Alfresco 3.2r2 and CAS with LDAP, SEVER: Error filterStart

[grupblau]

Hi all,

I installed Alfresco 3.2r2 and it works fine.
Now I would like to authenticate users using an already up&running CAS server, wich retrives users from an LDAP server. I've setup it as said in http://wiki.alfresco.com/wiki/Central_Authentication_Service_Configuration, I'm not using mod_jk as mod_jk should not be necessary.

On tomcat/webapps/alfresco/WEB-INF/web.xml I have added:

<!– CAS client filter –>
<filter>
    <filter-name>CAS Filter</filter-name>
    <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
    <init-param>
        <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
        <param-value>https://blau.serveftp.net:8443/cas/login</param-value>
    </init-param>
    <init-param>
        <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
        <param-value>https://blau.serveftp.net:8443/cas/serviceValidate</param-value>
    </init-param>
    <init-param>
        <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
        <param-value>blau.serveftp.net:8380</param-value>
    </init-param>
</filter>
<!– end of CAS client filter –>

  <filter>
     <filter-name>Authentication Filter</filter-name>
     <description>Authentication filter mapped only to faces URLs. Other URLs generally use proprietary means to talk to the AuthenticationComponent</description>
     <!– filter-class>org.alfresco.repo.web.filter.beans.BeanProxyFilter</filter-class>
     <init-param>
        <param-name>beanName</param-name>
        <param-value>AuthenticationFilter</param-value>
     </init-param –>

     <filter-class>com.keembay.alfresco.web.app.servlet.CASAuthenticationFilter</filter-class>
     <init-param>
          <param-name>cas.user.label</param-name>
          <param-value>edu.yale.its.tp.cas.client.filter.user</param-value>
     </init-param>
     <!– For Novell IChain support use the following filter –>
     <!–
     <filter-class>org.alfresco.web.app.servlet.HTTPRequestAuthenticationFilter</filter-class>
     <init-param>
        <param-name>httpServletRequestAuthHeaderName</param-name>
        <param-value>x-user</param-value>
     </init-param>
     <init-param>
        <param-name>authPatternString</param-name>
        <param-value>.*</param-value>
     </init-param>
     –>
  </filter>

<!– CAS client filter-mapping –>
<filter-mapping>
    <filter-name>CAS Filter</filter-name>
    <url-pattern>/faces/*</url-pattern>
</filter-mapping>
<!– end of CAS client filter-mapping –>

This are the libs I have:

annotations-api.jar
casclient-2.1.1.jar
catalina-ant.jar
catalina-ha.jar
catalina.jar
catalina-tribes.jar
commons-el.jar
commons-logging-1.1.1.jar
el-api.jar
jasper-el.jar
jasper.jar
jasper-jdt.jar
jsp-api.jar
keembay-alfresco-cas.jar
mysql-connector-java-5.1.7-bin.jar
servlet-api.jar
tomcat-coyote.jar
tomcat-dbcp.jar
tomcat-i18n-es.jar
tomcat-i18n-fr.jar
tomcat-i18n-ja.jar


SSL keys are in the trust-stores, web.xml have https enabled with it's server key and the trus-store as tomcat start-up parametre.

When I start Alfresco I get this log:

