It’s likely because the auditing code gets its hand on the final operation result AFTER it’s done, and the operation deletes the ticket.
Something to look into, if you want to submit an issue. From: [email protected] [mailto:[email protected]] On Behalf Of Yan Zhou Sent: Thursday, May 19, 2016 6:29 AM To: CAS Community <[email protected]> Subject: [cas-user] Auditing code look up ticket after it is already deleted, why? Hi, This is CAS 4.1.7 overlay app. I do not know if I missed something, the auditing code cannot find the ticket, because it is looking it up after it is already deleted. But i have not changed anything as far as auditing is concerned. Yan 2016-05-19 13:21:48,795 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - <Extractor generated service for: https://intcas.dev.medplus.com/cas-admin/j_spring_cas_security_check> 2016-05-19 13:21:48,803 DEBUG [org.jasig.cas.ticket.registry.MemCacheTicketRegistry] - <Updating ticket ST-1-7ofsFTmc9Kh43zqSWjWo-dcasde01.dev.medplus.com> 2016-05-19 13:21:48,808 DEBUG [org.jasig.cas.CentralAuthenticationServiceImpl] - <Attribute policy [org.jasig.cas.services.ReturnAllowedAttributeReleasePolicy@3ae91ec[attributeFilter=<null>,principalAttributesRepository=org.jasig.cas.authentication.principal.DefaultPrincipalAttributesRepository@39ee1ed7[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseProxyGrantingTicket=false,allowedAttributes=[]]] is associated with service [id=128,name=cas-admin,description=cas-admin,serviceId=^https?://[\w\._-]+\.(qdx|questdiagnostics|medplus|care360|care180|cin\.mp-emaxx)\.com(:\d+)?/(cas-admin.*|care360-admin.*)|^http://(localhost|10\.0\.2\.2):\d+(/cas-admin.*|/care360-admin.*|/j_spring_cas_security.*)?,usernameAttributeProvider=org.jasig.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=casadmin,evaluationOrder=2,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.jasig.cas.services.ReturnAllowedAttributeReleasePolicy@3ae91ec[attributeFilter=<null>,principalAttributesRepository=org.jasig.cas.authentication.principal.DefaultPrincipalAttributesRepository@39ee1ed7[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseProxyGrantingTicket=false,allowedAttributes=[]],accessStrategy=org.jasig.cas.services.DefaultRegisteredServiceAccessStrategy@70b6e8dc[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},startingDateTime=<null>,endingDateTime=<null>,unauthorizedRedirec tUrl=<null>,caseInsensitive=false],publicKey=<null>,proxyPolicy=org.jasig.cas.services.RefuseRegisteredServiceProxyPolicy@3b807dcb,logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},<null>]> 2016-05-19 13:21:48,830 DEBUG [org.jasig.cas.ticket.registry.MemCacheTicketRegistry] - <Deleting ticket ST-1-7ofsFTmc9Kh43zqSWjWo-dcasde01.dev.medplus.com> 2016-05-19 13:21:48,833 DEBUG [org.jasig.cas.audit.spi.TicketOrCredentialPrincipalResolver] - <Resolving argument [String] for audit> 2016-05-19 13:21:48,835 DEBUG [org.jasig.cas.CentralAuthenticationServiceImpl] - <Ticket [ST-1-7ofsFTmc9Kh43zqSWjWo-dcasde01.dev.medplus.com] by type [Ticket] cannot be found in the ticket registry.> 2016-05-19 13:21:48,838 DEBUG [org.jasig.cas.audit.spi.TicketOrCredentialPrincipalResolver] - <Could not locate ticket [ST-1-7ofsFTmc9Kh43zqSWjWo-dcasde01.dev.medplus.com] in the registry> 2016-05-19 13:21:48,838 DEBUG [org.jasig.cas.audit.spi.TicketOrCredentialPrincipalResolver] - <Unable to determine the audit argument. Returning [audit:unknown]> 2016-05-19 13:21:48,839 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: ST-1-7ofsFTmc9Kh43zqSWjWo-dcasde01.dev.medplus.com ACTION: SERVICE_TICKET_VALIDATED APPLICATION: CAS -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To post to this group, send email to [email protected] <mailto:[email protected]> . Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ff42aabe-1542-4875-8178-58deaed1c0e0%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/ff42aabe-1542-4875-8178-58deaed1c0e0%40apereo.org?utm_medium=email&utm_source=footer> . For more options, visit https://groups.google.com/a/apereo.org/d/optout. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/019b01d1b1dc%24651a9f20%242f4fdd60%24%40unicon.net. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
