Hi all
watching the log
The ticket for mfa-simple is generated correctly and sent via SMS to the
user
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Adding ticket
*[CAS-811937*] with ttl [30s]>
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Encoding ticket
[TransientSessionTicketImpl(super=CAS-811937, service=null, properties={})]>
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Encoded original
ticket id [CAS-811937] to *[*
*285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc*
4]>
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Created encoded
ticket
[EncodedTicket(id=285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc4)]>
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Locating map
name [transientSessionTicketsCache] for ticket definition
[DefaultTicketDefinition(implementationClass=class
org.apereo.cas.ticket.TransientSessionTicketImpl, *prefix=TST*,
properties=DefaultTicketDefinitionProperties(cascade=false,
storageName=transientSessionTicketsCache, storageTimeout=300,
storagePassword=null), order=2147483647)]>
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Located
Hazelcast map instance [transientSessionTicketsCache]>
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <Added ticket
[285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc4]
with ttl [30s]>
[org.apereo.cas.mfa.simple.web.flow.CasSimpleSendTokenAction] -*
<Successfully submitted token via SMS to [zzzzzzzzzzz*
*]>*
later the user ....
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Attempting authentication of *[CAS-811937] *using [mfa-simple]>
[org.apereo.cas.mfa.simple.CasSimpleMultifactorAuthenticationHandler] -
<Received token [*CAS-811937*]>
[org.apereo.cas.mfa.simple.CasSimpleMultifactorAuthenticationHandler] -
<Received principal id [zzzzzzzzzzz]. Attempting to locate token in
registry...>
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - <Encoded
original to [
*285cd5a0e685fd1337f7dda6a60a848691dca84e5360b54beb95696e369fba18455477846cbda7850c4f6c79b5902b158f8e9c653edbc2d826a46beda0c73bc4*
]>
[org.apereo.cas.ticket.DefaultTicketCatalog] -* <Ticket definition for
[CAS-811937] cannot be found in the ticket catalog which only contains the
following ticket types: [[TGT, ST, RT, AT, PT, TST, OC, SART, PGT, SATQ,
ODT]]>*
[org.apereo.cas.ticket.registry.HazelcastTicketRegistry] - <No ticket
definition could be found in the catalog to match [CAS-811937]>
[org.apereo.cas.mfa.simple.CasSimpleMultifactorAuthenticationHandler] -
<Authorization of token [CAS-811937] has failed. Token is not found in
registry>
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<Authentication has failed. Credentials may be incorrect or CAS cannot find
authentication handler that supports
[CasSimpleMultifactorTokenCredential()] of type
[CasSimpleMultifactorTokenCredential]. Examine the configuration to ensure
a method of authentication is defined and analyze CAS logs at DEBUG level
to trace the authentication event.>
[org.apereo.cas.authentication.PolicyBasedAuthenticationManager] -
<[mfa-simple] exception details: [Failed to authenticate code CAS-811937].
This is my configuration:
cas.smsProvider.rest.method=POST
cas.smsProvider.rest.url=https://xxxxxx/sms.php
cas.authn.mfa.simple.sms.from=XXXXXX
cas.authn.mfa.simple.sms.attributeName=TelephoneNumber
cas.authn.mfa.simple.name=mfa-simple
cas.authn.mfa.simple.order=1
cas.authn.mfa.simple.timeToKillInSeconds=30
cas.authn.mfa.globalPrincipalAttributeNameTriggers=memberof
cas.authn.mfa.globalPrincipalAttributeValueRegex=xxxxx
Its like that encoding the ticket works fine but later the ticket isn't TST
Any suggestion will be welcome
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/7c0ffc05-b036-4e5c-b091-9cee4672cb38%40apereo.org.
