My guess would be that one of your users may be pressing the Refresh button which would re-submit the ticket. Depending on which client you use, some have the ability to redirect after ticket validation and remove the ticket from the URL.
Its normal that after the service ticket is used, its removed, since its a one time use ticket. Even if it still existed, the validation would fail. Cheers, Scott On Thu, Aug 6, 2009 at 8:04 AM, Martin Simons <[email protected]>wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hello list, > > we've been using CAS for quite some time now around > www.airlinesim.aero and for most users, including me, it works flawless. > > But very few users are not able to log in the way they should. > Whenever they go to http://nicosia.airlinesim.aero and click on > "login", they are redirected to CAS and authenticate. When redirected > to nicosia, they get a "ticket not recognized" exception from the Java > CAS client. As I wasn't able to reproduce this problem myself I asked > a user who suffers from this issue to do it for me and that's what I > got in the log of the CAS server: > > 2009-08-06 13:55:30,238 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket > [ST-134-vDnO0L0xekFtCQmhFjhE-cas] to registry. > 2009-08-06 13:55:30,239 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service > ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas] for service [ > http://nicosia.airlinesim.aero/action/portal/index > ] for user [4711] > 2009-08-06 13:55:30,798 DEBUG > [org.jasig.cas.web.support.CasArgumentExtractor > ] - Extractor generated service for: > http://nicosia.airlinesim.aero/action/portal/index > 2009-08-06<http://nicosia.airlinesim.aero/action/portal/index%0A2009-08-06>13:55:30,799 > DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to > retrieve ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas] > 2009-08-06 13:55:30,799 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-134- > vDnO0L0xekFtCQmhFjhE-cas] found in registry. > 2009-08-06 13:55:30,799 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Removing > ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas] from registry > 2009-08-06 13:55:30,919 DEBUG > [org.jasig.cas.web.support.CasArgumentExtractor > ] - Extractor generated service for: > http://nicosia.airlinesim.aero/action/portal/index > 2009-08-06<http://nicosia.airlinesim.aero/action/portal/index%0A2009-08-06>13:55:30,920 > DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to > retrieve ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas] > 2009-08-06 13:55:30,920 DEBUG > [org.jasig.cas.CentralAuthenticationServiceImpl] - ServiceTicket > [ST-134-vDnO0L0xekFtCQmhFjhE-cas] does not exist. > > I find the "removing ticket from registry" line interesting. Is it > normal for this to happen? > > What could be the reason for this behaviour? Anybody who faced this > issue before as well? Please let me know if you require any further > details. > > Kind regards, > Martin > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.11 (Darwin) > > iEYEARECAAYFAkp6xtQACgkQOAUs1FEEeTNEZwCgnceShCnb6s+lQEsEYGL5tQ5w > ozcAn1jym2SEH6bmgiETAS7EYy1x5nMI > =Fwun > -----END PGP SIGNATURE----- > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
