Hi,
I have some unsolvable (for me) problem using CAS with LPPE.

I need to use LPPE in CAS 3.5.1 (OpenLDAP, Tomcat 6).
I turned it on and configured.
When I have fresh password everything works fine. I can log into my app.
When I'm in warning before expiration period I'm redirected to screen with options: change password or jump to application. Until this works fine. But when I go to application (or redirected after timeout) I get error INVALID_TICKET ticket ... not recognized. When I remove "?ticket=....." from URL everything works fine. I'm authorized and I have access to application.

I turned on debug mode to log some details. I can see there is problem with proxyCallbackUrl, but why there is such problem? I have no idea...

Please help.

cas.log for incorrect and correct login below.


--------- incorrect login - password expiration warning ---------------
2013-03-12 11:37:48,491 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 11:37:48,491 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Placing service in FlowScope: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 11:37:48,491 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Placing service in FlowScope: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 11:37:48,492 DEBUG [org.jasig.cas.web.flow.GenerateLoginTicketAction] - Generated login ticket LT-2-d2HZ0IWNXFCWiBEF7qi6PBLpbEFgRd 2013-03-12 11:37:48,492 DEBUG [org.jasig.cas.web.flow.GenerateLoginTicketAction] - Generated login ticket LT-2-d2HZ0IWNXFCWiBEF7qi6PBLpbEFgRd 2013-03-12 11:37:48,494 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 11:38:05,379 DEBUG [org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler] - Performing LDAP bind with credential: [removed] 2013-03-12 11:38:05,426 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler successfully authenticated [username: pwolinski] 2013-03-12 11:38:05,426 DEBUG [org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver] - Attempting to resolve a principal... 2013-03-12 11:38:05,426 DEBUG [org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver] - Creating SimplePrincipal for [pwolinski] 2013-03-12 11:38:05,426 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Resolved principal pwolinski 2013-03-12 11:38:05,426 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Principal found: pwolinski 2013-03-12 11:38:05,427 DEBUG [org.jasig.cas.authentication.AuthenticationManagerImpl] - Attribute map for pwolinski: {uid=uid, eduPersonAffiliation=eduPersonAffiliation, groupMembership=groupMembership} 2013-03-12 11:38:05,427 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: [username: pwolinski]
WHAT: supplied credentials: [username: pwolinski]
ACTION: AUTHENTICATION_SUCCESS
APPLICATION: CAS
WHEN: Tue Mar 12 11:38:05 CET 2013
CLIENT IP ADDRESS: 192.168.20.67
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 11:38:05,429 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket [TGT-3-xgHfvVDRbUuSkAuxQASImMWne0qefSQGnPpf5LbRXlBuVQeQun-fabryka.dfqs.pl] to registry. 2013-03-12 11:38:05,429 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: [username: pwolinski]
WHAT: TGT-3-xgHfvVDRbUuSkAuxQASImMWne0qefSQGnPpf5LbRXlBuVQeQun-fabryka.dfqs.pl
ACTION: TICKET_GRANTING_TICKET_CREATED
APPLICATION: CAS
WHEN: Tue Mar 12 11:38:05 CET 2013
CLIENT IP ADDRESS: 192.168.20.67
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 11:38:05,430 DEBUG [org.jasig.cas.web.support.CookieRetrievingCookieGenerator] - Removed cookie with name [CASPRIVACY] 2013-03-12 11:38:05,430 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Checking account status for password... 2013-03-12 11:38:05,430 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Checking account status for password... 2013-03-12 11:38:05,430 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Retrieving number of days to password expiration date for user pwolinski 2013-03-12 11:38:05,430 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Retrieving number of days to password expiration date for user pwolinski 2013-03-12 11:38:05,430 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Starting search with searchFilter: (&(uid=pwolinski)(dfqsStatus=1)) 2013-03-12 11:38:05,430 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Returning attributes pwdChangedTime:passwordWarningDays:passwordExpireDays:skipPasswordWarning 2013-03-12 11:38:05,479 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - No warning attribute value for skipPasswordWarning is set to: null 2013-03-12 11:38:05,479 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - No warning days value is found for pwolinski. Using system