I only have one cert installed in this computer.. I'm sure its the same.

I can setup DEBUG level by doing this, right? log4j.logger.org.jasig.cas.authentication=DEBUG

If so, I get exactly the same the log in IE and a bigger log in the Firefox.

Francisco

Marvin Addison wrote:
2010-02-26 18:58:34,557 WARN
[org.jasig.cas.adaptors.x509.authentication.handler.support.X509CredentialsAuthenticationHandler]
- authentication failed; cert pathLength [3] is more than allowed by config
[1]

That's a very odd failure since you have maxPathLengthAllowUnspecified
set to true.

It says its an error in config.. but thats weird because it works in firefox
perfectly. Anyone knows whats happening?

Are you absolutely certain you're sending the same certificate in both
browsers?  You might turn X509CredentialsAuthenticationHandler up to
DEBUG so you can see the cert DN written to the logs to confirm the
server is receiving what you think you're sending.

M



--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to