I know this is an older post, however, I am experiencing the same issue on
CAS 5.1.1. Indeed it seems to be connected to the EhCache ticket registry.
If we remove it and use the default in-memory we are not experiencing this
issue. Is there maybe any fix for this?
On Wednesday, March 22, 2017 at 2:25:41 PM UTC+1, Frédéric Surleau wrote:
>
> Hi,
>
> We are using CAS 5.0.1.
>
> The service runs fine most of the time, but we found a special pattern in
> requests ending with SERVICE_TICKET_VALIDATE_FAILED
>
>
> 1. Client A
> 1. AUTHENTICATION_SUCCESS
> 2. TICKET_GRANTING_TICKET_CREATED
> 3. SERVICE_TICKET_CREATED
> 2. Client B
> 1. AUTHENTICATION_SUCCESS
> 2. TICKET_GRANTING_TICKET_CREATED
> 3. SERVICE_TICKET_CREATED
> 3. Client A
> 1. SERVICE_TICKET_VALIDATED
> 4. Client B
> 1. SERVICE_TICKET_VALIDATE_FAILED
>
>
>
> >
> 2017-03-15 17:08:47,297 INFO
> [org.apereo.cas.services.DefaultServicesManagerImpl] - <Loaded 20 services
> from JsonServiceRegistryDao.>
> 2017-03-15 17:08:55,071 INFO
> [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
> <LdapAuthenticationHandler successfully authenticated FFE0140>
> 2017-03-15 17:08:55,071 INFO
> [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
> <Authenticated principal [FFE0140] and attributes {...} with credentials
> [FFE0140].>
> 2017-03-15 17:08:55,072 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: FFE0140
> WHAT: Supplied credentials: [FFE0140]
> ACTION: AUTHENTICATION_SUCCESS
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 217.128.52.121
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
> >
> 2017-03-15 17:08:55,093 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: FFE0140
> WHAT:
> TGT-*************************************************SiyG25CMoh-ffecompet2-b
> ACTION: TICKET_GRANTING_TICKET_CREATED
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 217.128.52.121
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
> >
> 2017-03-15 17:08:55,125 INFO
> [org.apereo.cas.CentralAuthenticationServiceImpl] - <Granted ticket
> [ST-3115-fyOoKmWnFDNFDc07WbGg-ffecompet2-b] for service [
> https://ffecompet.ffe.com/] and principal [FFE0140]>
> 2017-03-15 17:08:55,125 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: FFE0140
> WHAT: ST-3115-fyOoKmWnFDNFDc07WbGg-ffecompet2-b for
> https://ffecompet.ffe.com/
> ACTION: SERVICE_TICKET_CREATED
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 217.128.52.121
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
> >
> 2017-03-15 17:08:55,289 INFO
> [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
> <LdapAuthenticationHandler successfully authenticated FFE0234>
> 2017-03-15 17:08:55,290 INFO
> [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
> <Authenticated principal [FFE0234] and attributes {...} with credentials
> [FFE0234].>
> 2017-03-15 17:08:55,290 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: FFE0234
> WHAT: Supplied credentials: [FFE0234]
> ACTION: AUTHENTICATION_SUCCESS
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 217.128.52.121
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
> >
> 2017-03-15 17:08:55,302 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: FFE0234
> WHAT:
> TGT-*************************************************lB2Tnt4ZyL-ffecompet2-b
> ACTION: TICKET_GRANTING_TICKET_CREATED
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 217.128.52.121
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
> >
> 2017-03-15 17:08:55,332 INFO
> [org.apereo.cas.CentralAuthenticationServiceImpl] - <Granted ticket
> [ST-3116-oZFDfEEDIsHfZk3XTuob-ffecompet2-b] for service [
> https://ffecompet.ffe.com/] and principal [FFE0234]>
> 2017-03-15 17:08:55,333 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: FFE0234
> WHAT: ST-3116-oZFDfEEDIsHfZk3XTuob-ffecompet2-b for
> https://ffecompet.ffe.com/
> ACTION: SERVICE_TICKET_CREATED
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 217.128.52.121
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
> >
> 2017-03-15 17:08:55,361 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: FFE0140
> WHAT: ST-3115-fyOoKmWnFDNFDc07WbGg-ffecompet2-b
> ACTION: SERVICE_TICKET_VALIDATED
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 178.32.189.161
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
> >
> 2017-03-15 17:08:55,513 INFO
> [org.apereo.cas.CentralAuthenticationServiceImpl] - <Service ticket
> [ST-3116-oZFDfEEDIsHfZk3XTuob-ffecompet2-b] does not exist.>
> 2017-03-15 17:08:55,514 INFO
> [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: audit:unknown
> WHAT: ST-3116-oZFDfEEDIsHfZk3XTuob-ffecompet2-b
> ACTION: SERVICE_TICKET_VALIDATE_FAILED
> APPLICATION: CAS
> WHEN: Wed Mar 15 17:08:55 CET 2017
> CLIENT IP ADDRESS: 178.32.189.161
> SERVER IP ADDRESS: 37.59.189.171
> =============================================================
>
>
> Any ideas ?
>
> Regards,
>
> Frédéric Surleau
>
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/36ad21ff-c499-49f2-a405-c3b894b3f706%40apereo.org.
