The newest version of the CAS Client is leveraging OpenSAML 2 (whereas older versions used OpenSAML 1.1). That may be why you're experiencing different behavior.
With respect to proxying: proxying is part of the CAS protocol and not the SAML 1.1 protocol. If you need proxying + attributes you may be better off with a custom server response. On Thu, Mar 20, 2014 at 11:01 PM, Alua Kinzhebayeva < [email protected]> wrote: > No. Colleague of mine used just Saml11TicketValidator in his custom filter > from latest cas-client jar. After he switched to an earlier version problem > was gone.(might need to double check versions with him, but I do remember > him picking latest once) > Now we managed to get it working, could you answer another question? Is it > possible to validate proxy ticket and get user principal with attributes? > We changed a line of validator in cas-servlet.xml to enable proxy ticket > validation, Saml11TicketValidator validates ticket, but instead of username > as it was providing me before, now it gives me proxyCallback url specified > in web.xml of an app that issues proxy ticket. > > Alua > > 21 Mar 2014, в 08:27, Scott Battaglia <[email protected]> > написал(а): > > Are you just using the Saml11 filter? Or are you using it in custom code? > > > On Thu, Mar 20, 2014 at 1:20 AM, Alua.Kinzhebayeva < > [email protected]> wrote: > >> Hello! >> >> Could someone provide short working example of >> using Saml11TicketValidator in their own filter? >> We switched to using it from Cas20ProxyTicketValidator. >> Previous validator worked fine, but now we need extra attributes. >> Our current problem is when we launch JBoss AS 7 in debug mode, PermGen >> exception gets thrown although we allocated 2GB (even tried 4) on validate >> method call. >> >> Thank you for your time, >> Alua >> >> -- >> You are currently subscribed to [email protected] as: >> [email protected] >> >> >> >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-user >> >> > -- > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
