404 error with /j_spring_cas_security_check using SWF + Spring Security + CAS

[joy192k]

It looks like this

15:16:47.805[20ms][total 20ms] Status: 302[Moved Temporarily]
GET http://localhost:8888/acme Load Flags[LOAD_DOCUMENT_URI  LOAD_INITIAL_DOCUMENT_URI  ] Content Size[-1] Mime Type[application/x-unknown-content-type]
   Request Headers:
      Host[localhost:8888]
      User-Agent[Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en,fr;q=0.7,en-us;q=0.3]
      Accept-Encoding[gzip, deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Connection[keep-alive]
      Referer[http://localhost:8888/manager/html/]
      Cookie[JSESSIONID=1121C3A6756511A8756FFFEEB4475F9F]
   Response Headers:
      Server[Apache-Coyote/1.1]
      Location[http://localhost:8888/acme/]
      Transfer-Encoding[chunked]
      Date[Thu, 03 Nov 2011 19:16:47 GMT]


15:16:48.515[0ms][total 94ms] Status: pending[]
GET http://localhost:8888/acme/ Load Flags[LOAD_DOCUMENT_URI  LOAD_REPLACE  LOAD_INITIAL_DOCUMENT_URI  ] Content Size[unknown] Mime Type[unknown]
   Request Headers:
      Host[localhost:8888]
      User-Agent[Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en,fr;q=0.7,en-us;q=0.3]
      Accept-Encoding[gzip, deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Connection[keep-alive]
      Referer[http://localhost:8888/manager/html/]
      Cookie[JSESSIONID=1121C3A6756511A8756FFFEEB4475F9F]


15:16:48.615[0ms][total 0ms] Status: pending[]
GET http://localhost:8888/favicon.ico Load Flags[LOAD_NORMAL] Content Size[unknown] Mime Type[unknown]
   Request Headers:
      Host[localhost:8888]
      User-Agent[Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en,fr;q=0.7,en-us;q=0.3]
      Accept-Encoding[gzip, deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Connection[keep-alive]


15:16:48.985[87ms][total 87ms] Status: 302[Moved Temporarily]
GET http://localhost:8888/acme/app/home Load Flags[LOAD_DOCUMENT_URI  LOAD_INITIAL_DOCUMENT_URI  ] Content Size[0] Mime Type[application/x-unknown-content-type]
   Request Headers:
      Host[localhost:8888]
      User-Agent[Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en,fr;q=0.7,en-us;q=0.3]
      Accept-Encoding[gzip, deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Connection[keep-alive]
      Cookie[JSESSIONID=1121C3A6756511A8756FFFEEB4475F9F]
   Response Headers:
      Server[Apache-Coyote/1.1]
      Location[https://localhost:8446/cas/login?service=http%3A%2F%2Flocalhost%3A8888%2Facme%2Fapp%2Fj_spring_cas_security_check]
      Content-Length[0]
      Date[Thu, 03 Nov 2011 19:16:49 GMT]


15:16:49.299[1022ms][total 1022ms] Status: 302[Moved Temporarily]
GET https://localhost:8446/cas/login?service=http%3A%2F%2Flocalhost%3A8888%2Facme%2Fapp%2Fj_spring_cas_security_check Load Flags[LOAD_DOCUMENT_URI  LOAD_REPLACE  LOAD_INITIAL_DOCUMENT_URI  ] Content Size[0] Mime Type[application/x-unknown-content-type]
   Request Headers:
      Host[localhost:8446]
      User-Agent[Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en,fr;q=0.7,en-us;q=0.3]
      Accept-Encoding[gzip, deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Connection[keep-alive]
      Cookie[JSESSIONID=96C2C175D7938BAB9D04CE88D02E2CB5; CASTGC=TGT-9-stQcXv95KMl1rGdCMxlHcgVI4211geQRFYHAH4tZetwNaWpYxH-cas]
   Response Headers:
      Server[Apache-Coyote/1.1]
      Pragma[no-cache]
      Expires[Thu, 01 Jan 1970 00:00:00 GMT]
      Cache-Control[no-cache, no-store]
      Location[http://localhost:8888/acme/app/j_spring_cas_security_check?ticket=ST-31-aHrjwdqOOdNzeerdmkvz-cas]
      Content-Length[0]
      Date[Thu, 03 Nov 2011 19:16:50 GMT]


15:16:50.942[99ms][total 208ms] Status: 404[Not Found]
GET http://localhost:8888/acme/app/j_spring_cas_security_check?ticket=ST-31-aHrjwdqOOdNzeerdmkvz-cas Load Flags[LOAD_DOCUMENT_URI  LOAD_REPLACE  LOAD_INITIAL_DOCUMENT_URI  ] Content Size[1093] Mime Type[text/html]
   Request Headers:
      Host[localhost:8888]
      User-Agent[Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en,fr;q=0.7,en-us;q=0.3]
      Accept-Encoding[gzip, deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Connection[keep-alive]
   Response Headers:
      Server[Apache-Coyote/1.1]
      Content-Type[text/html;charset=utf-8]
      Content-Length[1093]
      Date[Thu, 03 Nov 2011 19:16:51 GMT]


15:16:51.154[0ms][total 0ms] Status: pending[]
GET http://localhost:8888/favicon.ico Load Flags[LOAD_NORMAL] Content Size[unknown] Mime Type[unknown]
   Request Headers:
      Host[localhost:8888]
      User-Agent[Mozilla/5.0 (Windows NT 6.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1]
      Accept[text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8]
      Accept-Language[en,fr;q=0.7,en-us;q=0.3]
      Accept-Encoding[gzip, deflate]
      Accept-Charset[ISO-8859-1,utf-8;q=0.7,*;q=0.7]
      Connection[keep-alive]

[Rob Winch]

Try updating all the Spring Security jars to the latest version (3.0.7.RELEASE). If that doesn't help....I know you said the Spring Security logs do not help, but please enable them and post them to the thread for the exact same flow as you posted the tamper data logs. You might also try enabling logs for the cas server too.