Hi, That's a weird behavior, that it fails initially and then works. I don't have an explanation for that off hand.
Are there corresponding log entries from the CAS server wherein the server explains why it is responding with a 500 status code? Otherwise: 1) Do you get the failure behavior when manually exercising the ticket validation? As in, turn up ST timeouts, manually obtain an ST, manually validate it, in your browser. 2) Why /cas/proxyValidate ? If the application validating the ST intends only to accept service tickets and not proxy tickets, it's preferable to use the /cas/serviceValidate endpoint so as to avoid accidentally accepting a proxy ticket. Note that /cas/proxyValidate is necessary only to *validate* a proxy ticket, not just to obtain a PGT. 3) Try cranking up Java CAS client logging to TRACE to get more context. Likewise, crank up logging on the CAS server. Hope this helps, Andrew On Mon, Feb 25, 2013 at 7:14 AM, E.LT <[email protected]> wrote: > Hello everyone and thanks in advance for your time ! > > I'm having problems authenticating uportal to CAS. > > Every first authentication is failing and i don't know why. > > I'm having a Tomcat 500 error and when i try to retry the uportal URL it's > ok. I really don't understand why it behaves like this. Only the first > authentication fails. then you can chain disconnect / reconnect successfuly. > > Here's the web error message : > > > > > exception > > java.lang.RuntimeException: java.io.IOException: Server returned HTTP > response > code: 500 for URL: > > https://sso-cas.xxx.fr/cas/proxyValidate?pgtUrl=http%3A%2F%2Fent1.xxx.fr%2FCasProxyServlet&ticket=ST-350-NzDBiGHm4WIBGqq4nxUV-cas&service=http%3A%2F%2Fent1.xxx.fr%2FLogin > > > org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:295) > > > org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:33) > > > org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:178) > > > org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:132) > cause mère > > java.io.IOException: Server returned HTTP response code: 500 for URL: > > https://sso-cas.xxx.fr/cas/proxyValidate?pgtUrl=http%3A%2F%2Fent1.xxx.fr%2FCasProxyServlet&ticket=ST-350-NzDBiGHm4WIBGqq4nxUV-cas&service=http%3A%2F%2Fent1.xxx.fr%2FLogin > > > sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1436) > > > com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnectionOldImpl.getInputStream(HttpsURLConnectionOldImpl.java:204) > > > org.jasig.cas.client.util.CommonUtils.getResponseFromServer(CommonUtils.java:281) > > > org.jasig.cas.client.validation.AbstractCasProtocolUrlBasedTicketValidator.retrieveResponseFromServer(AbstractCasProtocolUrlBasedTicketValidator.java:33) > > > org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:178) > > > org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:132 > > > I'm really lost .. > > Thanks a lot (And sorry for the faults :() > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
