I'm looking for help with a CAS proxy service issue. Our use case is pretty 
much exactly as described here:

https://apereo.github.io/cas/5.2.x/installation/Configuring-Proxy-Authentication.html

The user authenticates to front end application (A) via CAS. Application A 
needs to request an internal token associated with the authenticated user 
from application B. We are running CAS 5.2.4 and use phpCAS in both 
applications in this case.

All of the log entries indicate that A is correctly getting the PGT, 
acquiring a PT for B and making the request to B. B is receiving the PT and 
calling serviceValidate with it. CAS logs a SERVICE_TICKET_VALIDATED for 
the PT.

However, the SERVICE_TICKET_VALIDATED is immediately followed by these 
entries in the log:

2018-05-25 06:09:37,839 INFO 
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - 
<{"who":"tepeds","what":"PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11","action":"SERVICE_TICKET_VALIDATED","application":"CAS","when":"Fri
 
May 25 06:09:37 EDT 
2018","clientIpAddress":"10.0.79.70","serverIpAddress":"10.1.104.33"}>
2018-05-25 06:09:37,840 WARN 
[org.apereo.cas.validation.AbstractCasProtocolValidationSpecification] - 
<[Cas20WithoutProxyingValidationSpecification] is not internally satisfied 
by the produced assertion>
2018-05-25 06:09:37,840 WARN 
[org.apereo.cas.web.AbstractServiceValidateController] - <Service ticket 
[PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] does not satisfy validation 
specification.>

A section of the CAS log witH DEBUG enabled from the original generation of 
the PT is included below.

I've not been able to find anything helpful in the CAS or SP logs, nor 
through Google searches. Any suggestions on this would be appreciated.

-dirk

CAS log

2018-05-25 06:09:37,606 DEBUG 
[org.apereo.cas.ticket.factory.DefaultProxyTicketFactory] - <Looking up 
ticket id generator for 
[org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl]>
2018-05-25 06:09:37,607 DEBUG 
[org.apereo.cas.ticket.factory.DefaultProxyTicketFactory] - <Attempting to 
encode proxy ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]>
2018-05-25 06:09:37,607 DEBUG 
[org.apereo.cas.ticket.factory.DefaultProxyTicketFactory] - <Encoded proxy 
ticket id [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]>
2018-05-25 06:09:37,607 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,608 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,608 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,608 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[TGT-359-*********************************************************zSAFoSZSQI-mualcast11]>
2018-05-25 06:09:37,608 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Adding ticket 
[PGT-360-*********************************************************yDq91uvvL0-mualcast11]
 
with ttl [1800s]>
2018-05-25 06:09:37,609 DEBUG [org.apereo.cas.ticket.DefaultTicketCatalog] 
- <Locating ticket definition for ticket 
[PGT-360-*********************************************************yDq91uvvL0-mualcast11]>
2018-05-25 06:09:37,609 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map 
name [proxyGrantingTicketsCache] for ticket definition 
[org.apereo.cas.ticket.DefaultTicketDefinition@6749157b[implementationClass=class
 
org.apereo.cas.ticket.ProxyGrantingTicketImpl,prefix=PGT]]>
2018-05-25 06:09:37,609 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located 
Hazelcast map instance [proxyGrantingTicketsCache]>
2018-05-25 06:09:37,612 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Added ticket 
[PGT-360-*********************************************************yDq91uvvL0-mualcast11]
 
with ttl [1800s]>
2018-05-25 06:09:37,613 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Adding ticket 
[PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] with ttl [10s]>
2018-05-25 06:09:37,613 DEBUG [org.apereo.cas.ticket.DefaultTicketCatalog] 
- <Locating ticket definition for ticket 
[PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]>
2018-05-25 06:09:37,613 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map 
name [proxyTicketsCache] for ticket definition 
[org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class
 
