Looks like you're missing some debug logging in org.jasig.cas.adaptors.x509.authentication.principal.X509CertificateCredentialsToIdentifierPrincipalResolver that will help identify the problem. Put that package in DEBUG and try again. My hunch is that this class assumes the DN components are delimited by "," while yours are ", " (note the space).
M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