31/03/2010 17:27:11 org.apache.coyote.http11.Http11Protocol init
INFO: Initializing Coyote HTTP/1.1 on http-41443
31/03/2010 17:27:11 org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 1356 ms
31/03/2010 17:27:11 org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
31/03/2010 17:27:11 org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Apache Tomcat/6.0.18
31/03/2010 17:27:13 org.apache.catalina.core.StandardContext addApplicationListener
INFO: The listener "org.apache.myfaces.webapp.StartupServletContextListener" is already configured for this context. The duplicate definition has been ignored.
17:27:20,216  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properties file from class path resource [alfresco/repository.properties]
17:27:20,225  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properties file from class path resource [alfresco/domain/transaction.properties]
17:27:20,225  INFO  [alfresco.config.JndiPropertiesFactoryBean] Loading properties file from URL [file:/var/opt/alfresco-3.2r2ce/tomcat/shared/classes/alfresco-global.properties]
17:27:20,334  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
17:27:41,783  INFO  [domain.schema.SchemaBootstrap] Schema managed by database dialect org.hibernate.dialect.MySQLInnoDBDialect.
17:27:42,704  INFO  [domain.schema.SchemaBootstrap] No changes were made to the schema.
17:27:43,122  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'sysAdmin' subsystem, ID: [sysAdmin, default]
17:27:43,147  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
17:27:43,149  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'sysAdmin' subsystem, ID: [sysAdmin, default] complete
17:27:46,659 Userystem INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'thirdparty' subsystem, ID: [thirdparty, default]
17:27:46,689 Userystem INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
17:27:47,424 Userystem WARN  [alfresco.util.OpenOfficeConnectionTester] An initial OpenOffice connection could not be established.
17:27:47,425 Userystem INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'thirdparty' subsystem, ID: [thirdparty, default] complete
17:27:47,635  INFO  [repo.admin.ConfigurationChecker] The Alfresco root data directory ('dir.root') is: /var/opt/alfresco-3.2r2ce/data
17:27:47,704  INFO  [admin.patch.PatchExecuter] Checking for patches to apply …
17:27:48,369  INFO  [admin.patch.PatchExecuter] No patches were required.
17:27:48,372 Userystem INFO  [repo.module.ModuleServiceImpl] Found 0 module(s).
17:27:48,410  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'fileServers' subsystem, ID: [fileServers, default]
17:27:48,435  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
17:27:49,243  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]
17:27:49,254  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
17:27:49,334  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1] complete
17:27:49,400  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'fileServers' subsystem, ID: [fileServers, default] complete
17:27:49,400  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'imap' subsystem, ID: [imap, default]
17:27:49,440  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
17:27:49,472  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'imap' subsystem, ID: [imap, default] complete
17:27:49,474  INFO  [repo.usage.UserUsageTrackingComponent] Enabled - calculate missing user usages …
17:27:49,497  INFO  [repo.usage.UserUsageTrackingComponent] Found 0 users to recalculate
17:27:49,497  INFO  [repo.usage.UserUsageTrackingComponent] … calculated missing usages for 0 users
17:27:49,497  INFO  [management.subsystems.ChildApplicationContextFactory] Starting 'Synchronization' subsystem, ID: [Synchronization, default]
17:27:49,504  INFO  [alfresco.config.JndiPropertyPlaceholderConfigurer] Loading properties file from class path resource [alfresco/alfresco-shared.properties]
17:27:49,532  INFO  [management.subsystems.ChildApplicationContextFactory] Startup of 'Synchronization' subsystem, ID: [Synchronization, default] complete
17:27:49,775  INFO  [service.descriptor.DescriptorService] Alfresco JVM - v1.6.0_12-b04; maximum heap size 506,313MB
17:27:49,782  INFO  [service.descriptor.DescriptorService] Alfresco started (Community): Current version 3.2.0 (r2 2440) schema 3300 - Originally installed version 3.2.0 (r2 2440) schema 3300
17:28:01,012  INFO  [alfresco.util.OpenOfficeConnectionTester] The OpenOffice connection was re-established.
31/03/2010 17:28:06 org.apache.catalina.core.StandardContext start
SEVERE: Error filterStart
31/03/2010 17:28:06 org.apache.catalina.core.StandardContext start
SEVERE: Context [/alfresco] startup failed due to previous errors
17:28:06,995  INFO  [management.subsystems.ChildApplicationContextFactory] Stopping 'Synchronization' subsystem, ID: [Synchronization, default]
17:28:06,995  INFO  [management.subsystems.ChildApplicationContextFactory] Stopped 'Synchronization' subsystem, ID: [Synchronization, default]
17:28:06,995  INFO  [management.subsystems.ChildApplicationContextFactory] Stopping 'fileServers' subsystem, ID: [fileServers, default]
17:28:20,089  INFO  [management.subsystems.ChildApplicationContextFactory] Stopped 'fileServers' subsystem, ID: [fileServers, default]
17:28:20,089  INFO  [management.subsystems.ChildApplicationContextFactory] Stopping 'imap' subsystem, ID: [imap, default]
17:28:20,089  INFO  [management.subsystems.ChildApplicationContextFactory] Stopped 'imap' subsystem, ID: [imap, default]
17:28:20,095  INFO  [management.subsystems.ChildApplicationContextFactory] Stopping 'thirdparty' subsystem, ID: [thirdparty, default]
17:28:20,107  INFO  [management.subsystems.ChildApplicationContextFactory] Stopped 'thirdparty' subsystem, ID: [thirdparty, default]
17:28:20,108  INFO  [management.subsystems.ChildApplicationContextFactory] Stopping 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]
17:28:20,109  INFO  [management.subsystems.ChildApplicationContextFactory] Stopped 'Authentication' subsystem, ID: [Authentication, managed, alfrescoNtlm1]
17:28:20,112  INFO  [management.subsystems.ChildApplicationContextFactory] Stopping 'sysAdmin' subsystem, ID: [sysAdmin, default]
17:28:20,112  INFO  [management.subsystems.ChildApplicationContextFactory] Stopped 'sysAdmin' subsystem, ID: [sysAdmin, default]
log4j:ERROR LogMananger.repositorySelector was null likely due to error in class reloading, using NOPLoggerRepository.
31/03/2010 17:28:21 org.apache.catalina.startup.HostConfig deployWAR
INFO: Deploying web application archive mobile.war
17:28:22,350  INFO  [alfresco.config.JBossEnabledWebApplicationContext] Refreshing org.alfresco.config.JBossEnabledWebApplicationContext@1c340ca: display name [Root WebApplicationContext]; startup date [Wed Mar 31 17:28:22 CEST 2010]; root of context hierarchy
17:28:22,656  INFO  [alfresco.config.JBossEnabledWebApplicationContext] Bean factory for application context [org.alfresco.config.JBossEnabledWebApplicationContext@1c340ca]: org.springframework.beans.factory.support.DefaultListableBeanFactory@2a9c50
17:28:23,837  INFO  [web.scripts.DeclarativeRegistry] Registered 22 Web Scripts (+0 failed), 24 URLs
17:28:23,856  INFO  [web.scripts.AbstractRuntimeContainer] Initialised Presentation Web Script Container (in 194.80061ms)
17:28:23,933  INFO  [web.scripts.DeclarativeRegistry] Registered 40 Web Scripts (+0 failed), 42 URLs
17:28:23,947  INFO  [web.scripts.AbstractRuntimeContainer] Initialised WebFramework Web Script Container (in 88.8157ms)
17:28:23,984  INFO  [web.site.FrameworkHelper] Successfully Initialized Web Framework
31/03/2010 17:28:23 org.apache.catalina.startup.HostConfig deployWAR
INFO: Deploying web application archive share.war
17:28:27,002  INFO  [web.site.FrameworkHelper] Successfully Initialized Web Framework
31/03/2010 17:28:27 org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-41080
31/03/2010 17:28:27 org.apache.coyote.http11.Http11Protocol start
INFO: Starting Coyote HTTP/1.1 on http-41443
31/03/2010 17:28:27 org.apache.catalina.startup.Catalina start
INFO: Server startup in 75420 ms

