I'm looking for help with a CAS proxy service issue. Our use case is pretty much exactly as described here:
https://apereo.github.io/cas/5.2.x/installation/Configuring-Proxy-Authentication.html The user authenticates to front end application (A) via CAS. Application A needs to request an internal token associated with the authenticated user from application B. We are running CAS 5.2.4 and use phpCAS in both applications in this case. All of the log entries indicate that A is correctly getting the PGT, acquiring a PT for B and making the request to B. B is receiving the PT and calling serviceValidate with it. CAS logs a SERVICE_TICKET_VALIDATED for the PT. However, the SERVICE_TICKET_VALIDATED is immediately followed by these entries in the log: 2018-05-25 06:09:37,839 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <{"who":"tepeds","what":"PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11","action":"SERVICE_TICKET_VALIDATED","application":"CAS","when":"Fri May 25 06:09:37 EDT 2018","clientIpAddress":"10.0.79.70","serverIpAddress":"10.1.104.33"}> 2018-05-25 06:09:37,840 WARN [org.apereo.cas.validation.AbstractCasProtocolValidationSpecification] - <[Cas20WithoutProxyingValidationSpecification] is not internally satisfied by the produced assertion> 2018-05-25 06:09:37,840 WARN [org.apereo.cas.web.AbstractServiceValidateController] - <Service ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] does not satisfy validation specification.> A section of the CAS log witH DEBUG enabled from the original generation of the PT is included below. I've not been able to find anything helpful in the CAS or SP logs, nor through Google searches. Any suggestions on this would be appreciated. -dirk CAS log 2018-05-25 06:09:37,606 DEBUG [org.apereo.cas.ticket.factory.DefaultProxyTicketFactory] - <Looking up ticket id generator for [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl]> 2018-05-25 06:09:37,607 DEBUG [org.apereo.cas.ticket.factory.DefaultProxyTicketFactory] - <Attempting to encode proxy ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]> 2018-05-25 06:09:37,607 DEBUG [org.apereo.cas.ticket.factory.DefaultProxyTicketFactory] - <Encoded proxy ticket id [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]> 2018-05-25 06:09:37,607 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,608 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,608 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,608 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [TGT-359-*********************************************************zSAFoSZSQI-mualcast11]> 2018-05-25 06:09:37,608 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Adding ticket [PGT-360-*********************************************************yDq91uvvL0-mualcast11] with ttl [1800s]> 2018-05-25 06:09:37,609 DEBUG [org.apereo.cas.ticket.DefaultTicketCatalog] - <Locating ticket definition for ticket [PGT-360-*********************************************************yDq91uvvL0-mualcast11]> 2018-05-25 06:09:37,609 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map name [proxyGrantingTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@6749157b[implementationClass=class org.apereo.cas.ticket.ProxyGrantingTicketImpl,prefix=PGT]]> 2018-05-25 06:09:37,609 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located Hazelcast map instance [proxyGrantingTicketsCache]> 2018-05-25 06:09:37,612 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Added ticket [PGT-360-*********************************************************yDq91uvvL0-mualcast11] with ttl [1800s]> 2018-05-25 06:09:37,613 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Adding ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] with ttl [10s]> 2018-05-25 06:09:37,613 DEBUG [org.apereo.cas.ticket.DefaultTicketCatalog] - <Locating ticket definition for ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]> 2018-05-25 06:09:37,613 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map name [proxyTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]> 2018-05-25 06:09:37,613 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located Hazelcast map instance [proxyTicketsCache]> 2018-05-25 06:09:37,615 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Added ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] with ttl [10s]> 2018-05-25 06:09:37,615 INFO [org.apereo.cas.DefaultCentralAuthenticationService] - <Granted ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] for service [https://wsdev.miamioh.edu/authentication] for user [tepeds]> 2018-05-25 06:09:37,615 DEBUG [org.apereo.cas.AbstractCentralAuthenticationService] - <Publishing [org.apereo.cas.support.events.ticket.CasProxyTicketGrantedEvent@1776eb6b[proxyGrantingTicket=PGT-360-*********************************************************yDq91uvvL0-mualcast11,proxyTicket=PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]]> 2018-05-25 06:09:37,615 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <{"who":"tepeds","what":"PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11 for https://wsdev.miamioh.edu/authentication","action":"PROXY_TICKET_CREATED","application":"CAS","when":"Fri May 25 06:09:37 EDT 2018","clientIpAddress":"10.0.79.70","serverIpAddress":"10.1.104.33"}> 2018-05-25 06:09:37,616 DEBUG [org.apereo.cas.authentication.PseudoPlatformTransactionManager] - <Initiating transaction commit> 2018-05-25 06:09:37,808 DEBUG [org.apereo.cas.support.saml.authentication.principal.SamlServiceFactory] - <Request does not