I have been modifying my JAVA_OPTS settings under catalina.bat for Tomcat but CAS keeps firing this error, so I am completely clueless as to why is CAS errorring out if I make any changes to the JVM memory options??
Any help on this would be really appreciated, thank you currently my JVM settings are -Xms256M and -Xmx256M and when I try to set the -XX:MaxPermSize:128M, the cas shows this error even if the Tomcat starts smoothly. Now, I have removed the -XX:MaxPermSize:128M and CAS is still showing the same error Thanks! Kavita On Tue, Jul 21, 2009 at 3:52 PM, Kavita Tipnis <[email protected]>wrote: > Would this be a Tomcat bug/issue? > > Thank you. > Kavita > > > On Tue, Jul 21, 2009 at 3:10 PM, Kavita Tipnis <[email protected]>wrote: > >> I get it now. >> Here is something very weird >> >> After reconfiguring all the changes on my test environment(it works fine >> now), >> I wanted to make the same changes to production environment, but instead I >> just reinstalled Tomcat as a service and the 'Unable to validate >> ProxyTicketValidator' error message did not show up. >> >> As a result I am confused right now,because yesterday I made changes to >> increase the heap size in Tomcat and modified >> the service.bat file that comes with Tomcat.(Also the JAVA_OPTS >> environment variable is modified) ---- I know this has nothing to do with >> CAS, but today, I started getting the ProxyTicketValidator Error. >> To fix this on the production server I just resinstalled service.bat as a >> windows service and the error was gone. >> >> I spent more than 4 hrs and got a good solution and understanding of the >> ProxyTicketValidator and SSL trust issue but seems like the error was >> misleading (because I only changed environment variables for increasing heap >> size). >> >> Thank You, >> Kavita >> >> >> >> On Tue, Jul 21, 2009 at 2:54 PM, Marvin Addison <[email protected] >> > wrote: >> >>> > But the Tomcat documentation does not mention that. >>> >>> It has nothing to do with Tomcat, so would not be mentioned in that >>> context. The "infamous" ProxyTicketValidator you are getting is >>> caused by a connection initiated by a Java class to the CAS server. >>> The root cause an SSL trust issue between the JVM running your >>> application and the certificate presented by the CAS server. The >>> system keystore, $JAVA_HOME/jre/lib/security/cacerts, is the keystore >>> that matters in that case. >>> >>> M >>> >>> -- >>> You are currently subscribed to [email protected] as: >>> [email protected] >>> To unsubscribe, change settings or access archives, see >>> http://www.ja-sig.org/wiki/display/JSG/cas-user >>> >> >> >> >> -- >> Kavita Tipnis >> >> > > > -- > Kavita Tipnis > > -- Kavita Tipnis -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