The error is:
31/03/2010 17:28:06 org.apache.catalina.core.StandardContext start
SEVERE: Error filterStart
31/03/2010 17:28:06 org.apache.catalina.core.StandardContext start
SEVERE: Context [/alfresco] startup failed due to previous errors

As I found, most common cause of this error is missing the commons-logging library, but I have it. The error is not much explanatory, and I don't know how to print the stack-trace that should help a bit.

Any idea about my mistake? Thanks.

[grupblau]

The problem is in the library keembay-alfresco-cas.jar, as if I comment
<filter-class>com.keembay.alfresco.web.app.servlet.CASAuthenticationFilter</filter-class>
and it's related lines, Alfresco starts fine.

So I get the sources and rebuild it using eclipse and Alfresco libs that I have, but I get the same result.

[broken]

I've got the same problem with alfresco 3.3 and CAS.

Do you find the solution ?

[freddi]

i think i have the same problem. ref:http://forums.alfresco.com/en/viewtopic.php?f=8&t=26429

does anyone have a running cas setup with version 3.3?

[freddi]

my SSO with CAS is working now.
I have compiled mod_auth_Cas for my windows environtment like in this explanation
http://wiki.alfresco.com/wiki/Alfresco_With_mod_auth_cas
But now i'have the following problem:
Alfresco is renewing the ticket all the time. The only possibility to avoid high server load and working lags is to set the tickettimeout really high. But then you have the problem that  a other user, wich is using the same machine and the same browser, have the user credentials of the last authed user. (until the ticket gets invalid)

Does someone othe have such a problem?