default of 90 2013-03-12 11:38:05,479 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - No maximum password valid days found for pwolinski. Using system default of 100 days 2013-03-12 11:38:05,479 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Retrieved date value 2012-12-31T11:17:57.000Z for date attribute pwdChangedTime and added 100 days. The final expiration date is 2013-04-10T11:17:57.000Z 2013-03-12 11:38:05,480 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Calculating number of days left to the expiration date for user pwolinski 2013-03-12 11:38:05,481 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Current date is 2013-03-12T10:38:05.480Z 2013-03-12 11:38:05,481 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Expiration date is 2013-04-10T11:17:57.000Z 2013-03-12 11:38:05,481 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Warning period begins on 2013-01-10T11:17:57.000Z 2013-03-12 11:38:05,481 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Password will expire in 29 days. 2013-03-12 11:38:05,481 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Password for pwolinski is expiring in 29 days 2013-03-12 11:38:05,481 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Password for pwolinski is expiring in 29 days 2013-03-12 11:38:05,481 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Switching to flow event id showWarning for user pwolinski 2013-03-12 11:38:05,481 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Switching to flow event id showWarning for user pwolinski 2013-03-12 11:38:05,482 DEBUG [org.jasig.cas.web.support.CookieRetrievingCookieGenerator] - Added cookie with name [CASTGC] and value [TGT-3-xgHfvVDRbUuSkAuxQASImMWne0qefSQGnPpf5LbRXlBuVQeQun-fabryka.dfqs.pl] 2013-03-12 11:38:05,483 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-3-xgHfvVDRbUuSkAuxQASImMWne0qefSQGnPpf5LbRXlBuVQeQun-fabryka.dfqs.pl] 2013-03-12 11:38:05,483 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-3-xgHfvVDRbUuSkAuxQASImMWne0qefSQGnPpf5LbRXlBuVQeQun-fabryka.dfqs.pl] found in registry. 2013-03-12 11:38:05,483 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] to registry. 2013-03-12 11:38:05,484 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] for service [https://fabryka.dfqs.pl/centrala.p/login_check.jsp] for user [pwolinski] 2013-03-12 11:38:05,484 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-3-xgHfvVDRbUuSkAuxQASImMWne0qefSQGnPpf5LbRXlBuVQeQun-fabryka.dfqs.pl] 2013-03-12 11:38:05,484 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-3-xgHfvVDRbUuSkAuxQASImMWne0qefSQGnPpf5LbRXlBuVQeQun-fabryka.dfqs.pl] found in registry. 2013-03-12 11:38:05,484 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: pwolinski
WHAT: ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl for https://fabryka.dfqs.pl/centrala.p/login_check.jsp
ACTION: SERVICE_TICKET_CREATED
APPLICATION: CAS
WHEN: Tue Mar 12 11:38:05 CET 2013
CLIENT IP ADDRESS: 192.168.20.67
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 11:38:05,486 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 11:38:05,488 DEBUG [org.jasig.cas.web.flow.TerminateWebSessionListener] - Terminate web session D95FD0A5D519381F0C7C98993A0C5EED in 2 seconds 2013-03-12 11:38:05,488 DEBUG [org.jasig.cas.web.flow.TerminateWebSessionListener] - Terminate web session D95FD0A5D519381F0C7C98993A0C5EED in 2 seconds 2013-03-12 11:38:15,626 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 11:38:15,628 DEBUG [org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler] - Attempting to resolve credentials for [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback] 2013-03-12 11:38:15,634 DEBUG [org.jasig.cas.util.HttpClient] - Response code from server matched 200. 2013-03-12 11:38:15,634 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler successfully authenticated [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback] 2013-03-12 11:38:15,634 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Resolved principal https://fabryka.dfqs.pl/centrala.p/proxyCallback 2013-03-12 11:38:15,634 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Principal found: https://fabryka.dfqs.pl/centrala.p/proxyCallback 2013-03-12 11:38:15,635 DEBUG [org.jasig.cas.authentication.AuthenticationManagerImpl] - Attribute map for https://fabryka.dfqs.pl/centrala.p/proxyCallback: {} 2013-03-12 11:38:15,635 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback]
WHAT: supplied credentials: [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback]
ACTION: AUTHENTICATION_SUCCESS
APPLICATION: CAS