org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]>
2018-05-25 06:09:37,613 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located 
Hazelcast map instance [proxyTicketsCache]>
2018-05-25 06:09:37,615 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Added ticket 
[PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] with ttl [10s]>
2018-05-25 06:09:37,615 INFO 
[org.apereo.cas.DefaultCentralAuthenticationService] - <Granted ticket 
[PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] for service 
[https://wsdev.miamioh.edu/authentication] for user [tepeds]>
2018-05-25 06:09:37,615 DEBUG 
[org.apereo.cas.AbstractCentralAuthenticationService] - <Publishing 
[org.apereo.cas.support.events.ticket.CasProxyTicketGrantedEvent@1776eb6b[proxyGrantingTicket=PGT-360-*********************************************************yDq91uvvL0-mualcast11,proxyTicket=PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]]>
2018-05-25 06:09:37,615 INFO 
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - 
<{"who":"tepeds","what":"PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11 for 
https://wsdev.miamioh.edu/authentication","action":"PROXY_TICKET_CREATED","application":"CAS","when":"Fri
 
May 25 06:09:37 EDT 
2018","clientIpAddress":"10.0.79.70","serverIpAddress":"10.1.104.33"}>
2018-05-25 06:09:37,616 DEBUG 
[org.apereo.cas.authentication.PseudoPlatformTransactionManager] - 
<Initiating transaction commit>
2018-05-25 06:09:37,808 DEBUG 
[org.apereo.cas.support.saml.authentication.principal.SamlServiceFactory] - 
<Request does not specify a [TARGET] or request body is empty>
2018-05-25 06:09:37,808 DEBUG 
[org.apereo.cas.web.support.DefaultArgumentExtractor] - <Created 
[org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@3054e97[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11,principal=<null>,loggedOutAlready=false,format=XML]]
 
based on 
[org.apereo.cas.authentication.principal.WebApplicationServiceFactory@14a1769d[]]>
2018-05-25 06:09:37,808 DEBUG 
[org.apereo.cas.web.support.AbstractArgumentExtractor] - <Extractor 
generated service type 
[org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl] 
for: [https://wsdev.miamioh.edu/authentication]>
2018-05-25 06:09:37,809 DEBUG 
[org.apereo.cas.authentication.PseudoPlatformTransactionManager] - 
<Creating new transaction with name 
[org.apereo.cas.DefaultCentralAuthenticationService.validateServiceTicket]: 
PROPAGATION_REQUIRED,ISOLATION_DEFAULT; 'ticketTransactionManager'>
2018-05-25 06:09:37,809 DEBUG 
[org.apereo.cas.AbstractCentralAuthenticationService] - <Attempting to 
decode service ticket [PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] to 
verify authenticity>
2018-05-25 06:09:37,809 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map 
name [proxyTicketsCache] for ticket definition 
[org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class
 
org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]>
2018-05-25 06:09:37,809 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located 
Hazelcast map instance [proxyTicketsCache]>
2018-05-25 06:09:37,812 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,813 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,813 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,813 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[PGT-360-*********************************************************yDq91uvvL0-mualcast11]>
2018-05-25 06:09:37,813 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,814 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,814 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,814 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[TGT-359-*********************************************************zSAFoSZSQI-mualcast11]>
2018-05-25 06:09:37,814 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,815 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,815 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,815 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[PGT-360-*********************************************************yDq91uvvL0-mualcast11]>
2018-05-25 06:09:37,815 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,816 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,816 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,816 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[TGT-359-*********************************************************zSAFoSZSQI-mualcast11]>
2018-05-25 06:09:37,816 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,816 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,817 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,817 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[PGT-360-*********************************************************yDq91uvvL0-mualcast11]>
2018-05-25 06:09:37,817 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,817 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,818 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,818 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[TGT-359-*********************************************************zSAFoSZSQI-mualcast11]>
2018-05-25 06:09:37,818 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,818 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,819 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,819 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[TGT-359-*********************************************************zSAFoSZSQI-mualcast11]>
2018-05-25 06:09:37,819 DEBUG 
[org.apereo.cas.DefaultCentralAuthenticationService] - <Resolved service 
[org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@302ca7f6[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=<null>,principal=tepeds,loggedOutAlready=false,format=XML]]
 
