Generally, these errors fall into one of five categories: 1. Wrong callback url. I.e. its not one that's actually listening for the PGT. 2. Callback URL is not returning an appropriate response nor is it over HTTPS (by default, we only accept certain response codes [i.e. 200, and some other ones] and only https urls) 3. Outbound Firewall Issue (i.e. CAS server isn't allowed to send messages outbound) 4. Inbound Firewall Issue (i.e. CAS client is not configured to accept callback). 5. Certificate Error
>From the error message, it looks like #3 or #4 are more likely to have occurred. That's just a guess from the data presented. Cheers, Scott On Thu, May 6, 2010 at 5:53 PM, Cary, Kim <[email protected]> wrote: > Scott Bolan is correct. There are no outbound firewall rules between the > CAS server and his test station. > > On May 6, 2010, at 2:45 PM, Scott B wrote: > > > > > Thats for the quick reply Scott! > > > > CAS firewall: I have confirmed with the security team that there are no > > outbound firewall rules in effect > > > > Host firewall: I am running the IIS server of my local developer machine. > I > > recieve the same error if I turn my firewall off during testing. > > > > Network firewall: we also run a network firewall. I examined the logs > and > > there was no blocked traffic related to my IP or the CAS server IP. > > > > thanks again, > > > > > > -- > > View this message in context: > http://jasig.275507.n4.nabble.com/Clearpass-DotNetCasClient-Proxy-Ticket-error-tp2133333p2133408.html > > Sent from the CAS Developers mailing list archive at Nabble.com. > > > > -- > > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-dev > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-dev > > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
