Jen, The ST is being validated against a URL with GLMSSESSIONID... but this was not present with the log in request (the 2 need to match). Change the CAS client to not send GLMS... or send it with the log in request. Or maybe change the service registry id to something like https://travel.host.com:4447/tvlexp/tvlexp-flex/.* (memory may be rusty here).
Ray On Mon, 2019-01-07 at 16:19 -0800, Jennifer LaVoie wrote: Trying to get a new authorized service to work. I get through to our cas login page, I can authenticate, but then I get this error returned. org.jasig.cas.client.validation.TicketValidationException: org.opensaml.SAMLException: Ticket 'ST-24-UBBnZVuL7dYjEXnopRzJUFf0Th8-cas3-prd' does not match supplied service. The original service was 'https://travel.host.com:4447/tvlexp/tvlexp-flex/index.html' and the supplied service was 'https://travel.host.com:4447/tvlexp/tvlexp-flex/index.html;GLMSSESSIONID=yI0qXyny74f0aHv_ba0lAkIt2fR2rdHAVRh75L-5lX_brVwVLl6e!-1429711590'. After I get this error, i click the back button on my browser, and it works. I got right in. Any ideas? Thank you Jen -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected] -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1546908608.5350.17.camel%40uvic.ca.
