That Ant pattern does match - otherwise you'd get the This service is not authorized to use CAS' error
The problem is that the ticket was issued for the url with the parameters ( https://lib.pepperdine.edu/login?qurl=ezp.1aHR0cDovL3dlYi5sZXhpcy1uZXhpcy5jb20vdW5pdmVyc2U) , but the request to /serviceValidate didn't include the same value as the 'service' parameter. I'm guessing the request looked like this: /serviceValidate/?ticket=ST-10578-iBHBMnz1Xd7WNmn3XxnZ-pcas&service= https://lib.pepperdine.edu/login when it should have been: /serviceValidate/?ticket=ST-10578-iBHBMnz1Xd7WNmn3XxnZ-pcas&service= https://lib.pepperdine.edu/login?qurl=ezp.1aHR0cDovL3dlYi5sZXhpcy1uZXhpcy5jb20vdW5pdmVyc2U On Wed, Apr 28, 2010 at 7:06 PM, Cary, Kim <[email protected]> wrote: > Can someone give me some insight into how a service authorization of: > > https://lib.pepperdine.edu/login** > > doesn't match the service > > > > https://lib.pepperdine.edu/login?qurl=ezp.1aHR0cDovL3dlYi5sZXhpcy1uZXhpcy5jb20vdW5pdmVyc2U > > I know I'm no ant pattern matching expert, but what could I be missing > about this? > > Begin forwarded message: > > > From: "[email protected]" <[email protected]> > > Date: April 28, 2010 3:57:31 PM PDT > > To: Information Security Operations <[email protected]> > > Subject: CAS Server Error > > > > [ERROR]2010-04-28 15:57:31,138 > > > > org.jasig.cas.CentralAuthenticationServiceImpl:338 > > > > ServiceTicket [ST-10578-iBHBMnz1Xd7WNmn3XxnZ-pcas] with service [ > https://lib.pepperdine.edu/login?qurl=ezp.1aHR0cDovL3dlYi5sZXhpcy1uZXhpcy5jb20vdW5pdmVyc2Udoes > not match supplied service [ > https://lib.pepperdine.edu/login] > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- Eric Pierce Identity Management Architect Information Technology University of South Florida (813) 974-8868 -- [email protected] -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
