When I request ticket validation using SAML 1.1 in CAS 3.4.2 I get the 
following error in my logs:

DEBUG [org.springframework.webflow.engine.impl.FlowExecutionImpl] - <Attempting 
to handle [org.springframework.webflow.execution.ActionExecutionException: 
Exception thrown executing 
org.jasig.cas.web.flow.generateserviceticketact...@56ad4264 in state 
'generateServiceTicket' of flow 'login' -- action execution attributes were 
'map[[empty]]'] with root cause 
[org.opensaml.artifact.InvalidArgumentException: Unexpected length: 21 
(expected 20)]>

I have looked at the uniqueIdGenerators.xml file at the 
SamlCompliantUniqueTicketIdGenerator and it initially looked like this:

        <bean id="samlServiceTicketUniqueIdGenerator" 
class="org.jasig.cas.util.SamlCompliantUniqueTicketIdGenerator">
                <constructor-arg index="0" value="https://localhost:8443"; />
        </bean>

I modified it to the following:

        <bean id="samlServiceTicketUniqueIdGenerator" 
class="org.jasig.cas.util.SamlCompliantUniqueTicketIdGenerator">
                <constructor-arg index="0" value="https://localhost:443"; />
                <property name="saml2compliant" value="false" />
        </bean>

I still get the same error.  I have a single connector listening via SSL on 
port 443.  The documentation for configuring SAML support is a bit unclear, I 
don't really know if I should be modifying that unique ID generator.  Here's 
the documentation I could find:

http://www.ja-sig.org/wiki/display/CASUM/SAML+1.1

Any help is appreciated

Thanks,

Nick

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to