"Invalid credentials supplied" when redirecting from TIBCO JasperReports Server to CAS and back

Issue

Here is a use case and corresponding issue reported by one of our users for their TIBCO JasperReports^® Server instance integrated with CAS:

1. User goes to http://mydomain/jasperserver-pro/flow.html?resource=%2freporrts%2f/testreport

2. JasperReports^® Server redirects to CAS login page 

   http://mycas/cas/login?service=http://mydomain/jasperserver-pro/j_spring_security_check%3Bjsessionid=<some alpha numeric string>

3. After user logs in, CAS redirects back to JasperReports Server, except it goes to http://mydomain/jasperserver-pro/login.html with error message "Invalid credentials supplied." 

This issue may be consistent or intermittent depending on your user session settings. The cause of the issue is the JSESSIONID passed as part of URL from JasperReports Server.

Solution

The issue can be avoided by adding the following setting to the ../WEB-INF/web.xml file:

<session-config>
    <tracking-mode>COOKIE</tracking-mode>
</session-config>

It can be added right after the following section:

<session-config>
  <!--Default to 20 minute session timeouts-->
  <session-timeout>20</session-timeout>
</session-config>

Save the file and make sure to restart the server to apply the changs. More details of such issue are discussed in the following thread on stackoverflow.com:

https://stackoverflow.com/questions/1045668/jsessionid-is-occurred-in-all-urls-which-are-generated-by-jstl-curl-tag

Ref. case #01476699