WHEN: Tue Mar 12 11:38:15 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 11:38:15,635 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] 2013-03-12 11:38:15,635 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] found in registry. 2013-03-12 11:38:15,635 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] 2013-03-12 11:38:15,635 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] found in registry. 2013-03-12 11:38:15,636 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: pwolinski
WHAT: org.jasig.cas.ticket.InvalidTicketException
ACTION: PROXY_GRANTING_TICKET_NOT_CREATED
APPLICATION: CAS
WHEN: Tue Mar 12 11:38:15 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 11:38:15,636 ERROR [org.jasig.cas.web.ServiceValidateController] - TicketException generating ticket for: [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback]
org.jasig.cas.ticket.InvalidTicketException
at org.jasig.cas.CentralAuthenticationServiceImpl.delegateTicketGrantingTicket_aroundBody6(CentralAuthenticationServiceImpl.java:303) at org.jasig.cas.CentralAuthenticationServiceImpl.delegateTicketGrantingTicket_aroundBody7$advice(CentralAuthenticationServiceImpl.java:57) at org.jasig.cas.CentralAuthenticationServiceImpl.delegateTicketGrantingTicket(CentralAuthenticationServiceImpl.java:1)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:318) at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150) at org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:80) at com.github.inspektr.audit.AuditTrailManagementAspect.handleAuditTrail(AuditTrailManagementAspect.java:126)
        at sun.reflect.GeneratedMethodAccessor305.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:621) at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:610) at org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJAroundAdvice.java:65) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161) at org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:80) at org.perf4j.aop.AbstractTimingAspect$1.proceed(AbstractTimingAspect.java:47) at org.perf4j.aop.AgnosticTimingAspect.runProfiledMethod(AgnosticTimingAspect.java:53) at org.perf4j.aop.AbstractTimingAspect.doPerfLogging(AbstractTimingAspect.java:45)
        at sun.reflect.GeneratedMethodAccessor304.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:621) at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:610) at org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJAroundAdvice.java:65) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161) at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:90) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172) at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
        at sun.proxy.$Proxy167.delegateTicketGrantingTicket(Unknown Source)
at org.jasig.cas.web.ServiceValidateController.handleRequestInternal(ServiceValidateController.java:138) at org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:153) at org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:48) at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:923) at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:852) at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:882) at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:778)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at org.jasig.cas.web.init.SafeDispatcherServlet.service_aroundBody2(SafeDispatcherServlet.java:128) at org.jasig.cas.web.init.SafeDispatcherServlet.service_aroundBody3$advice(SafeDispatcherServlet.java:57) at org.jasig.cas.web.init.SafeDispatcherServlet.service(SafeDispatcherServlet.java:1) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88) at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76) at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346) at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at com.github.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:63) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at com.googlecode.psiprobe.Tomcat60AgentValve.invoke(Tomcat60AgentValve.java:30) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) at org.apache.coyote.ajp.AjpAprProcessor.process(AjpAprProcessor.java:427) at org.apache.coyote.ajp.AjpAprProtocol$AjpConnectionHandler.process(AjpAprProtocol.java:384) at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1584)
        at java.lang.Thread.run(Thread.java:662)
