Yes, there's a bug. I believe I opened an issue for it already for the next
CAS release.

Cheers,
Scott


On Thu, May 20, 2010 at 1:34 PM, Roy, Nicholas S <[email protected]>wrote:

> When I request ticket validation using SAML 1.1 in CAS 3.4.2 I get the
> following error in my logs:
>
> DEBUG [org.springframework.webflow.engine.impl.FlowExecutionImpl] -
> <Attempting to handle
> [org.springframework.webflow.execution.ActionExecutionException: Exception
> thrown executing 
> org.jasig.cas.web.flow.generateserviceticketact...@56ad4264in state 
> 'generateServiceTicket' of flow 'login' -- action execution
> attributes were 'map[[empty]]'] with root cause
> [org.opensaml.artifact.InvalidArgumentException: Unexpected length: 21
> (expected 20)]>
>
> I have looked at the uniqueIdGenerators.xml file at the
> SamlCompliantUniqueTicketIdGenerator and it initially looked like this:
>
>        <bean id="samlServiceTicketUniqueIdGenerator"
> class="org.jasig.cas.util.SamlCompliantUniqueTicketIdGenerator">
>                <constructor-arg index="0" value="https://localhost:8443";
> />
>        </bean>
>
> I modified it to the following:
>
>        <bean id="samlServiceTicketUniqueIdGenerator"
> class="org.jasig.cas.util.SamlCompliantUniqueTicketIdGenerator">
>                <constructor-arg index="0" value="https://localhost:443"; />
>                <property name="saml2compliant" value="false" />
>        </bean>
>
> I still get the same error.  I have a single connector listening via SSL on
> port 443.  The documentation for configuring SAML support is a bit unclear,
> I don't really know if I should be modifying that unique ID generator.
>  Here's the documentation I could find:
>
> http://www.ja-sig.org/wiki/display/CASUM/SAML+1.1
>
> Any help is appreciated
>
> Thanks,
>
> Nick
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to