Thanks Misagh, That's right. I was debugging the code and found out the timeout caused the ticket to be expired.
Thanks for your help again, it was really helpful! David On Tuesday, April 19, 2016 at 8:21:06 AM UTC+9, Misagh Moayyed wrote: > > Tickets are maintained via an expiration policy and the default policy for > PTs says they should be around for 10 seconds. > > > > *From:* David Lee [mailto:[email protected] <javascript:>] > *Sent:* Monday, April 18, 2016 3:56 PM > *To:* CAS Community <[email protected] <javascript:>> > *Cc:* [email protected] <javascript:> > *Subject:* Re: [cas-user] Can't validate PGT after generating it > > > > Thanks Misagh, > > > > As you said, it's expired when trying to validate the ticket like below, > can you tell me why it's expired? > > > > 2016-04-19 07:52:03,025 INFO > [org.jasig.cas.services.DefaultServicesManagerImpl] - <Reloading registered > services.> > > 2016-04-19 07:52:03,028 INFO > [org.jasig.cas.services.DefaultServicesManagerImpl] - <Loaded 4 services > from JsonServiceRegistryDao.> > > 2016-04-19 07:52:35,298 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket [ > PT-2-avjRXjz1XrC5d3K4kgAn-cas01.wavity.com] has expired.> > > 2016-04-19 07:52:35,300 INFO > [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit > trail record BEGIN > > > > It would be very helpful to me if you share anything. > > > > Thanks > > > > David > > > > > > > On Monday, April 18, 2016 at 11:09:49 PM UTC+9, Misagh Moayyed wrote: > > It’s not the same. Look into your logs and you’ll see what happens to that > PT. It’s likely expiring as you debug and pause the execution flow. > > > > *From:* [email protected] [mailto:[email protected]] *On Behalf Of *David > Lee > *Sent:* Monday, April 18, 2016 12:41 AM > *To:* CAS Community <[email protected]> > *Subject:* [cas-user] Can't validate PGT after generating it > > > > Hi All, > > > > I created the proxy ticket successfully after spending some time to set it > up on CAS, but faced another problem so wanna ask you help me to find the > problem. > > > > 2016-04-18 16:12:21,323 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted ticket [ > PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com] for service [ > https://acme.test.com:8443/mywebapp/protected/] for user [[email protected] > ]> > > 2016-04-18 16:12:21,324 INFO > [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit > trail record BEGIN > > ============================================================= > > WHO: https://acme.test.com:8443/mywebapp/proxyCallback > > WHAT: PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com for > https://acme.test.com:8443/mywebapp/protected/ > > ACTION: PROXY_TICKET_CREATED > > APPLICATION: CAS > > WHEN: Mon Apr 18 16:12:21 KST 2016 > > CLIENT IP ADDRESS: 127.0.0.1 > > SERVER IP ADDRESS: 127.0.0.1 > > ============================================================= > > > > As you can see above the proxy ticket created (not sure if it's same to > proxy granting ticket, any difference?), after then tried to validate the > ticket with the URL below. > > > > > /cas/serviceValidate?ticket=PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.test.com&service=https://acme.test.com:8443/mywebapp/protected/ > > <http://accounts.wavity.com:8080/auth/serviceValidate?ticket=PT-2-weSbuRtCk5wbxhbH0EBF-cas01.wavity.com&service=https://acme.wavity.com:8443/mywebapp/protected/> > > > > And it always yields the result as below against to my exception. > > > > <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas";> > > <cas:authenticationFailure code="INVALID_TICKET"> > > Ticket 'PT-3-cTEsEfVlVqtJzpuWPuhT-cas01.wavity.com' not recognized > > </cas:authenticationFailure> > > </cas:serviceResponse> > > > > So I debugged CAS project on my eclipse and found out the elements in the > ticket registry cache changes at some point. > > In more detail, the created ticket was in the cache at first, but when I > was debugging at some point it's replaced with tickets starting with > PGT-xxxxxx. > > > > Can anyone share how to validate the proxy ticket, or correct me if I did > anything wrong? > > Appreciated any help. > > > > > > Thanks, > > David > > > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > . > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/905138e1-2c1f-43cc-95e0-bfb842c51445%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/905138e1-2c1f-43cc-95e0-bfb842c51445%40apereo.org?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/a/apereo.org/d/optout. > > -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/24a95939-22c4-4098-a695-0458bd9172bc%40apereo.org. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
