I'm using the Jasig Java Client in it's current version. Also, the redirectAfterValidation parameter is set to true, which is probably what you meant.

An additional info I got in the meantime: Using IE it seems to work by hitting the back-button after seeing the error. After doing so, the error doesn't appear again and the user can browse the pages as he's supposed to.

Kind regards,
Martin



Am 06.08.2009 um 14:46 schrieb Scott Battaglia:

My guess would be that one of your users may be pressing the Refresh button which would re-submit the ticket. Depending on which client you use, some have the ability to redirect after ticket validation and remove the ticket from the URL.

Its normal that after the service ticket is used, its removed, since its a one time use ticket. Even if it still existed, the validation would fail.

Cheers,
Scott


On Thu, Aug 6, 2009 at 8:04 AM, Martin Simons <[email protected] > wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello list,

we've been using CAS for quite some time now around
www.airlinesim.aero and for most users, including me, it works flawless.

But very few users are not able to log in the way they should.
Whenever they go to http://nicosia.airlinesim.aero and click on
"login", they are redirected to CAS and authenticate. When redirected
to nicosia, they get a "ticket not recognized" exception from the Java
CAS client. As I wasn't able to reproduce this problem myself I asked
a user who suffers from this issue to do it for me and that's what I
got in the log of the CAS server:

2009-08-06 13:55:30,238 DEBUG
[org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket
[ST-134-vDnO0L0xekFtCQmhFjhE-cas] to registry.
2009-08-06 13:55:30,239 INFO
[org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service
ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas] for service 
[http://nicosia.airlinesim.aero/action/portal/index
] for user [4711]
2009-08-06 13:55:30,798 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor
] - Extractor generated service for: 
http://nicosia.airlinesim.aero/action/portal/index
2009-08-06 13:55:30,799 DEBUG
[org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to
retrieve ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas]
2009-08-06 13:55:30,799 DEBUG
[org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-134-
vDnO0L0xekFtCQmhFjhE-cas] found in registry.
2009-08-06 13:55:30,799 DEBUG
[org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Removing
ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas] from registry
2009-08-06 13:55:30,919 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor
] - Extractor generated service for: 
http://nicosia.airlinesim.aero/action/portal/index
2009-08-06 13:55:30,920 DEBUG
[org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to
retrieve ticket [ST-134-vDnO0L0xekFtCQmhFjhE-cas]
2009-08-06 13:55:30,920 DEBUG
[org.jasig.cas.CentralAuthenticationServiceImpl] - ServiceTicket
[ST-134-vDnO0L0xekFtCQmhFjhE-cas] does not exist.

I find the "removing ticket from registry" line interesting. Is it
normal for this to happen?

What could be the reason for this behaviour? Anybody who faced this
issue before as well? Please let me know if you require any further
details.

Kind regards,
Martin


-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.11 (Darwin)

iEYEARECAAYFAkp6xtQACgkQOAUs1FEEeTNEZwCgnceShCnb6s+lQEsEYGL5tQ5w
ozcAn1jym2SEH6bmgiETAS7EYy1x5nMI
=Fwun
-----END PGP SIGNATURE-----

--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Attachment: PGP.sig
Description: Signierter Teil der Nachricht

Reply via email to