Sébastien,
Check if the proxy process is being requested. CAS audit log output will show
creation of PGT and PT.
<!-- Log audit to all root appenders, and also to audit log (additivity
is not false) --> <AsyncLogger name="org.apereo.inspektr.audit.support"
level="info" includeLocation="true" >
Ray
Here is some output from my log:
2018-01-25 09:53:06,538 INFO [
org.aper.insp.audi.supp.Slf4jLoggingAuditTrailManager] - <Thu Jan 25 09:53:06
PST
2018|CAS|PGT-**********u91GUMqVv8-lgVkjY477wEBhlNKGzBif299BUQiybWyFX80pMJV6IKzRSsnhxVY-tomt|PROXY_GRANTING_TICKET_CREATED|https://democasclientlocal.uvic.ca/proxy/pgtCallback|127.0.0.1|127.0.0.1>;
[ajp-nio-8009-exec-5]2018-01-25 09:53:06,557 INFO [
org.aper.insp.audi.supp.Slf4jLoggingAuditTrailManager] - <Thu Jan 25 09:53:06
PST
2018|CAS|ST-2-VMFc7YhfDkgmp9udWGLGGgDAPLo-tomt|SERVICE_TICKET_VALIDATED|student.test101|127.0.0.1|127.0.0.1>
[ajp-nio-8009-exec-5]2018-01-25 09:53:06,626 INFO [
org.aper.insp.audi.supp.Slf4jLoggingAuditTrailManager] - <Thu Jan 25 09:53:06
PST 2018|CAS|PT-3-Nh2bJGzaCezqOPP0kAGXHuf9R0U-tomt for
https://democasclientlocal.uvic.ca/proxiable/proxyService?param=GetProxyData&clientSessionId=146EA18FF92136F36FA02732D80CF...|PROXY_TICKET_CREATED|student.test101|127.0.0.1|127.0.0.1>;
[ajp-nio-8009-exec-7]2018-01-25 09:53:06,662 INFO [
org.aper.insp.audi.supp.Slf4jLoggingAuditTrailManager] - <Thu Jan 25 09:53:06
PST
2018|CAS|PT-3-Nh2bJGzaCezqOPP0kAGXHuf9R0U-tomt|SERVICE_TICKET_VALIDATED|student.test101|127.0.0.1|127.0.0.1>
[ajp-nio-8009-exec-6]
On Thu, 2018-01-25 at 07:22 -0800, Sébastien Ragons wrote:
Hello,
The documentation of CAS tells that the response of
<https://apereo.github.io/cas/development/protocol/CAS-Protocol-Specification.html#252-response>
serviceValidate<https://apereo.github.io/cas/development/protocol/CAS-Protocol-Specification.html#252-response>
is like this example:
<cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas";>
<cas:authenticationSuccess>
<cas:user>username</cas:user>
<cas:proxyGrantingTicket>PGTIOU-84678-8a9d...</cas:proxyGrantingTicket>
</cas:authenticationSuccess>
</cas:serviceResponse>
On my side i never receive the tag proxyGrantingTicket but only that response:
<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
<cas:authenticationSuccess>
<cas:user>sebastien</cas:user>
</cas:authenticationSuccess>
</cas:serviceResponse>
I use a spring security client with this ticket validator:
@Bean
public TicketValidator ticketValidator() {
Cas20ServiceTicketValidator ticketValidator = new
Cas20ServiceTicketValidator("https://localhost:8443/cas/";);
ticketValidator.setProxyGrantingTicketStorage(pgtStorage);
return ticketValidator;
}
I have the same probleme when I use Cas30ServiceTicketValidator.
My problem is that i can't get the attributs in the response
because Cas30ServiceTicketValidator don't treat it if there is no ticket in the
response as you can see in
the code of org.jasig.cas.client.validation.Cas20ServiceTicketValidator (github
link<https://github.com/apereo/java-cas-client/blob/970a0f5db9a2cc96704ad3a5043994dc8bcfe212/cas-client-core/src/main/java/org/jasig/cas/client/validation/Cas20ServiceTicketValidator.java>)
protected final Assertion parseResponseFromServer(final String response)
throws TicketValidationException {
................ ...
if (CommonUtils.isNotBlank(proxyGrantingTicket)) {
final AttributePrincipal attributePrincipal = new
AttributePrincipalImpl(principal, attributes,
proxyGrantingTicket, this.proxyRetriever);
assertion = new AssertionImpl(attributePrincipal);
} else {
assertion = new AssertionImpl(new AttributePrincipalImpl(principal,
attributes));
}
............
}
Thank you for your help
Sébastien
--
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | [email protected]
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1516903606.1802.64.camel%40uvic.ca.
