import paramiko
ssh=paramiko.SSHClient(); ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh.connect("192.168.10.157", port=22, username="yunhai", password="123456", timeout=20)
def run(c):
    i,o,e=ssh.exec_command(c); return o.read().decode('utf-8','ignore')+("ERR:"+e.read().decode('utf-8','ignore') if e.read() else "")

print("=== 1) env vars containing REDIRECT / CUSTOM / CAS_LOGIN ===")
print(run("docker exec cas-sso env 2>/dev/null | grep -iE 'REDIRECT|CUSTOM|LOGIN|CAS_SERVER' "))
print("\n=== 2) full grep default-redirect-url in container FS ===")
print(run("docker exec cas-sso grep -rni 'default-redirect-url' /etc/cas /app 2>/dev/null | head"))
print("\n=== 3) run-cas.sh: how is cas.properties built? any hardcode of redirect/cas/login ===")
print(run("docker exec cas-sso grep -niE 'redirect|default-redirect|cas/login|cas.properties|NACOS|dataId|cat >' /app/run-cas.sh 2>/dev/null | head -40"))
print("\n=== 4) the effective cas.properties custom.* block ===")
print(run("docker exec cas-sso sh -c 'grep -niE \"^custom|^cas\" /etc/cas/config/cas.properties 2>/dev/null | head -40'"))
ssh.close()