Thanks Misagh, As you said, it's expired when trying to validate the ticket like below, can you tell me why it's expired?
2016-04-19 07:52:03,025 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - <Reloading registered services.> 2016-04-19 07:52:03,028 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - <Loaded 4 services from JsonServiceRegistryDao.> 2016-04-19 07:52:35,298 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket [PT-2-avjRXjz1XrC5d3K4kgAn-cas01.wavity.com] has expired.> 2016-04-19 07:52:35,300 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN It would be very helpful to me if you share anything. Thanks David On Monday, April 18, 2016 at 11:09:49 PM UTC+9, Misagh Moayyed wrote: > > It’s not the same. Look into your logs and you’ll see what happens to that > PT. It’s likely expiring as you debug and pause the execution flow. > > > > *From:* [email protected] <javascript:> [mailto:[email protected] > <javascript:>] *On Behalf Of *David Lee > *Sent:* Monday, April 18, 2016 12:41 AM > *To:* CAS Community <[email protected] <javascript:>> > *Subject:* [cas-user] Can't validate PGT after generating it > > > > Hi All, > > > > I created the proxy ticket successfully after spending some time to set it > up on CAS, but faced another problem so wanna ask you help me to find the > problem. > > > > 2016-04-18 16:12:21,323 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted ticket [ > PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com] for service [ > https://acme.test.com:8443/mywebapp/protected/] for user [[email protected] > <javascript:>]> > > 2016-04-18 16:12:21,324 INFO > [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit > trail record BEGIN > > ============================================================= > > WHO: https://acme.test.com:8443/mywebapp/proxyCallback > > WHAT: PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com for > https://acme.test.com:8443/mywebapp/protected/ > > ACTION: PROXY_TICKET_CREATED > > APPLICATION: CAS > > WHEN: Mon Apr 18 16:12:21 KST 2016 > > CLIENT IP ADDRESS: 127.0.0.1 > > SERVER IP ADDRESS: 127.0.0.1 > > ============================================================= > > > > As you can see above the proxy ticket created (not sure if it's same to > proxy granting ticket, any difference?), after then tried to validate the > ticket with the URL below. > > > > > /cas/serviceValidate?ticket=PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com&service=https://acme.test.com:8443/mywebapp/protected/ > > <http://accounts.wavity.com:8080/auth/serviceValidate?ticket=PT-2-weSbuRtCk5wbxhbH0EBF-cas01.wavity.com&service=https://acme.wavity.com:8443/mywebapp/protected/> > > > > And it always yields the result as below against to my exception. > > > > <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas";> > > <cas:authenticationFailure code="INVALID_TICKET"> > > Ticket 'PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.wavity.com' not recognized > > </cas:authenticationFailure> > > </cas:serviceResponse> > > > > So I debugged CAS project on my eclipse and found out the elements in the > ticket registry cache changes at some point. > > In more detail, the created ticket was in the cache at first, but when I > was debugging at some point it's replaced with tickets starting with > PGT-xxxxxx. > > > > Can anyone share how to validate the proxy ticket, or correct me if I did > anything wrong? > > Appreciated any help. > > > > > > Thanks, > > David > > > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > To post to this group, send email to [email protected] <javascript:>. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > . > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/905138e1-2c1f-43cc-95e0-bfb842c51445%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/905138e1-2c1f-43cc-95e0-bfb842c51445%40apereo.org?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/a/apereo.org/d/optout. > -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/3d72163d-ee12-43a9-81db-cab2c7b90727%40apereo.org. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
