Anyone have any clue?


________________________________
From: Fernando Correa <[email protected]>
To: [email protected]
Sent: Saturday, September 3, 2011 1:33 PM
Subject: [cas-user] Proxy tickets (Cas Server 3.x - Cas Client 3.x & 2.x)


I want to generate access links from my portal to my web applications. Some of 
them are using cas client 3.x and the rest are using cas client 2.x. Cas Server 
is 3.X.

The correct way to access the applications if through proxy tickets generated 
from the portal. If someone knows the URL of the web application and put it in 
the browser, I want to require an authentication (renew = true I think).

If I generate a proxy ticket and use it with cas client 2.x with renew = false, 
it works perfect. But If I put renew = true, it doesn't work (I get 
a javax.servlet.ServletException: CAS authentication error: INVALID_TICKET...) 
and the cas server log says something like "Ticket does not satisfy validation 
specification).

If I generate a proxy ticket and use it with cas client 3.x with renew = false 
(in both filteres), it works perfect. If I put renew = true in validation 
filter, it works fine only in the first access. After that, I logout from the 
application (session.invalidate()), and the proxy tickets generated from that 
moment don't work (it says like I'm trying to validate a proxy ticket like a 
service ticket or I'm not respecting the renew = true).

Any help?

Thanks!



-- 
You are currently subscribed to [email protected] as: [email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user
-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to