from the authentication request>
2018-05-25 06:09:37,819 DEBUG 
[org.apereo.cas.DefaultCentralAuthenticationService] - <Located registered 
service definition [id=5007,name=IT Services legacy web 
services,description=Authorize IT Services legacy REST services to use CAS 
and get all attributes. 
,serviceId=^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=5007,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllAttributeReleasePolicy@6a98983b[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@5fe5f343[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseAuthenticationAttributes=true,authorizedToReleaseProxyGrantingTicket=false,excludeDefaultAttributes=false,principalIdAttribute=<null>,consentPolicy=org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy@6f1203f7[excludedAttributes=<null>,includeOnlyAttributes=<null>,enabled=true]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@5bdbb0e4[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy@752cb2e4[^https://.*],logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@5a328e9[multifactorAuthenticationProviders=[],failureMode=NOT_SET,principalAttributeNameTrigger=<null>,principalAttributeValueToMatch=<null>,bypassEnabled=false],informationUrl=<null>,privacyUrl=<null>,contacts=[],expirationPolicy=org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy@7a518e11[deleteWhenExpired=false,notifyWhenDeleted=false,expirationDate=<null>],<null>]
 
from 
[org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@302ca7f6[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=<null>,principal=tepeds,loggedOutAlready=false,format=XML]]
 
to handle validation request>
2018-05-25 06:09:37,820 DEBUG 
[org.apereo.cas.DefaultCentralAuthenticationService] - <Attribute policy 
[org.apereo.cas.services.ReturnAllAttributeReleasePolicy@6a98983b[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@5fe5f343[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseAuthenticationAttributes=true,authorizedToReleaseProxyGrantingTicket=false,excludeDefaultAttributes=false,principalIdAttribute=<null>,consentPolicy=org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy@6f1203f7[excludedAttributes=<null>,includeOnlyAttributes=<null>,enabled=true]]]
 
is associated with service [id=5007,name=IT Services legacy web 
services,description=Authorize IT Services legacy REST services to use CAS 
and get all attributes. 
,serviceId=^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=5007,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllAttributeReleasePolicy@6a98983b[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@5fe5f343[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseAuthenticationAttributes=true,authorizedToReleaseProxyGrantingTicket=false,excludeDefaultAttributes=false,principalIdAttribute=<null>,consentPolicy=org.apereo.cas.services.consent.DefaultRegisteredServiceConsentPolicy@6f1203f7[excludedAttributes=<null>,includeOnlyAttributes=<null>,enabled=true]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@5bdbb0e4[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RegexMatchingRegisteredServiceProxyPolicy@752cb2e4[^https://.*],logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@5a328e9[multifactorAuthenticationProviders=[],failureMode=NOT_SET,principalAttributeNameTrigger=<null>,principalAttributeValueToMatch=<null>,bypassEnabled=false],informationUrl=<null>,privacyUrl=<null>,contacts=[],expirationPolicy=org.apereo.cas.services.DefaultRegisteredServiceExpirationPolicy@7a518e11[deleteWhenExpired=false,notifyWhenDeleted=false,expirationDate=<null>],<null>]>
2018-05-25 06:09:37,820 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Initiating attributes release phase for principal [tepeds] accessing 
service [https://wsdev.miamioh.edu/authentication] defined by registered 
service [^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*]...>
2018-05-25 06:09:37,820 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Locating principal attributes for [tepeds]>
2018-05-25 06:09:37,820 DEBUG 
[org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository] 
- <[DefaultPrincipalAttributesRepository] will return the collection of 
attributes directly associated with the principal object which are 
[{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, 
eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, 
urn:muohio.edu:directoryFullSearch, 
urn:muohio.edu:softwareStoreFacultyStaff, 
urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, 
urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, 
eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, 
mail=te...oh.edu}]>
2018-05-25 06:09:37,821 DEBUG 
[org.apereo.cas.authentication.principal.cache.AbstractPrincipalAttributesRepository]
 
