This is the trace of an attempt to reach a service using SAML 1.1 with the SAMLException at the end:
19 okt 2012 14:51:44,627 INFO Saml11TicketValidationFilter:71 - Property [serverName] loaded from FilterConfig.getInitParameter with value [https://inf069766.ad.vl-brabant.be:11043] 19 okt 2012 14:51:44,629 TRACE Saml11TicketValidationFilter:72 - Loading serverName property: https://inf069766.ad.vl-brabant.be:11043 19 okt 2012 14:51:44,630 INFO Saml11TicketValidationFilter:105 - Property [service] not found. Using default value [null] 19 okt 2012 14:51:44,630 TRACE Saml11TicketValidationFilter:74 - Loading service property: null 19 okt 2012 14:51:44,631 INFO Saml11TicketValidationFilter:105 - Property [artifactParameterName] not found. Using default value [ticket] 19 okt 2012 14:51:44,631 TRACE Saml11TicketValidationFilter:76 - Loading artifact parameter name property: ticket 19 okt 2012 14:51:44,632 INFO Saml11TicketValidationFilter:105 - Property [serviceParameterName] not found. Using default value [service] 19 okt 2012 14:51:44,632 TRACE Saml11TicketValidationFilter:78 - Loading serviceParameterName property: service 19 okt 2012 14:51:44,633 INFO Saml11TicketValidationFilter:105 - Property [encodeServiceUrl] not found. Using default value [true] 19 okt 2012 14:51:44,633 TRACE Saml11TicketValidationFilter:80 - Loading encodeServiceUrl property: true 19 okt 2012 14:51:44,634 INFO Saml11TicketValidationFilter:105 - Property [exceptionOnValidationFailure] not found. Using default value [true] 19 okt 2012 14:51:44,634 TRACE Saml11TicketValidationFilter:101 - Setting exceptionOnValidationFailure parameter: true 19 okt 2012 14:51:44,635 INFO Saml11TicketValidationFilter:71 - Property [redirectAfterValidation] loaded from FilterConfig.getInitParameter with value [true] 19 okt 2012 14:51:44,635 TRACE Saml11TicketValidationFilter:103 - Setting redirectAfterValidation parameter: true 19 okt 2012 14:51:44,635 INFO Saml11TicketValidationFilter:105 - Property [useSession] not found. Using default value [true] 19 okt 2012 14:51:44,636 TRACE Saml11TicketValidationFilter:105 - Setting useSession parameter: true 19 okt 2012 14:51:44,639 INFO Saml11TicketValidationFilter:71 - Property [casServerUrlPrefix] loaded from FilterConfig.getInitParameter with value [https://inf069766.ad.vl-brabant.be:11143/cas] 19 okt 2012 14:51:44,639 INFO Saml11TicketValidationFilter:71 - Property [tolerance] loaded from FilterConfig.getInitParameter with value [5000] 19 okt 2012 14:51:44,640 INFO Saml11TicketValidationFilter:105 - Property [renew] not found. Using default value [false] 19 okt 2012 14:51:44,640 INFO Saml11TicketValidationFilter:105 - Property [hostnameVerifier] not found. Using default value [null] 19 okt 2012 14:51:44,641 TRACE Saml11TicketValidationFilter:86 - Using hostnameVerifier parameter: null 19 okt 2012 14:51:44,641 INFO Saml11TicketValidationFilter:105 - Property [hostnameVerifierConfig] not found. Using default value [null] 19 okt 2012 14:51:44,642 TRACE Saml11TicketValidationFilter:88 - Using hostnameVerifierConfig parameter: null 19 okt 2012 14:51:44,642 INFO Saml11TicketValidationFilter:105 - Property [encoding] not found. Using default value [null] 19 okt 2012 14:51:44,643 INFO Saml11TicketValidationFilter:105 - Property [disableXmlSchemaValidation] not found. Using default value [false] 19 okt 2012 14:51:44,643 WARN Saml11TicketValidationFilter:47 - SAML1.1 compliance requires the [artifactParameterName] and [serviceParameterName] to be set to specified values. 19 okt 2012 14:51:44,643 WARN Saml11TicketValidationFilter:48 - This filter will overwrite any user-provided values (if any are provided) 19 okt 2012 14:51:44,645 INFO Saml11AuthenticationFilter:105 - Property [serverName] not found. Using default value [null] 19 okt 2012 14:51:44,645 TRACE Saml11AuthenticationFilter:72 - Loading serverName property: null 19 okt 2012 14:51:44,645 INFO Saml11AuthenticationFilter:71 - Property [service] loaded from FilterConfig.getInitParameter with value [https://inf069766.ad.vl-brabant.be:11043/additionservice/] 19 okt 2012 14:51:44,645 TRACE Saml11AuthenticationFilter:74 - Loading service property: https://inf069766.ad.vl-brabant.be:11043/additionservice/ 19 okt 2012 14:51:44,646 INFO Saml11AuthenticationFilter:105 - Property [artifactParameterName] not found. Using default value [ticket] 19 okt 2012 14:51:44,647 TRACE Saml11AuthenticationFilter:76 - Loading artifact parameter name property: ticket 19 okt 2012 14:51:44,647 INFO Saml11AuthenticationFilter:105 - Property [serviceParameterName] not found. Using default value [service] 19 okt 2012 14:51:44,647 TRACE Saml11AuthenticationFilter:78 - Loading serviceParameterName property: service 19 okt 2012 14:51:44,648 INFO Saml11AuthenticationFilter:105 - Property [encodeServiceUrl] not found. Using default value [true] 19 okt 2012 14:51:44,648 TRACE Saml11AuthenticationFilter:80 - Loading encodeServiceUrl property: true 19 okt 2012 14:51:44,649 INFO Saml11AuthenticationFilter:71 - Property [casServerLoginUrl] loaded from FilterConfig.getInitParameter with value [https://inf069766.ad.vl-brabant.be:11143/cas/login] 19 okt 2012 14:51:44,649 