specify a [TARGET] or request body is empty> 2018-05-25 06:09:37,808 DEBUG [org.apereo.cas.web.support.DefaultArgumentExtractor] - <Created [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@3054e97[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11,principal=<null>,loggedOutAlready=false,format=XML]] based on [org.apereo.cas.authentication.principal.WebApplicationServiceFactory@14a1769d[]]> 2018-05-25 06:09:37,808 DEBUG [org.apereo.cas.web.support.AbstractArgumentExtractor] - <Extractor generated service type [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl] for: [https://wsdev.miamioh.edu/authentication]> 2018-05-25 06:09:37,809 DEBUG [org.apereo.cas.authentication.PseudoPlatformTransactionManager] - <Creating new transaction with name [org.apereo.cas.DefaultCentralAuthenticationService.validateServiceTicket]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT; 'ticketTransactionManager'> 2018-05-25 06:09:37,809 DEBUG [org.apereo.cas.AbstractCentralAuthenticationService] - <Attempting to decode service ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] to verify authenticity> 2018-05-25 06:09:37,809 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map name [proxyTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]> 2018-05-25 06:09:37,809 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located Hazelcast map instance [proxyTicketsCache]> 2018-05-25 06:09:37,812 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,813 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,813 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,813 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [PGT-360-*********************************************************yDq91uvvL0-mualcast11]> 2018-05-25 06:09:37,813 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,814 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,814 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,814 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [TGT-359-*********************************************************zSAFoSZSQI-mualcast11]> 2018-05-25 06:09:37,814 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,815 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,815 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,815 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [PGT-360-*********************************************************yDq91uvvL0-mualcast11]> 2018-05-25 06:09:37,815 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,816 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,816 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,816 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [TGT-359-*********************************************************zSAFoSZSQI-mualcast11]> 2018-05-25 06:09:37,816 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,816 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,817 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,817 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [PGT-360-*********************************************************yDq91uvvL0-mualcast11]> 2018-05-25 06:09:37,817 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,817 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,818 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,818 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [TGT-359-*********************************************************zSAFoSZSQI-mualcast11]> 2018-05-25 06:09:37,818 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,818 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,819 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,819 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [TGT-359-*********************************************************zSAFoSZSQI-mualcast11]> 2018-05-25 06:09:37,819 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Resolved service [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@302ca7f6[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=<null>,principal=tepeds,loggedOutAlready=false,format=XML]] from the authentication request> 2018-05-25 06:09:37,819 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Located registered service definition [id=5007,name=IT Services legacy web services,description=Authorize IT Services legacy REST services to use CAS and get all attributes. ,serviceId=^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=5007,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllAttributeReleasePolicy@6a98983b[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@5fe5f343[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseAuthenticationAttributes=true,authorizedToReleaseProxyGrantingTicket=false,excludeDefaultAttributes=false,principalIdAttribute=<null>,consentPolicy=org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy@6f1203f7[excludedAttributes=<null>,includeOnlyAttributes=<null>,enabled=true]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@5bdbb0e4[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy@752cb2e4[^https://.