- <Found [36] cached attributes for principal [tepeds] that are 
[{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, 
eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, 
urn:muohio.edu:directoryFullSearch, 
urn:muohio.edu:softwareStoreFacultyStaff, 
urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, 
urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, 
eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, 
mail=te...oh.edu}]>
2018-05-25 06:09:37,821 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Found principal attributes [{displayName=Mr. Dirk S. Tepe, 
eduPersonAffiliation=staff, 
eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, 
urn:muohio.edu:directoryFullSearch, 
urn:muohio.edu:softwareStoreFacultyStaff, 
urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, 
urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, 
eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, 
mail=te...oh.edu}] for [tepeds]>
2018-05-25 06:09:37,821 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Calling attribute policy [ReturnAllAttributeReleasePolicy] to process 
attributes for [tepeds]>
2018-05-25 06:09:37,822 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Attribute policy [ReturnAllAttributeReleasePolicy] allows release of 
[{displayName=Mr. Dirk S. Tepe, eduPersonAffiliation=staff, 
eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, 
urn:muohio.edu:directoryFullSearch, 
urn:muohio.edu:softwareStoreFacultyStaff, 
urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, 
urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, 
eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, 
mail=te...oh.edu}] for [tepeds]>
2018-05-25 06:09:37,822 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Attempting to merge policy attributes and default attributes>
2018-05-25 06:09:37,822 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Checking default attribute policy attributes>
2018-05-25 06:09:37,828 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Located application context. Retrieving default attributes for release, if 
any>
2018-05-25 06:09:37,829 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Default attributes for release are: [[]]>
2018-05-25 06:09:37,829 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Default attributes found to be released are [{}]>
2018-05-25 06:09:37,829 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Adding default attributes first to the released set of attributes>
2018-05-25 06:09:37,829 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Adding policy attributes to the released set of attributes>
2018-05-25 06:09:37,830 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Finalizing attributes release phase for principal [tepeds] accessing 
service [https://wsdev.miamioh.edu/authentication] defined by registered 
service [^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*]...>
2018-05-25 06:09:37,830 DEBUG 
[org.apereo.cas.services.AbstractRegisteredServiceAttributeReleasePolicy] - 
<Final collection of attributes allowed are: [{displayName=Mr. Dirk S. 
Tepe, eduPersonAffiliation=staff, 
eduPersonEntitlement=[urn:muohio.edu:directoryMailAlias, 
urn:muohio.edu:directoryFullSearch, 
urn:muohio.edu:softwareStoreFacultyStaff, 
urn:muohio.edu:directoryMailRouteAdmin, edu.muohio.useNewDomain, 
urn:muohio.edu:directoryAdministration], eduPersonPrimaryAffiliation=staff, 
eduPersonPrincipalName=te...oh.edu, givenName=Dirk, l=Oxford, 
mail=te...oh.edu}]>
2018-05-25 06:09:37,830 DEBUG 
[org.apereo.cas.DefaultCentralAuthenticationService] - <Calculated 
attributes for release per the release policy are [[displayName, 
eduPersonAffiliation, eduPersonEntitlement, eduPersonPrimaryAffiliation, 
eduPersonPrincipalName, givenName, l, mail, mailAlternateAddress, 
mailRoutingAddress, memberOf, muohioeduAffiliation, 
muohioeduAffiliationCode, muohioeduBuildingCode, 
muohioeduCampusTelephoneNumber, muohioeduDepartment, 
muohioeduDepartmentCode, muohioeduDirectoryListing, muohioeduDivision, 
muohioeduDivisionCode, muohioeduEmployeeType, muohioeduEmployeeTypeCode, 
muohioeduHidden, muohioeduHigherEducation, muohioeduLocationCode, 
muohioeduPrimaryAffiliation, muohioeduPrimaryAffiliationCode, 
muohioeduPrimaryLocation, muohioeduPrimaryLocationCode, personalTitle, 
postalAddress, sn, telephoneNumber, title, UDC_IDENTIFIER, uidNumber]]>
2018-05-25 06:09:37,830 DEBUG 
[org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider] - 
<Returning the default principal id [tepeds] for username.>
2018-05-25 06:09:37,831 DEBUG 
[org.apereo.cas.services.BaseRegisteredServiceUsernameAttributeProvider] - 
<Resolved username for [https://wsdev.miamioh.edu/authentication] is 
[tepeds]>
2018-05-25 06:09:37,831 DEBUG 
[org.apereo.cas.DefaultCentralAuthenticationService] - <Principal 
determined for release to [^https://ws(dev|test)?\.(miamioh|muohio)\.edu.*] 
is [tepeds]>
2018-05-25 06:09:37,831 DEBUG 
[org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy] - 
<Skipping access strategy policy, since no attributes rules are defined>
2018-05-25 06:09:37,831 DEBUG 
[org.apereo.cas.AbstractCentralAuthenticationService] - <Publishing 
[org.apereo.cas.support.events.ticket.CasServiceTicketValidatedEvent@d2f048e[assertion=org.apereo.cas.authentication.DefaultAuthentication@da4fcb4f:org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl@302ca7f6[id=https://wsdev.miamioh.edu/authentication,originalUrl=https://wsdev.miamioh.edu/authentication,artifactId=<null>,principal=tepeds,loggedOutAlready=false,format=XML],serviceTicket=PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11]]>
2018-05-25 06:09:37,832 DEBUG 
[org.apereo.cas.ticket.support.MultiTimeUseOrTimeoutExpirationPolicy] - 
<Ticket usage count [1] is greater than or equal to [1]. Ticket has expired>
2018-05-25 06:09:37,832 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map 
name [proxyTicketsCache] for ticket definition 
[org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class
 
