title: CAS 4.x & Spring Security without SSL
body: <p>is it possible to use the CAS 4.x Server with Spring Security without SSL?</p>
  
  <p>I already tried to edit the CAS Server settings. 
  I added </p>
  
  <pre><code>&lt;bean id="ticketGrantingTicketCookieGenerator"
          class="org.jasig.cas.web.support.CookieRetrievingCookieGenerator"
          p:cookieSecure="false" p:cookieMaxAge="-1" p:cookieName="TGC"
          p:cookiePath="/cas" /&gt;
  </code></pre>
  
  <p>to the ticketGrantingTicketCookieGenerator.xml</p>
  
  <p>and I also added</p>
  
  <pre><code>&lt;bean id="warnCookieGenerator"
          class="org.jasig.cas.web.support.CookieRetrievingCookieGenerator"
          p:cookieSecure="false" p:cookieMaxAge="-1" p:cookieName="CASPRIVACY"
          p:cookiePath="/cas" /&gt;
  </code></pre>
  
  <p>to the warnCookieGenerator.xml </p>
  
  <p>I still get the following error from CAS:
  <em>Authentication failed because url was not secure.</em></p>
  
  <p>Is there any other configuration which can make CAS without SSL possible or isn't it possible the current version?</p>
  
  <p>Thanks in advance...</p>