Why don't you apply the CAS client/filter to the generic url 
(http://server/cgi-bin/WebObjects/CarambolPRX.woa)?  Then you will always have 
the same url from the CAS point of view.  I think that would be much better 
than hacking into CAS to change the way that service URI's are compared.  This 
could easily compromise you security if not done right.


David Ohsie
Software Architect
EMC Corporation


> -----Original Message-----
> From: Will [mailto:[email protected]]
> Sent: Thursday, June 27, 2013 12:54 PM
> To: [email protected]
> Subject: [cas-user] ServiceTicket does not match supplied error
>
> Hi all
>
> I'm doing load testing on WebObjects (5.3.3) web application using CAS
> 3.4.3.1.
>
> I have a Webobject application with generic url:
> http://server/cgi-bin/WebObjects/CarambolPRX.woa
>
> this generic url is dispatched on on multiple instance url:
> http://server/cgi-bin/WebObjects/CarambolPRX.woa/1
> http://server/cgi-bin/WebObjects/CarambolPRX.woa/2
> ...
> http://server/cgi-bin/WebObjects/CarambolPRX.woa/n
>
> The all these instance url are equivalents.
>
> It works fine and login service is OK with a few hundred users. But at 800
> users, i'm facing this CAS error (ServiceTicket  does not match supplied, 
> and
> then followed by ServiceTicket does not exist as it has been removed):
>
> 2013-06-27 18:25:27,888 DEBUG
> [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Added ticket 
> [ST-49023-
> bwgchfenh9Z6zciIT2Pn-cas] to registry.>
> 2013-06-27 18:25:27,888 INFO
> [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket
> [ST-49023-bwgchfenh9Z6zciIT2Pn-cas] for service [http://server/cgi-
> bin/WebObjects/CarambolPRX.woa/1/wa/casCallBack] for user [supercoc]>
> 2013-06-27 18:25:57,940 DEBUG
> [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Attempting to 
> retrieve
> ticket [ST-49023-bwgchfenh9Z6zciIT2Pn-cas]>
> 2013-06-27 18:25:57,940 DEBUG
> [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Ticket [ST-49023-
> bwgchfenh9Z6zciIT2Pn-cas] found in registry.>
> 2013-06-27 18:25:57,940 ERROR
> [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket [ST-49023-
> bwgchfenh9Z6zciIT2Pn-cas] with service [http://server/cgi-
> bin/WebObjects/CarambolPRX.woa/1/wa/casCallBack does not match
> supplied service [http://server/cgi-
> bin/WebObjects/CarambolPRX.woa/15/wa/casCallBack]>
> 2013-06-27 18:25:57,940 DEBUG
> [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Removing ticket 
> [ST-
> 49023-bwgchfenh9Z6zciIT2Pn-cas] from registry>
> 2013-06-27 18:25:58,053 DEBUG
> [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Attempting to 
> retrieve
> ticket [ST-49023-bwgchfenh9Z6zciIT2Pn-cas]>
> 2013-06-27 18:25:58,053 INFO
> [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket [ST-49023-
> bwgchfenh9Z6zciIT2Pn-cas] does not exist.>
>
> Is it possible to configure the CAS to match a service instance number X:
> http://server/cgi-bin/WebObjects/CarambolPRX.woa/X
> with any other service instance number Y:
> http://server/cgi-bin/WebObjects/CarambolPRX.woa/Y
> ?
>
> Thanks for help
>
>
> --
> You are currently subscribed to [email protected] as:
> [email protected] To unsubscribe, change settings or access archives,
> see http://www.ja-sig.org/wiki/display/JSG/cas-user

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to