Why don't you apply the CAS client/filter to the generic url (http://server/cgi-bin/WebObjects/CarambolPRX.woa)? Then you will always have the same url from the CAS point of view. I think that would be much better than hacking into CAS to change the way that service URI's are compared. This could easily compromise you security if not done right.
David Ohsie Software Architect EMC Corporation > -----Original Message----- > From: Will [mailto:[email protected]] > Sent: Thursday, June 27, 2013 12:54 PM > To: [email protected] > Subject: [cas-user] ServiceTicket does not match supplied error > > Hi all > > I'm doing load testing on WebObjects (5.3.3) web application using CAS > 3.4.3.1. > > I have a Webobject application with generic url: > http://server/cgi-bin/WebObjects/CarambolPRX.woa > > this generic url is dispatched on on multiple instance url: > http://server/cgi-bin/WebObjects/CarambolPRX.woa/1 > http://server/cgi-bin/WebObjects/CarambolPRX.woa/2 > ... > http://server/cgi-bin/WebObjects/CarambolPRX.woa/n > > The all these instance url are equivalents. > > It works fine and login service is OK with a few hundred users. But at 800 > users, i'm facing this CAS error (ServiceTicket does not match supplied, > and > then followed by ServiceTicket does not exist as it has been removed): > > 2013-06-27 18:25:27,888 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Added ticket > [ST-49023- > bwgchfenh9Z6zciIT2Pn-cas] to registry.> > 2013-06-27 18:25:27,888 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket > [ST-49023-bwgchfenh9Z6zciIT2Pn-cas] for service [http://server/cgi- > bin/WebObjects/CarambolPRX.woa/1/wa/casCallBack] for user [supercoc]> > 2013-06-27 18:25:57,940 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Attempting to > retrieve > ticket [ST-49023-bwgchfenh9Z6zciIT2Pn-cas]> > 2013-06-27 18:25:57,940 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Ticket [ST-49023- > bwgchfenh9Z6zciIT2Pn-cas] found in registry.> > 2013-06-27 18:25:57,940 ERROR > [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket [ST-49023- > bwgchfenh9Z6zciIT2Pn-cas] with service [http://server/cgi- > bin/WebObjects/CarambolPRX.woa/1/wa/casCallBack does not match > supplied service [http://server/cgi- > bin/WebObjects/CarambolPRX.woa/15/wa/casCallBack]> > 2013-06-27 18:25:57,940 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Removing ticket > [ST- > 49023-bwgchfenh9Z6zciIT2Pn-cas] from registry> > 2013-06-27 18:25:58,053 DEBUG > [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - <Attempting to > retrieve > ticket [ST-49023-bwgchfenh9Z6zciIT2Pn-cas]> > 2013-06-27 18:25:58,053 INFO > [org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket [ST-49023- > bwgchfenh9Z6zciIT2Pn-cas] does not exist.> > > Is it possible to configure the CAS to match a service instance number X: > http://server/cgi-bin/WebObjects/CarambolPRX.woa/X > with any other service instance number Y: > http://server/cgi-bin/WebObjects/CarambolPRX.woa/Y > ? > > Thanks for help > > > -- > You are currently subscribed to [email protected] as: > [email protected] To unsubscribe, change settings or access archives, > see http://www.ja-sig.org/wiki/display/JSG/cas-user
smime.p7s
Description: S/MIME cryptographic signature
