Yes, there are only two hosts in the cluster and their 
clearpass-configuration.xml files are identical. 

----------------------------------
Mark St. Laurent
Web Systems Administrator
Yavapai College
(928) 717-7654
http://www.yc.edu 

-----Original Message-----
From: Marvin Addison [mailto:[email protected]] 
Sent: Friday, November 15, 2013 12:00 PM
To: [email protected]
Subject: Re: [cas-user] ClearPass with Load-Balanced CAS

> I added the exception stack to the gist.

Root cause:  javax.crypto.BadPaddingException: Given final block not properly 
padded

I believe you can get that failure mode when attempting to decrypt ciphertext 
with the wrong key. I'm certain it could happen in the case of data truncation, 
but that's seems less likely that a deployment problem. Since this is a 
clustered situation, I would think "wrong key" is a more likely cause.  Did you 
take care to sync the one and only key to all hosts in the cluster?

M

--
You are currently subscribed to [email protected] as: 
[email protected] To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to