Great. Key thing to remember is that proxy chain does not do pattern matching (which might be something we could think about to add, perhaps). Urls have to be exact.
> -----Original Message----- > From: Christopher Horsager [mailto:[email protected]] > Sent: Tuesday, February 25, 2014 11:38 AM > To: [email protected] > Subject: RE: [cas-user] Invalid Proxy Chain > > That was it! Thank you, Misagh! > > All the examples I found used just the base URL for the entry. > > Best, > Chris > > -----Original Message----- > From: Misagh Moayyed [mailto:[email protected]] > Sent: Tuesday, February 25, 2014 10:58 AM > To: [email protected] > Subject: RE: [cas-user] Invalid Proxy Chain > > Have you tried the url "https://mail2.cord.edu/coa?proxyResponse=true"; > instead? > > > -----Original Message----- > > From: Chris H [mailto:[email protected]] > > Sent: Tuesday, February 25, 2014 8:59 AM > > To: [email protected] > > Subject: [cas-user] Invalid Proxy Chain > > > > Hi, I've searched through here, but haven't found an answer that works > > for me in any threads. > > > > I have a CAS 3.5.2 test instance up with ClearPass configured. I'm > > trying to setup the CASOWA application to integrate with Exchange > > 2010. My issue is with proxy chains. Everything works if I set CAS to > > accept anything for proxy chains, but when I try to define a bean for > > a specific chain I get this in my > > cas.log: > > > > 2014-02-25 09:33:21,126 WARN > > [org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFi > > lter] > > - > > > <org.jasig.cas.client.validation.InvalidProxyChainTicketValidationException: > > Invalid proxy chain: [https://mail2.cord.edu/coa?proxyResponse=true]> > > > > I've tried my clearPassProxyChain bean in both > > deployerConfigContext.xml and clearpass-configuration.xml. The bean > > looks like this: > > > > <bean id="clearPassProxyList" > > class="org.jasig.cas.client.validation.ProxyList"> > > <constructor-arg> > > <list> > > <value>https://mail2.cord.edu/coa</value> > > </list> > > </constructor-arg> > > </bean> > > > > I believe I have all my certs in place. Anything I should look at? > > Thanks for any help :) > > -- > > You are currently subscribed to [email protected] as: > > [email protected] To unsubscribe, change settings or access > > archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- > You are currently subscribed to [email protected] as: > [email protected] To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- > You are currently subscribed to [email protected] as: > [email protected] To unsubscribe, change settings or access archives, > see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