[pmminov]

I got 3.2r working with CAS and using that keembay lib, where it does not work at all and produces that severe error is 3.3

Keembay lib failes because the alfresco-core-jar between 3.2r and 3.3 changed drastically, the class is missing this 2 classes:

import org.alfresco.config.ConfigService;
import org.alfresco.i18n.I18NUtil;

I would like to know if someone knows how to replace those imports in 3.3

Also I tried the auth_mod thing, but I can´t, I use tomcat and have SSL and CAS working with a self-signed cert so I'm pretty sure I should be able to skip some steps right? but I'm totally lost when the wiki starts to talk about tomcat mods… I really don't understand that guide, is not generic at all

[pcb]

I got the same issue… CAS implementation is working with Alfresco 3.2.0 but not wih 3.2r2…

And I don't more understand wikiexplanation about mod_auth module  :cry:

[ankit_yakkundi]

Hi
I have installed Alfresco enterprise 3.2r. I have doubt where should i deploy the cas war file,in alfresco's tomcat or seperate tomcat bundle? i also want to know whether i have to install LDAP server also.

Can you please what all files i need to change, and how i can establish a connection between the CAS server and Alfresco.

My scenarios:
1) I am working with windows and not Linux. I deployed the cas-server-webapp-3.4.2.war file in a separate instance and it is working fine in browser, but there is no connection with alfresco here.

2) I deployed the cas-server-webapp-3.4.2.war in the Alfresco_home/webapps folder and it gives me a "Connection refused error in Tomcat console" as ("Connection refused: ldap://docs.cignex.com:10389")

I am referring to this link:
http://www.liferay.com/web/guest/community/wiki/-/wiki/Main/Full+Integration+-+Liferay,+Alfresco,+SS...
http://liferay.cignex.com/palm_tree/0387/sso/alfresco/

Any kind of suggestions are welcome.

Thanks in advance.

Ankit

[gauchoproluanco]

Hi Ankit, hi everybody!!!

I have an alfresco 3.2r and the cas-server-webapp-3.4.2. For developing and testing purposes you can have them in the same application server. In my case I have both in the webapps directory of the tomcat that comes with that distribution of alfresco.

The cas-server is working against an Active Directory. For doing this I have to change the deployerConfigContext.xml ($ALFRESCO_HOME$/tomcat/webapps/cas-server/WEB-INF/deployerConfigContext.xml) in this way:

1. Replace the

<bean class="org.jasig.cas.authentication.handler.support.SimpleTestUsernamePasswordAuthenticationHandler" /> for 
<bean class="org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler" >
               <property name="filter" value="%u@your.domain.com" />
               <property name="contextSource" ref="yourContextSource" />
               <property name="ignorePartialResultException" value="yes" />
            </bean>‍‍‍‍‍‍

2. Create your own content source source:


<bean id="yourContextSource" class="org.springframework.ldap.core.support.LdapContextSource">
      <property name="urls">
         <list>
            <value>ldap://your.own.ad.ip:389</value>
         </list>
      </property>
      <property name="userDn" value="CN=xxxx,…,DC=your,DC=domain,DC=com"/>
      <property name="password" value="xxxx"/>
      <property name="baseEnvironmentProperties">
         <map>
            <entry>
               <key>
                  <value>java.naming.security.authentication</value>
               </key>
               <value>simple</value>
            </entry>
         </map>
      </property>
   </bean>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

You also need to put in the classpath of the cas-server ($ALFRESCO_HOME$/tomcat/webapps/cas-server/WEB-INF/lib)the cas-server-support-ldap-3.4.2.jar. Now If you restart the application server you should be able to login in the cas-server application with your active directory users.

In the alfresco server you need to do the next changes in the application's descriptor (($ALFRESCO_HOME$/tomcat/webapps/alfresco/WEB-INF/web.xml):

1. Add the cas filter:


<filter>
     <filter-name>CAS Filter</filter-name>
     <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter</filter-class>
     <init-param>
      <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
      <param-value>https://hostname:8443/cas-server/login</param-value>
     </init-param>
     <init-param>
      <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
      <param-value>https://hostname:8443/cas-server/serviceValidate</param-value>
     </init-param>
     <init-param>
      <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
      <param-value>hostname:8080</param-value>
     </init-param>
    </filter>‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

2. Replace the

<filter-class>org.alfresco.repo.web.filter.beans.BeanProxyFilter</filter-class>
     <init-param>
      <param-name>beanName</param-name>
      <param-value>AuthenticationFilter</param-value>
     </init-param>‍‍‍‍‍

for:


<filter-class>com.keembay.alfresco.web.app.servlet.CASAuthenticationFilter</filter-class>
  <init-param>
   <param-name>cas.user.label</param-name>
   <param-value>edu.yale.its.tp.cas.client.filter.user</param-value>
  </init-param>
 </filter>‍‍‍‍‍‍