org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]>
2018-05-25 06:09:37,832 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located 
Hazelcast map instance [proxyTicketsCache]>
2018-05-25 06:09:37,835 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,835 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,835 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,836 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[PGT-360-*********************************************************yDq91uvvL0-mualcast11]>
2018-05-25 06:09:37,836 DEBUG 
[org.apereo.cas.ticket.support.SurrogateSessionExpirationPolicy] - <Ticket 
is not associated with a surrogate authentication.>
2018-05-25 06:09:37,836 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Received 
expiration policy name [DEFAULT] to activate>
2018-05-25 06:09:37,836 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - <Located 
expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
by name [DEFAULT]>
2018-05-25 06:09:37,837 DEBUG 
[org.apereo.cas.ticket.support.BaseDelegatingExpirationPolicy] - 
<Activating expiration policy 
[org.apereo.cas.ticket.support.TicketGrantingTicketExpirationPolicy@10b989] 
for ticket 
[TGT-359-*********************************************************zSAFoSZSQI-mualcast11]>
2018-05-25 06:09:37,837 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Removing ticket 
[PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] from the registry.>
2018-05-25 06:09:37,837 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map 
name [proxyTicketsCache] for ticket definition 
[org.apereo.cas.ticket.DefaultTicketDefinition@257bfc8c[implementationClass=class
 
org.apereo.cas.ticket.ProxyTicketImpl,prefix=PT]]>
2018-05-25 06:09:37,837 DEBUG 
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located 
Hazelcast map instance [proxyTicketsCache]>
2018-05-25 06:09:37,839 INFO 
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - 
<{"who":"tepeds","what":"PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11","action":"SERVICE_TICKET_VALIDATED","application":"CAS","when":"Fri
 
May 25 06:09:37 EDT 
2018","clientIpAddress":"10.0.79.70","serverIpAddress":"10.1.104.33"}>
2018-05-25 06:09:37,840 DEBUG 
[org.apereo.cas.authentication.PseudoPlatformTransactionManager] - 
<Initiating transaction commit>
2018-05-25 06:09:37,840 DEBUG 
[org.apereo.cas.validation.AbstractCasProtocolValidationSpecification] - 
<Is validation specification set to enforce [renew] protocol behavior? 
[no]. Is assertion issued from a new login? [yes]>
2018-05-25 06:09:37,840 DEBUG 
[org.apereo.cas.validation.Cas20WithoutProxyingValidationSpecification] - 
<Number of chained authentications in the assertion [2]>
2018-05-25 06:09:37,840 WARN 
[org.apereo.cas.validation.AbstractCasProtocolValidationSpecification] - 
<[Cas20WithoutProxyingValidationSpecification] is not internally satisfied 
by the produced assertion>
2018-05-25 06:09:37,840 WARN 
[org.apereo.cas.web.AbstractServiceValidateController] - <Service ticket 
[PT-674-yWILn3iF7VqL-NqyjK7ACZsBndU-mualcast11] does not satisfy validation 
specification.>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d8e54ca8-4fe4-4163-a14f-6886ddfdb0cd%40apereo.org.

Reply via email to