*],logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@5a328e9[multifactorAuthenticationProviders=[],failureMode=NOT_SET,principalAttributeNameTrigger=<null>,principalAttributeValueToMatch=<null>,bypassEnabled=false],informationUrl=<null>,privacyUrl=<null>,contacts=[],expirationPolicy=org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy@7a518e11[deleteWhenExpired=false,notifyWhenDeleted=false,expirationDate=<null>],<null>] from [org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@302ca7f6[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=<null>,principal=tepeds,loggedOutAlready=false,format=XML]] to handle validation request> 2018-05-25 06:09:37,820 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Attribute policy [org.apereo.cas.services.ReturnAllAttributeReleasePolicy@6a98983b[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@5fe5f343[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseAuthenticationAttributes=true,authorizedToReleaseProxyGrantingTicket=false,excludeDefaultAttributes=false,principalIdAttribute=<null>,consentPolicy=org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy@6f1203f7[excludedAttributes=<null>,includeOnlyAttributes=<null>,enabled=true]]] is associated with service [id=5007,name=IT Services legacy web services,description=Authorize IT Services legacy REST services to use CAS and get all attributes. ,serviceId=^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=5007,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllAttributeReleasePolicy@6a98983b[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@5fe5f343[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseAuthenticationAttributes=true,authorizedToReleaseProxyGrantingTicket=false,excludeDefaultAttributes=false,principalIdAttribute=<null>,consentPolicy=org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy@6f1203f7[excludedAttributes=<null>,includeOnlyAttributes=<null>,enabled=true]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@5bdbb0e4[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy@752cb2e4[^https://.*],logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@5a328e9[multifactorAuthenticationProviders=[],failureMode=NOT_SET,principalAttributeNameTrigger=<null>,principalAttributeValueToMatch=<null>,bypassEnabled=false],informationUrl=<null>,privacyUrl=<null>,contacts=[],expirationPolicy=org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy@7a518e11[deleteWhenExpired=false,notifyWhenDeleted=false,expirationDate=<null>],<null>]> 2018-05-25 06:09:37,820 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Initiating attributes release phase for principal [tepeds] accessing service [https://wsdev.miamioh.edu/authentication] defined by registered service [^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*]...> 2018-05-25 06:09:37,820 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Locating principal attributes for [tepeds]> 2018-05-25 06:09:37,820 DEBUG [org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository] - <[DefaultPrincipalAttributesRepository] will return the collection of attributes directly associated with the principal object which are [{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, urn:muohio.edu:directoryFullSearch, urn:muohio.edu:softwareStoreFacultyStaff, urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, mail=te...oh.edu}]> 2018-05-25 06:09:37,821 DEBUG [org.apereo.cas.authentication.principal.cache.AbstractPrincipalAttributesRepository] - <Found [36] cached attributes for principal [tepeds] that are [{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, urn:muohio.edu:directoryFullSearch, urn:muohio.edu:softwareStoreFacultyStaff, urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, mail=te...oh.edu}]> 2018-05-25 06:09:37,821 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Found principal attributes [{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, urn:muohio.edu:directoryFullSearch, urn:muohio.edu:softwareStoreFacultyStaff, urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, mail=te...oh.edu}] for [tepeds]> 2018-05-25 06:09:37,821 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Calling attribute policy [ReturnAllAttributeReleasePolicy] to process attributes for [tepeds]> 2018-05-25 06:09:37,822 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Attribute policy [ReturnAllAttributeReleasePolicy] allows release of [{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, urn:muohio.edu:directoryFullSearch, urn:muohio.edu:softwareStoreFacultyStaff, urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, mail=te...oh.edu}] for [tepeds]> 2018-05-25 06:09:37,822 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Attempting to merge policy attributes and default attributes> 2018-05-25 06:09:37,822 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Checking default attribute policy attributes> 2018-05-25 06:09:37,828 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Located application context. Retrieving default attributes for release, if any> 2018-05-25 06:09:37,829 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Default attributes for release are: [[]]> 2018-05-25 06:09:37,829 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Default attributes found to be released are [{}]> 2018-05-25 06:09:37,829 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Adding default attributes first to the released set of attributes> 2018-05-25 06:09:37,829 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Adding policy attributes to the released set of attributes> 2018-05-25 06:09:37,830 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Finalizing attributes release phase for principal [tepeds] accessing service [https://wsdev.miamioh.edu/authentication] defined by registered service [^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*]...