2013-03-12 11:38:15,639 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] 2013-03-12 11:38:15,639 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] found in registry. 2013-03-12 11:38:15,639 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - ServiceTicket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] has expired. 2013-03-12 11:38:15,639 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Removing ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] from registry 2013-03-12 11:38:15,639 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl] 2013-03-12 11:38:15,639 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: ST-3-5YPasLGjhDjIM71AuYXY-fabryka.dfqs.pl
ACTION: SERVICE_TICKET_VALIDATE_FAILED
APPLICATION: CAS
WHEN: Tue Mar 12 11:38:15 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================
------------------------ end of cas.log (password expiration warinng) ---------------------


------------------- cas.log for correct logging - fresh password ---------------------------- 2013-03-12 12:19:47,258 DEBUG [org.jasig.cas.web.flow.GenerateLoginTicketAction] - Generated login ticket LT-1-XIprpBaq4vzc0HFnSYPRStvCNF9dq5 2013-03-12 12:19:47,258 DEBUG [org.jasig.cas.web.flow.GenerateLoginTicketAction] - Generated login ticket LT-1-XIprpBaq4vzc0HFnSYPRStvCNF9dq5 2013-03-12 12:19:47,619 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 12:20:24,430 DEBUG [org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler] - Performing LDAP bind with credential: [removed] 2013-03-12 12:20:24,475 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler successfully authenticated [username: pwolinski] 2013-03-12 12:20:24,476 DEBUG [org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver] - Attempting to resolve a principal... 2013-03-12 12:20:24,476 DEBUG [org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver] - Creating SimplePrincipal for [pwolinski] 2013-03-12 12:20:24,477 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Resolved principal pwolinski 2013-03-12 12:20:24,478 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Principal found: pwolinski 2013-03-12 12:20:24,478 DEBUG [org.jasig.cas.authentication.AuthenticationManagerImpl] - Attribute map for pwolinski: {uid=uid, eduPersonAffiliation=eduPersonAffiliation, groupMembership=groupMembership} 2013-03-12 12:20:24,482 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: [username: pwolinski]
WHAT: supplied credentials: [username: pwolinski]
ACTION: AUTHENTICATION_SUCCESS
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.20.67
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:24,491 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket [TGT-1-Re2SmleIloruzfiBrZtMgKiykFLOk1moFeQWGfexKkb0qtQoLU-fabryka.dfqs.pl] to registry. 2013-03-12 12:20:24,491 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: [username: pwolinski]
WHAT: TGT-1-Re2SmleIloruzfiBrZtMgKiykFLOk1moFeQWGfexKkb0qtQoLU-fabryka.dfqs.pl
ACTION: TICKET_GRANTING_TICKET_CREATED
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.20.67
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:24,491 DEBUG [org.jasig.cas.web.support.CookieRetrievingCookieGenerator] - Removed cookie with name [CASPRIVACY] 2013-03-12 12:20:24,492 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Checking account status for password... 2013-03-12 12:20:24,492 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Checking account status for password... 2013-03-12 12:20:24,492 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Retrieving number of days to password expiration date for user pwolinski 2013-03-12 12:20:24,492 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Retrieving number of days to password expiration date for user pwolinski 2013-03-12 12:20:24,492 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Starting search with searchFilter: (&(uid=pwolinski)(dfqsStatus=1)) 2013-03-12 12:20:24,492 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Returning attributes pwdChangedTime:passwordWarningDays:passwordExpireDays:skipPasswordWarning 2013-03-12 12:20:24,541 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - No warning attribute value for skipPasswordWarning is set to: null 2013-03-12 12:20:24,541 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - No warning days value is found for pwolinski. Using system default of 5 2013-03-12 12:20:24,541 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - No maximum password valid days found for pwolinski. Using system default of 100 days 2013-03-12 12:20:24,634 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Retrieved date value 2012-12-31T11:17:57.000Z for date attribute pwdChangedTime and added 100 days. The final expiration date is 2013-04-10T11:17:57.000Z 2013-03-12 12:20:24,634 DEBUG [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Calculating number of days left to the expiration date for user pwolinski 2013-03-12 12:20:24,634 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Current date is 2013-03-12T11:20:24.634Z 2013-03-12 12:20:24,634 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Expiration date is 2013-04-10T11:17:57.000Z 2013-03-12 12:20:24,653 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Warning period begins on 2013-04-05T11:17:57.000Z 2013-03-12 12:20:24,654 INFO [org.jasig.cas.adaptors.ldap.LdapPasswordPolicyEnforcer] - Password is not expiring. 