Sorry, the value is incorrect in the other mail.. Forgot the CN.
<property name="trustedIssuerDnPattern" value="CN=EC de
Autenticação do Cartão de Cidadão 0003"/>
But the problem still persists..
Francisco
Francisco Estanqueiro wrote:
Hi,
I'm having an error auth handler for X509 Certificates..:
My Config Is:
<bean
class="org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler">
<property name="trustedIssuerDnPattern" value="EC de
Autenticação do Cartão de Cidadão 0003"/>
<property name="maxPathLength" value="3" />
<property name="checkKeyUsage" value="true" />
<property name="requireKeyUsage" value="true" />
</bean>
Witch gives me this error:
2010-02-25 19:02:58,209 WARN
[org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler]
- <authentication failed; cert pathLength not specified and
unlimited/unspecified not allowed by config *[see
maxPathLength_allow_unlimited]*>
2010-02-25 19:02:58,209 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] -
<AuthenticationHandler:
org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler
failed to authenticate the user which provided the following
credentials:
org.jasig.cas.adaptors.x509.authentication.principal.x509certificatecredenti...@f72e77>
See maxPathLength_allow_unlimited WHERE?? There is no such property to
config in deployerConfigContext..
And if I change the maxPathLength to another value like "1", it tells me
the pathLength should be 3.
2010-02-25 18:58:00,608 WARN
[org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler]
- authentication failed; cert pathLength [3] is more than allowed by
config [1]
2010-02-25 18:58:00,608 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] -
AuthenticationHandler:
org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler
failed to authenticate the user which provided the following
credentials:
org.jasig.cas.adaptors.x509.authentication.principal.x509certificatecredenti...@1b0d235
I keeping having the same error, and I'm kinda stuck.. Anybody? I
attached my cert path.
Francisco
------------------------------------------------------------------------
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