> 2018-05-25 06:09:37,830 DEBUG [org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - <Final collection of attributes allowed are: [{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, urn:muohio.edu:directoryFullSearch, urn:muohio.edu:softwareStoreFacultyStaff, urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, mail=te...oh.edu}]> 2018-05-25 06:09:37,830 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Calculated attributes for release per the release policy are [[displayName, eduPersonAffiliation, eduPersonEntitlement, eduPersonPrimaryAffiliation, eduPersonPrincipalName, givenName, l, mail, mailAlternateAddress, mailRoutingAddress, memberOf, muohioeduAffiliation, muohioeduAffiliationCode, muohioeduBuildingCode, muohioeduCampusTelephoneNumber, muohioeduDepartment, muohioeduDepartmentCode, muohioeduDirectoryListing, muohioeduDivision, muohioeduDivisionCode, muohioeduEmployeeType, muohioeduEmployeeTypeCode, muohioeduHidden, muohioeduHigherEducation, muohioeduLocationCode, muohioeduPrimaryAffiliation, muohioeduPrimaryAffiliationCode, muohioeduPrimaryLocation, muohioeduPrimaryLocationCode, personalTitle, postalAddress, sn, telephoneNumber, title, UDC_IDENTIFIER, uidNumber]]> 2018-05-25 06:09:37,830 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider] - <Returning the default principal id [tepeds] for username.> 2018-05-25 06:09:37,831 DEBUG [org.apereo.cas.services.BaseRegisteredServiceUsernameAttributeProvider] - <Resolved username for [https://wsdev.miamioh.edu/authentication] is [tepeds]> 2018-05-25 06:09:37,831 DEBUG [org.apereo.cas.DefaultCentralAuthenticationService] - <Principal determined for release to [^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*] is [tepeds]> 2018-05-25 06:09:37,831 DEBUG [org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - <Skipping access strategy policy, since no attributes rules are defined> 2018-05-25 06:09:37,831 DEBUG [org.apereo.cas.AbstractCentralAuthenticationService] - <Publishing [org.apereo.cas.support.events.ticket.CasServiceTicketValidatedEvent@d2f048e[assertion=org.apereo.cas.authentication.DefaultAuthentication@da4fcb4f:org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@302ca7f6[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=<null>,principal=tepeds,loggedOutAlready=false,format=XML],serviceTicket=PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]]> 2018-05-25 06:09:37,832 DEBUG [org.apereo.cas.ticket.support.MultiTimeUseOrTimeoutExpirationPolicy] - <Ticket usage count [1] is greater than or equal to [1]. Ticket has expired> 2018-05-25 06:09:37,832 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map name [proxyTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]> 2018-05-25 06:09:37,832 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located Hazelcast map instance [proxyTicketsCache]> 2018-05-25 06:09:37,835 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,835 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,835 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,836 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [PGT-360-*********************************************************yDq91uvvL0-mualcast11]> 2018-05-25 06:09:37,836 DEBUG [org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket is not associated with a surrogate authentication.> 2018-05-25 06:09:37,836 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received expiration policy name [DEFAULT] to activate> 2018-05-25 06:09:37,836 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] by name [DEFAULT]> 2018-05-25 06:09:37,837 DEBUG [org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Activating expiration policy [org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] for ticket [TGT-359-*********************************************************zSAFoSZSQI-mualcast11]> 2018-05-25 06:09:37,837 DEBUG [org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Removing ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] from the registry.> 2018-05-25 06:09:37,837 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map name [proxyTicketsCache] for ticket definition [org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]> 2018-05-25 06:09:37,837 DEBUG [org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located Hazelcast map instance [proxyTicketsCache]> 2018-05-25 06:09:37,839 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <{"who":"tepeds","what":"PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11","action":"SERVICE_TICKET_VALIDATED","application":"CAS","when":"Fri May 25 06:09:37 EDT 2018","clientIpAddress":"10.0.79.70","serverIpAddress":"10.1.104.33"}> 2018-05-25 06:09:37,840 DEBUG [org.apereo.cas.authentication.PseudoPlatformTransactionManager] - <Initiating transaction commit> 2018-05-25 06:09:37,840 DEBUG [org.apereo.cas.validation.AbstractCasProtocolValidationSpecification] - <Is validation specification set to enforce [renew] protocol behavior? [no]. Is assertion issued from a new login? [yes]> 2018-05-25 06:09:37,840 DEBUG [org.apereo.cas.validation.Cas20WithoutProxyingValidationSpecification] - <Number of chained authentications in the assertion [2]> 2018-05-25 06:09:37,840 WARN [org.apereo.cas.validation.AbstractCasProtocolValidationSpecification] - <[Cas20WithoutProxyingValidationSpecification] is not internally satisfied by the produced assertion> 2018-05-25 06:09:37,840 WARN [org.apereo.cas.web.AbstractServiceValidateController] - <Service ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] does not satisfy validation specification.> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d8e54ca8-4fe4-4163-a14f-6886ddfdb0cd%40apereo.org.