28 days left to the warning 2013-03-12 12:20:24,654 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Password for pwolinski is not expiring 2013-03-12 12:20:24,654 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Password for pwolinski is not expiring 2013-03-12 12:20:24,654 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Switching to flow event id success for user pwolinski 2013-03-12 12:20:24,654 DEBUG [org.jasig.cas.web.flow.PasswordPolicyEnforcementAction] - Switching to flow event id success for user pwolinski 2013-03-12 12:20:24,654 DEBUG [org.jasig.cas.web.support.CookieRetrievingCookieGenerator] - Added cookie with name [CASTGC] and value [TGT-1-Re2SmleIloruzfiBrZtMgKiykFLOk1moFeQWGfexKkb0qtQoLU-fabryka.dfqs.pl] 2013-03-12 12:20:24,655 DEBUG [org.jasig.cas.CentralAuthenticationServiceImpl] - Removing ticket [TGT-4-SN4FvUiOYhMEX0rLSnIl97bDReHsICcpSaVwsT4eaXENJGhQOn-fabryka.dfqs.pl] from registry. 2013-03-12 12:20:24,655 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-4-SN4FvUiOYhMEX0rLSnIl97bDReHsICcpSaVwsT4eaXENJGhQOn-fabryka.dfqs.pl] 2013-03-12 12:20:24,655 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-4-SN4FvUiOYhMEX0rLSnIl97bDReHsICcpSaVwsT4eaXENJGhQOn-fabryka.dfqs.pl] 2013-03-12 12:20:24,655 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: TGT-4-SN4FvUiOYhMEX0rLSnIl97bDReHsICcpSaVwsT4eaXENJGhQOn-fabryka.dfqs.pl
ACTION: TICKET_GRANTING_TICKET_DESTROYED
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.20.67
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:24,656 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-1-Re2SmleIloruzfiBrZtMgKiykFLOk1moFeQWGfexKkb0qtQoLU-fabryka.dfqs.pl] 2013-03-12 12:20:24,656 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-1-Re2SmleIloruzfiBrZtMgKiykFLOk1moFeQWGfexKkb0qtQoLU-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:24,660 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] to registry. 2013-03-12 12:20:24,661 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] for service [https://fabryka.dfqs.pl/centrala.p/login_check.jsp] for user [pwolinski] 2013-03-12 12:20:24,661 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-1-Re2SmleIloruzfiBrZtMgKiykFLOk1moFeQWGfexKkb0qtQoLU-fabryka.dfqs.pl] 2013-03-12 12:20:24,661 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-1-Re2SmleIloruzfiBrZtMgKiykFLOk1moFeQWGfexKkb0qtQoLU-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:24,661 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: pwolinski
WHAT: ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl for https://fabryka.dfqs.pl/centrala.p/login_check.jsp
ACTION: SERVICE_TICKET_CREATED
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.20.67
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:24,672 DEBUG [org.jasig.cas.web.flow.TerminateWebSessionListener] - Terminate web session FCC8047240C87344FDC468F4D2ECD3D1 in 2 seconds 2013-03-12 12:20:24,672 DEBUG [org.jasig.cas.web.flow.TerminateWebSessionListener] - Terminate web session FCC8047240C87344FDC468F4D2ECD3D1 in 2 seconds 2013-03-12 12:20:24,714 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: https://fabryka.dfqs.pl/centrala.p/login_check.jsp 2013-03-12 12:20:24,721 DEBUG [org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler] - Attempting to resolve credentials for [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback] 2013-03-12 12:20:24,728 DEBUG [org.jasig.cas.util.HttpClient] - Response code from server matched 200. 2013-03-12 12:20:24,736 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler successfully authenticated [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback] 2013-03-12 12:20:24,736 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Resolved principal https://fabryka.dfqs.pl/centrala.p/proxyCallback 2013-03-12 12:20:24,736 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - Principal found: https://fabryka.dfqs.pl/centrala.p/proxyCallback 2013-03-12 12:20:24,737 DEBUG [org.jasig.cas.authentication.AuthenticationManagerImpl] - Attribute map for https://fabryka.dfqs.pl/centrala.p/proxyCallback: {} 2013-03-12 12:20:24,737 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback]
