Which CAS server version are you using? I think this was fixed in 3.1.7 http://www.ja-sig.org/issues/browse/CASC-88
Bill On Thu, Feb 4, 2010 at 7:05 PM, Alex Barker <[email protected]> wrote: > I keep getting the attached stack trace when I try to forward the ticket > returned by > principal.getProxyTicketFor("https://phobos.callutheran.edu:8443/cas/clearPass";) > to clearPass. My servlet is almost identical to > http://www.ja-sig.org/wiki/display/CASC/JA-SIG+Java+Client+Simple+WebApp+Sample > ( http://www.ja-sig.org/wiki/download/attachments/13569483/mywebapp.war > ) except instead of trying to display the proxy ticket in getpt.jsp I am > doing the following: > > URL clearPassUrl = new URL(targetService + "?ticket=" + ticket + > "&service=" + URLEncoder.encode(targetService, "UTF-8")); > URLConnection clearPassConnection = clearPassUrl.openConnection(); > BufferedReader in = new BufferedReader( new > InputStreamReader(clearPassConnection.getInputStream()) ); > > String inputLine; > String message = ""; > while ((inputLine = in.readLine()) != null) { > message += inputLine + "\n"; > } > in.close(); > > > I am not sure of the code above is correct but its the only example I > was able to find ( > http://github.com/wgthom/CasOwa/blob/master/CasOwaAuthHandler.cs ) for > interfacing with the clearPass service. Does anyone know what I might > be doing wrong or a better way to work with clearPass? > > > StackTrace: > > 2010-02-04 15:16:50,489 INFO > [org.jasig.cas.authentication.AuthenticationManagerImpl] - > <AuthenticationHandler: > org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler successfully > authenticated the user which provided the following credentials: > [username: > abarker]> > > 2010-02-04 15:16:50,498 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service > ticket [ST-1-xLIbmcTyCVHoXlcImFOj-phobos] for service > [https://phobos.callutheran.edu:8443/ClearPassBridge/ServiceTicket] for > user [abarker]> > 2010-02-04 15:16:50,545 INFO > [org.jasig.cas.authentication.AuthenticationManagerImpl] - > <AuthenticationHandler: > org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler > successfully authenticated the user which provided the following > credentials: [callbackUrl: > https://phobos.callutheran.edu:8443/ClearPassBridge/proxyCallback]> > > 2010-02-04 15:16:50,595 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service > ticket [ST-2-Spd5LN0kL2dsH2SESs9Y-phobos] for service > [https://phobos.callutheran.edu:8443/cas/clearPass] for user > [https://phobos.callutheran.edu:8443/ClearPassBridge/proxyCallback]> > > Feb 4, 2010 3:16:50 PM org.apache.tomcat.util.http.Parameters > processParameters > > WARNING: Parameters: Invalid chunk > ignored. > > 2010-02-04 15:16:50,627 INFO > [org.jasig.cas.client.proxy.ProxyGrantingTicketStorageImpl] - <No Proxy > Ticket found for >> > > 2010-02-04 15:16:50,632 ERROR > [org.apache.catalina.core.ContainerBase.[Catalina].[localhost].[/cas].[cas]] > - <Servlet.service() for servlet cas threw > exception> > > java.lang.ClassCastException: java.lang.String cannot be cast to > [Ljava.lang.String; > > at > org.jasig.cas.client.validation.ProxyList.contains(ProxyList.java:34) > > at > org.jasig.cas.client.validation.Cas20ProxyTicketValidator.customParseResponse(Cas20ProxyTicketValidator.java:47) > > at > org.jasig.cas.client.validation.Cas20ServiceTicketValidator.parseResponseFromServer(Cas20ServiceTicketValidator.java:94) > > at > org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:188) > > at > org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:132) > > at > org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215) > > at > org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) > at > org.inspektr.common.web.ClientInfoThreadLocalFilter.doFilterInternal(ClientInfoThreadLocalFilter.java:48) > at > org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:75) > at > org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215) > at > org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188) > at > org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:210) > at > org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172) > at > org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) > at > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117) > at > org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108) > at > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:151) > at > org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:870) > at > org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:665) > at > org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:528) > at > org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:81) > at > org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:685) > at java.lang.Thread.run(Thread.java:636) > > > -- > You are currently subscribed to [email protected] as: [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
