If you have the logging level up high enough we should be describing why it
fails.

Also, the response from CAS should give some indication of why it failed.
 (in the second case when you remove the service parameter, that's why that
fails).


On Thu, Mar 31, 2011 at 9:43 AM, Harry Hoffman <[email protected]>wrote:

> Hi All,
>
> I'm trying to use serviceValidate and am running it a HTML only error: CAS
> is Unavailable
>
> The cas server is located at cas.fqdn.dom and I'm passing the following url
> via the browser:
>
> https://cas.fqdn.com/cas/serviceValidate?ticket=TGT-17-wRMnLKgslHfzRalSOVbVC
> RXAy9FW6k2bSmLzTXvocp7MeFTZXG-cas&service=https://godzilla.fqdn.dom/
>
> I see the following logged in catalina.out:
>
> 2011-03-31 09:40:27,348 INFO
> [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
> trail record BEGIN
> =============================================================
> WHO: hhoffman
> WHAT: TGT-17-wRMnLKgslHfzRalSOVbVCRXAy9FW6k2bSmLzTXvocp7MeFTZXG-cas
> ACTION: SERVICE_TICKET_VALIDATE_FAILED
> APPLICATION: CAS
> WHEN: Thu Mar 31 09:40:27 EDT 2011
> CLIENT IP ADDRESS: 192.168.17.140
> SERVER IP ADDRESS: 172.16.38.128
> =============================================================
>
>
> From the docs it seems like this should be what I need to pass to the cas
> server and if I remove the service then I get back a valid XML formatted
> error:
> <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
>        <cas:authenticationFailure code='INVALID_REQUEST'>
>                &#039;service&#039; and &#039;ticket&#039; parameters are
> both required
>        </cas:authenticationFailure>
> </cas:serviceResponse>
>
> Am I doing something wrong here or is this a bug?
>
> Cheers,
> Harry
>
>
>
> --
> You are currently subscribed to [email protected] as:
> [email protected]
> To unsubscribe, change settings or access archives, see
> http://www.ja-sig.org/wiki/display/JSG/cas-user
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to