Based on the following logs, it looks like the ticket in the registry is expired upon retrieval for validation:
> 2011-06-03 13:31:32,027 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to > retrieve ticket [ST-1-FpWjOwNbOhHAJrDmc9xx-cas] > 2011-06-03 13:31:32,027 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket > [ST-1-FpWjOwNbOhHAJrDmc9xx-cas] found in registry. > 2011-06-03 13:31:32,027 DEBUG > [org.jasig.cas.CentralAuthenticationServiceImpl] - ServiceTicket > [ST-1-FpWjOwNbOhHAJrDmc9xx-cas] has expired. That makes sense because the ticket was created at 13:30:08: > 2011-06-03 13:30:08,409 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service > ticket [ST-1-FpWjOwNbOhHAJrDmc9xx-cas] for service > [http://The-tomcat-server-IP:8080/] for user [some_username] It's expired because the validation occurs more than 30s after creation, which is beyond the default 30s lifetime of service tickets. M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
