Hi guys,
I was following the guide found at https://wiki.jasig.org/display/CASUM/SPNEGO
to set-up transparent single-sign on for my consumers of CAS but have run into
a problem.
I've set-up everything as best I could to be identical to the configuration
presented therein, although I did have to make a couple changes (I'll detail
those below) but when I try to authenticate via SPNEGO, the console simply
prints out:
2011-06-20 13:10:21,634 ERROR [STDERR] (http-0.0.0.0-8443-1) Invalid state: 4
I'm using JBoss 5 AS and CAS 3.3.2. I've modified everything exactly as was
presented in the guide, with two exceptions:
In login-webflow.xml, I changed the exact configuration to get the same result
with the version of CAS I'm using:
<action-state id="startAuthenticate">
<action bean="negociateSpnego" />
<transition on="success" to="spnego" />
</action-state>
<action-state id="spnego">
<action bean="spnego" />
<transition on="success" to="sendTicketGrantingTicket" />
<transition on="error" to="viewLoginForm" />
</action-state>
... and in deployerConfigContext.xml, I'm specifying the SPN account as the
JCIFS principal (with the appropriate password value in the password property),
like so:
<bean name="jcifsConfig"
class="org.jasig.cas.support.spnego.authentication.handler.support.JCIFSConfig">
<property name="jcifsServicePrincipal"
value="[email protected]" />
<property name="jcifsServicePassword" value="XXXXXXX" />
<!-- other config... -->
</bean>
In lieu of what the message "Invalid State: 4" means (Google didn't help,
except to make it seem that it is JCIFS related), what else should I be trying
here? Should I be using another version CAS (newer or older)? How can I get
more meaningful debug output to print out?
Thanks for the help.
Regards, Daniel
[email protected]
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