TRACE Saml11AuthenticationFilter:76 - Loaded CasServerLoginUrl parameter: https://inf069766.ad.vl-brabant.be:11143/cas/login 19 okt 2012 14:51:44,649 INFO Saml11AuthenticationFilter:105 - Property [renew] not found. Using default value [false] 19 okt 2012 14:51:44,650 TRACE Saml11AuthenticationFilter:78 - Loaded renew parameter: false 19 okt 2012 14:51:44,650 INFO Saml11AuthenticationFilter:105 - Property [gateway] not found. Using default value [false] 19 okt 2012 14:51:44,651 TRACE Saml11AuthenticationFilter:80 - Loaded gateway parameter: false 19 okt 2012 14:51:44,651 INFO Saml11AuthenticationFilter:105 - Property [gatewayStorageClass] not found. Using default value [null] 19 okt 2012 14:51:44,651 WARN Saml11AuthenticationFilter:39 - SAML1.1 compliance requires the [artifactParameterName] and [serviceParameterName] to be set to specified values. 19 okt 2012 14:51:44,652 WARN Saml11AuthenticationFilter:40 - This filter will overwrite any user-provided values (if any are provided) 19 okt 2012 14:51:44,652 INFO HttpServletRequestWrapperFilter:105 - Property [roleAttribute] not found. Using default value [null] 19 okt 2012 14:51:44,653 INFO HttpServletRequestWrapperFilter:105 - Property [ignoreCase] not found. Using default value [false] 19 okt 2012 14:52:06,713 DEBUG Saml11AuthenticationFilter:122 - no ticket and no assertion found 19 okt 2012 14:52:06,713 DEBUG Saml11AuthenticationFilter:131 - Constructed service url: https://inf069766.ad.vl-brabant.be:11043/additionservice/ 19 okt 2012 14:52:06,714 DEBUG Saml11AuthenticationFilter:137 - redirecting to "https://inf069766.ad.vl-brabant.be:11143/cas/login?TARGET=https%3A%2F%2Finf069766.ad.vl-brabant.be%3A11043%2Fadditionservice%2F"; 19 okt 2012 14:52:23,473 DEBUG Saml11TicketValidationFilter:165 - Attempting to validate ticket: AAFSsPYAkNKN6Mb0Q6Li8D8gawrtLPMEjE7dx4vyux1eyjMx5Z36QU8i 19 okt 2012 14:52:23,473 DEBUG CommonUtils:271 - serviceUrl generated: https://inf069766.ad.vl-brabant.be:11043/additionservice/?TARGET=https%3A%2F%2Finf069766.ad.vl-brabant.be%3A11043%2Fadditionservice%2F 19 okt 2012 14:52:23,473 DEBUG Saml11TicketValidator:116 - Placing URL parameters in map. 19 okt 2012 14:52:23,474 DEBUG Saml11TicketValidator:124 - Calling template URL attribute map. 19 okt 2012 14:52:23,474 DEBUG Saml11TicketValidator:127 - Loading custom parameters from configuration. 19 okt 2012 14:52:23,474 DEBUG Saml11TicketValidator:202 - Constructing validation url: https://inf069766.ad.vl-brabant.be:11143/cas/samlValidate?TARGET=https%3A%2F%2Finf069766.ad.vl-brabant.be%3A11043%2Fadditionservice%2F%3FTARGET%3Dhttps%253A%252F%252Finf069766.ad.vl-brabant.be%253A11043%252Fadditionservice%252F 19 okt 2012 14:52:23,475 DEBUG Saml11TicketValidator:206 - Retrieving response from server. 19 okt 2012 14:52:23,604 DEBUG Saml11TicketValidator:214 - Server response: <?xml version="1.0" encoding="UTF-8"?><SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/";><SOAP-ENV:Header/><SOAP-ENV:Body><Response xmlns="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion" xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol" xmlns:xsd="http://www.w3.org/2001/XMLSchema"; xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; IssueInstant="2012-10-19T12:52:23.601Z" MajorVersion="1" MinorVersion="1" Recipient="https://inf069766.ad.vl-brabant.be:11043/additionservice/?TARGET=https%3A%2F%2Finf069766.ad.vl-brabant.be%3A11043%2Fadditionservice%2F"; ResponseID="_1d0636194258b0af21d8bb5445b339d4"><Status><StatusCode Value="samlp:Responder"></StatusCode><StatusMessage>Service not allowed to validate tickets.</StatusMessage></Status></Response></SOAP-ENV:Body></SOAP-ENV:Envelope> 19 okt 2012 14:52:23,675 WARN Saml11TicketValidationFilter:189 - org.jasig.cas.client.validation.TicketValidationException: org.opensaml.SAMLException: Service not allowed to validate tickets. org.jasig.cas.client.validation.TicketValidationException: org.opensaml.SAMLException: Service not allowed to validate tickets. at org.jasig.cas.client.validation.Saml11TicketValidator.parseResponseFromServer(Saml11TicketValidator.java:115) at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:217) at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:169) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:116) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:225) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98) at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:927) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407) at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1001) at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:585) at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908) at java.lang.Thread.run(Thread.java:662) Caused by: org.opensaml.SAMLException: Service not allowed to validate tickets. at org.opensaml.SAMLException.getInstance(Unknown Source) at org.opensaml.SAMLResponse.fromDOM(Unknown Source) at org.opensaml.SAMLResponse.<init>(Unknown Source) at org.jasig.cas.client.validation.Saml11TicketValidator.parseResponseFromServer(Saml11TicketValidator.java:75) ... 21 more -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
