Tickets are maintained via an expiration policy and the default policy for PTs says they should be around for 10 seconds.
From: David Lee [mailto:[email protected]] Sent: Monday, April 18, 2016 3:56 PM To: CAS Community <[email protected]> Cc: [email protected] Subject: Re: [cas-user] Can't validate PGT after generating it Thanks Misagh, As you said, it's expired when trying to validate the ticket like below, can you tell me why it's expired? 2016-04-19 07:52:03,025 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - <Reloading registered services.> 2016-04-19 07:52:03,028 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - <Loaded 4 services from JsonServiceRegistryDao.> 2016-04-19 07:52:35,298 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket [PT-2-avjRXjz1XrC5d3K4kgAn-cas01.wavity.com] has expired.> 2016-04-19 07:52:35,300 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN It would be very helpful to me if you share anything. Thanks David On Monday, April 18, 2016 at 11:09:49 PM UTC+9, Misagh Moayyed wrote: It’s not the same. Look into your logs and you’ll see what happens to that PT. It’s likely expiring as you debug and pause the execution flow. From: [email protected] <javascript:> [mailto:[email protected] <javascript:> ] On Behalf Of David Lee Sent: Monday, April 18, 2016 12:41 AM To: CAS Community <[email protected] <javascript:> > Subject: [cas-user] Can't validate PGT after generating it Hi All, I created the proxy ticket successfully after spending some time to set it up on CAS, but faced another problem so wanna ask you help me to find the problem. 2016-04-18 16:12:21,323 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted ticket [PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com <http://PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com> ] for service [https://acme.test.com:8443/mywebapp/protected/] for user [[email protected] <javascript:> ]> 2016-04-18 16:12:21,324 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: https://acme.test.com:8443/mywebapp/proxyCallback WHAT: PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com <http://PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com> for https://acme.test.com:8443/mywebapp/protected/ ACTION: PROXY_TICKET_CREATED APPLICATION: CAS WHEN: Mon Apr 18 16:12:21 KST 2016 CLIENT IP ADDRESS: 127.0.0.1 SERVER IP ADDRESS: 127.0.0.1 ============================================================= As you can see above the proxy ticket created (not sure if it's same to proxy granting ticket, any difference?), after then tried to validate the ticket with the URL below. /cas/serviceValidate?ticket=PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com <http://accounts.wavity.com:8080/auth/serviceValidate?ticket=PT-2-weSbuRtCk5wbxhbH0EBF-cas01.wavity.com&service=https://acme.wavity.com:8443/mywebapp/protected/> &service=https://acme.test.com:8443/mywebapp/protected/ And it always yields the result as below against to my exception. <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas";> <cas:authenticationFailure code="INVALID_TICKET"> Ticket 'PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.wavity.com <http://PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.wavity.com> ' not recognized </cas:authenticationFailure> </cas:serviceResponse> So I debugged CAS project on my eclipse and found out the elements in the ticket registry cache changes at some point. In more detail, the created ticket was in the cache at first, but when I was debugging at some point it's replaced with tickets starting with PGT-xxxxxx. Can anyone share how to validate the proxy ticket, or correct me if I did anything wrong? Appreciated any help. Thanks, David -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <javascript:> . To post to this group, send email to [email protected] <javascript:> . Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/905138e1-2c1f-43cc-95e0-bfb842c51445%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/905138e1-2c1f-43cc-95e0-bfb842c51445%40apereo.org?utm_medium=email&utm_source=footer> . For more options, visit https://groups.google.com/a/apereo.org/d/optout. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/bf30de36.00002780.00000018%40MMOAYYED.unicon.net. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
