cas客户端登录报java.net.ConnectException:

Question

内网是可以访问的,ip换成外网就无法访问了,不知道是不是服务器要配置什么

@Configuration
public class KdxfCASConfiguration implements ServletContextInitializer {


    public static final String serverLoginUrl = "http://外网ip:8086/api/index";

    public static final String casServerLoginUrl = "http://外网ip:82/cas";

    public static final String casServerLogoutUrl = "http://外网ip:82/cas/logout";

    @Bean
    public FilterRegistrationBean casAuthenticationFilter()
    {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(new DcAuthenticationFilter());
        registration.addUrlPatterns("/*");
        registration.addInitParameter("casServerLoginUrl", casServerLoginUrl);
        registration.addInitParameter("service", serverLoginUrl);
        registration.addInitParameter("renew", "false");
        registration.addInitParameter("gateway", "false");
        registration.setName("CAS Authentication Filter");
        return registration;
    }

    @Bean
    public FilterRegistrationBean casValidationFilter()
    {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(new Cas20ProxyReceivingTicketValidationFilter());
        registration.addUrlPatterns("/*");
        registration.addInitParameter("casServerUrlPrefix", casServerLoginUrl);
        registration.addInitParameter("serverName", "http://外网ip:8086");
        registration.setName("CAS Validation Filter");
        return registration;
    }

    @Bean
    public FilterRegistrationBean casHttpServletRequestWrapperFilter()
    {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(new HttpServletRequestWrapperFilter());
        registration.addUrlPatterns("/*");
        registration.setName("CAS HttpServletRequest Wrapper Filter");
        return registration;
    }

    @Bean
    public FilterRegistrationBean casSingleSignOutFilter()
    {
        FilterRegistrationBean registration = new FilterRegistrationBean();
        registration.setFilter(new SingleSignOutFilter());
        registration.addUrlPatterns("/*");
        registration.setName("CAS Single Sign Out Filter");
        return registration;
    }

    @Override
    public void onStartup(ServletContext servletContext) throws ServletException {
        servletContext.addListener(SingleSignOutHttpSessionListener.class);
        servletContext.setInitParameter("casServerLogoutUrl",casServerLogoutUrl);
    }

}

异常
java.lang.RuntimeException: java.net.ConnectException: Connection refused
    org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:328)
    org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:291)
    org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:32)
    org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:187)
    org.springframework.security.cas.authentication.CasAuthenticationProvider.authenticateNow(CasAuthenticationProvider.java:140)
    org.springframework.security.cas.authentication.CasAuthenticationProvider.authenticate(CasAuthenticationProvider.java:126)
    org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:156)
    org.springframework.security.cas.web.CasAuthenticationFilter.attemptAuthentication(CasAuthenticationFilter.java:242)
    org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:195)
    org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
    org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:65)
    org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
    org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:105)
    org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
    org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:105)
    org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
    org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
    org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
    org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)
    org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
    org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
    org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)
    org.springframework.orm.jpa.support.OpenEntityManagerInViewFilter.doFilterInternal(OpenEntityManagerInViewFilter.java:147)
    org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
    com.broadwave.statistics.flow.filter.FlowFilter.doFilter(FlowFilter.java:76)
    org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
    org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)
    org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88)
    org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
    net.sf.ehcache.constructs.web.filter.GzipFilter.doFilter(GzipFilter.java:95)
    net.sf.ehcache.constructs.web.filter.Filter.doFilter(Filter.java:86)

Answer 1

需要确保你的服务为可用状态，关闭防火墙，或者开放相应端口，如果阿里云的话需要在阿里云开放端口

Answer 2

更详细的描述你的问题，你这么提问只能提供你一些思路
1，使用的是什么服务器
2，检查服务器的入防火墙是否有端口限制
3，如果是阿里云或者亚马逊是不是有一个组的概念，打开配置一下屏蔽端口