, there is no problem, but if it involves cross-network access (such as intranet deployment and external network access), there is a problem. At the two red five-pointed stars as shown in the figure below, the IP of the login page to be accessed by the external network browser and the IP of the internal network for ticket verification are the same IP of the cas client. If the intranet IP is configured, the browser cannot access the login page; If the external network IP is configured, the internal network client will not be able to verify the ticket.

Solution: Because the system is online and there are many cas client applications, it is troublesome to change the code, so we need to find a way to solve the problem without changing the code. Idea 1: Configure the intranet application as the extranet IP, and then map it on the intranet server through iptables, and map the extranet IP to the intranet IP. This method can solve the problem that the "verification ticket" is not available, but can only be accessed on the external network, but not through the internal network. This method can be used in both internal and external networks.