On #1, that is the "expected" behavior. Proxy authentication is no longer turned on by default for tighter security purposes. Explicit configuration by turning on that flag though, as you indicated, would allow that back in.
On #2, would you be able to capture the logout messages sent on the CAS server side so that we could examine what is actually being sent back? -Misagh ----- Original Message ----- From: "Ian Wright" <ian.wri...@well.ox.ac.uk> To: cas-dev@lists.jasig.org Sent: Friday, October 25, 2013 5:03:56 AM Subject: Re: [cas-dev] CAS 4.0.0-RC2 released On 24/10/13 20:17, Jérôme LELEU wrote: Hi, CAS 4.0.0-RC2 has been released. It is now available in the Maven central repository. Please report any issue on the mailing lists. Thanks. Best regards, Jérôme -- You are currently subscribed to cas-dev@lists.jasig.org as: ian.wri...@well.ox.ac.uk To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev Hi, I've upgraded to RC2 from a working RC1 and thought I'd report on my experience in case it's useful. With as pwm as client (uses clearpass) CAS client 3.2.1 running in STS using VMware vFabric tc Server Developer Edition v2.8 (cas and pwm only apps running) 1. I get the following log message ] with root cause org.jasig.cas.client.validation.TicketValidationException: service.not.authorized.proxy This is solved by adding: <property name="allowedToProxy" value="true" /> to the relevant bean in the service registry 2. I think this one might be related to the problem I posted about previously where I've been sometimes seeing corrupt XML in the samlValidate response (also seen running in tomcat7 on Ubuntu 12.04 with multiple clients) 2013-10-25 09:51:30, ERROR, util.XmlUtils, org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 132; Element type "samlp:LogoutRequest" must be followed by either attribute specifications, ">" or "/>". org.xml.sax.SAXParseException; lineNumber: 1; columnNumber: 132; Element type "samlp:LogoutRequest" must be followed by either attribute specifications, ">" or "/>". at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:198) at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(ErrorHandlerWrapper.java:177) at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:441) at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:368) at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(XMLScanner.java:1388) at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.seekCloseOfStartTag(XMLDocumentFragmentScannerImpl.java:1355) at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.scanStartElement(XMLNSDocumentScannerImpl.java:261) at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl$NSContentDriver.scanRootElementHook(XMLNSDocumentScannerImpl.java:602) at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:3065) at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl$PrologDriver.next(XMLDocumentScannerImpl.java:881) at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:607) at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:116) at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:489) at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:835) at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:764) at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:123) at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1210) at org.jasig.cas.client.util.XmlUtils.getTextForElement(XmlUtils.java:164) -- You are currently subscribed to cas-dev@lists.jasig.org as: mmoay...@unicon.net To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev -- You are currently subscribed to cas-dev@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-dev