WHAT: supplied credentials: [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback]
ACTION: AUTHENTICATION_SUCCESS
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:24,738 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] 2013-03-12 12:20:24,738 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:24,739 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket [TGT-2-kadjYE1zuOyXFW14KB3LiyDdshxsfjbod7cfdcLGkXQYWk5cHX-fabryka.dfqs.pl] to registry. 2013-03-12 12:20:24,739 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] 2013-03-12 12:20:24,739 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:24,740 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: pwolinski
WHAT: TGT-2-kadjYE1zuOyXFW14KB3LiyDdshxsfjbod7cfdcLGkXQYWk5cHX-fabryka.dfqs.pl
ACTION: PROXY_GRANTING_TICKET_CREATED
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:24,743 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] 2013-03-12 12:20:24,743 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:24,743 DEBUG [org.jasig.cas.CentralAuthenticationServiceImpl] - Principal id to return for service [HTTP and IMAP] is [pwolinski]. The default principal id is [pwolinski]. 2013-03-12 12:20:24,748 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Removing ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] from registry 2013-03-12 12:20:24,748 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl] 2013-03-12 12:20:24,748 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl
ACTION: SERVICE_TICKET_VALIDATED
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:24,772 DEBUG [org.jasig.cas.util.HttpClient] - Response code from server matched 200. 2013-03-12 12:20:24,773 DEBUG [org.jasig.cas.ticket.proxy.support.Cas20ProxyHandler] - Sent ProxyIou of PGTIOU-1-Ac20fO9bYBRBtgfaQsL6-fabryka.dfqs.pl for service: [callbackUrl: https://fabryka.dfqs.pl/centrala.p/proxyCallback] 2013-03-12 12:20:24,774 DEBUG [org.jasig.cas.web.ServiceValidateController] - Successfully validated service ticket: ST-1-CtUWro2qWzcvmVRgxqLK-fabryka.dfqs.pl 2013-03-12 12:20:24,989 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-2-kadjYE1zuOyXFW14KB3LiyDdshxsfjbod7cfdcLGkXQYWk5cHX-fabryka.dfqs.pl] 2013-03-12 12:20:24,989 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-2-kadjYE1zuOyXFW14KB3LiyDdshxsfjbod7cfdcLGkXQYWk5cHX-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:24,990 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket [ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl] to registry. 2013-03-12 12:20:24,990 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted proxy ticket [ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl] for service [ldap] for user [pwolinski] 2013-03-12 12:20:24,990 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-2-kadjYE1zuOyXFW14KB3LiyDdshxsfjbod7cfdcLGkXQYWk5cHX-fabryka.dfqs.pl] 2013-03-12 12:20:24,990 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-2-kadjYE1zuOyXFW14KB3LiyDdshxsfjbod7cfdcLGkXQYWk5cHX-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:24,990 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: https://fabryka.dfqs.pl/centrala.p/proxyCallback
WHAT: ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl for ldap
ACTION: SERVICE_TICKET_CREATED
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:24 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:25,175 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: ldap 2013-03-12 12:20:25,175 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl] 2013-03-12 12:20:25,175 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl] found in registry. 2013-03-12 12:20:25,176 DEBUG [org.jasig.cas.CentralAuthenticationServiceImpl] - Principal id to return for service [LDAP] is [pwolinski]. The default principal id is [pwolinski]. 2013-03-12 12:20:25,176 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Removing ticket [ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl] from registry 2013-03-12 12:20:25,176 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl] 2013-03-12 12:20:25,176 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl
ACTION: SERVICE_TICKET_VALIDATED
APPLICATION: CAS
WHEN: Tue Mar 12 12:20:25 CET 2013
CLIENT IP ADDRESS: 192.168.2.211
SERVER IP ADDRESS: fabryka.dfqs.pl
=============================================================


2013-03-12 12:20:25,177 DEBUG [org.jasig.cas.web.ServiceValidateController] - Successfully validated service ticket: ST-2-XAPK3sv5vBbeZ0tVEg6O-fabryka.dfqs.pl --------------------- end of cas.log -------------------------------------------

--
Piotr Woliński


--
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to