3. Put the

<filter-mapping>
        <filter-name>CAS Filter</filter-name>
        <url-pattern>/faces/*</url-pattern>
    </filter-mapping>‍‍‍‍

just before the

 <filter-mapping>
      <filter-name>Authentication Filter</filter-name>
      <url-pattern>/faces/*</url-pattern>
   </filter-mapping>‍‍‍‍

You also need the casclient-2.1.1.jar, keembay-alfresco-cas.jar and the commons-logging-1.1.jar in the alfresco classpath (($ALFRESCO_HOME$/tomcat/webapps/alfresco/WEB-INF/lib, I have tried to put them in the $ALFRESCO_HOME$/tomcat/lib, but it seems not to work…)

In the tomcat server.xml you need to enabled connector element for port 8443:

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
         maxThreads="150" scheme="https" secure="true"
         clientAuth="false" sslProtocol="TLS" 
         keystoreFile="C:/Documents and Settings/user/.keystore"
         keystorePass="changeit" 
         truststoreFile="C:/JDKS/jdk1.6.0_14/jre/lib/security/cacerts" />‍‍‍‍‍‍

Before this you need a certificate and import it on your own keystore. You could do this with the keytool utility:

keytool -genkey -alias tomcat -keypass changeit -keyalg RSA
keytool -export -alias tomcat -keypass changeit -file server.crt
keytool -import -file server.crt -keypass changeit -keystore ..\jre\lib\security\cacerts

If you requested the alfresco client http://hostname:8080/alfresco you should be forwarded to the cas-server/login, be autheticated and forwarded to the user's dashboard of alfresco.

At this point, with the 3.2r I have a problem. If I don't put anything on the alfresco-global.properties alfresco throws the next exception:

org.alfresco.repo.security.authentication.AuthenticationException: 07110003 Failed to set current user administrator. ‍

.
As far I can see the user is authenticated for CAS but it seems that alfresco can not bind the user:

2010-08-11 10:03:02,976 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - AuthenticationHandler: org.jasig.cas.adaptors.ldap.FastBindLdapAuthenticationHandler successfully authenticated the user which provided the following credentials: [username: administrator]
2010-08-11 10:03:02,992 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service ticket [ST-1-UEJwWo1Ma6PL9C3rgX6X-cas] for service [http://guadalajara:8080/alfresco/faces/jsp/dashboards/container.jsp] for user [administrator] ‍‍

If I enable the external authentication subsystem, this is, in the alfresco-global.properties: authentication.chain=external1:external alfresco says:

org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'localAuthenticationService' defined in file [C:\Portal-FW\plataformaj2ee\entornos\alfresco-community-tomcat-3.2r\tomcat\shared\classes\alfresco\extension\subsystems\Authentication\external\external1\external-authentication-context.xml]: Cannot resolve reference to bean 'sysAdminParams' while setting bean property 'sysAdminParams'; nested exception is org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'sysAdminParams' is defined
caused by:
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean named 'sysAdminParams' is defined‍‍‍

I have read in the wiki that this subsystem is part of the enterprise edition, so I'm a little bit confused. I have tried to copy from the 3.2r2 distribution, but it doesn't work…

Any idea?

Thanks in advance,

Luis

[ankit_yakkundi]

Hi..
Did it worked with 3.2r enterprise edition??? The problem which i am facing now is that when i login with http://localhost:8080/alfresco, it opens the CAS login window. I log into cas with admin/admin, then i am directed to the alfresco web client login page, where i have to login again.

As far as i know SSO does not work like this,once i have logged in through CAS , i should be able to access webclient as well as share. How can i integrate share with SSO. When i login with http://localhost:8080/share , share's login page opens. I haven't done any changes for share. What all changes i need to do , so that share is integrated with SSO.

Even when i logout from alfresco, alfresco's login page opens.


I have reffered the below wiki.
http://www.liferay.com/community/wiki/-/wiki/Main/Integrating+Liferay%2C+Alfresco%2C+SSO+and+LDAP#_3...

when i add the the following code in titlebar jsp page in $ALFRESCO_HOME /jsp/parts folder and click on login, error is shown informing

javax.faces.FacesException: /jsp/dashboards/container.jsp(58,0) File "/jsp/dashboards/../parts/titlebar.jsp" not found

.
believe this code helps the user to redirect to CAS page when user logout.

Any ideas or sugestions are welcome..
Thanks in advance..

Ankit