That error message comes from CAS when you attempt to log in not when you validate. So you're entering credentials wrong into the CAS Server form on the JA-SIG server.
-Scott On 4/12/07, Fawad Rashid <[EMAIL PROTECTED]> wrote:
Hi Scott I have created the account. After pointing the uPortal to the validateUrl to https://www.ja-sig.org/cas/serviceValidate url i am still getting a "The credentials you provided cannot be determined to be authentic" Regards Fawad Rashid ------------------------------ From: *"Scott Battaglia" <[EMAIL PROTECTED]>* Reply-To: *Yale CAS mailing list <[EMAIL PROTECTED]>* To: *"Yale CAS mailing list" <[EMAIL PROTECTED]>* Subject: *Re: TicketValidator Error* Date: *Thu, 12 Apr 2007 11:13:04 -0400* MIME-Version: *1.0* Received: *from pantheon-po14.its.yale.edu ([130.132.50.23]) by bay0-mc9-f15.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Thu, 12 Apr 2007 08:19:35 -0700* Received: *from tp.its.yale.edu (tp.its.yale.edu [130.132.52.34])by pantheon-po14.its.yale.edu (8.12.11.20060308/8.12.11) with ESMTP id l3CFE809009939;Thu, 12 Apr 2007 11:14:22 -0400* Received: *from mr6.its.yale.edu (mr6.its.yale.edu [130.132.50.54])by tp.its.yale.edu (Postfix) with ESMTP id 119173E856for <[EMAIL PROTECTED]>; Thu, 12 Apr 2007 11:14:08 -0400 (EDT)* Received: *from nz-out-0506.google.com (nz-out-0506.google.com [ 64.233.162.226])by mr6.its.yale.edu (8.12.11.20060308/8.12.11) with ESMTP idl3CFE7Nw024939for <[EMAIL PROTECTED]>; Thu, 12 Apr 2007 11:14:07 -0400 * Received: *by nz-out-0506.google.com with SMTP id s18so561293nzefor < [EMAIL PROTECTED]>; Thu, 12 Apr 2007 08:13:04 -0700 (PDT)* Received: *by 10.114.111.1 with SMTP id j1mr784001wac.1176390784068;Thu, 12 Apr 2007 08:13:04 -0700 (PDT)* Received: *by 10.114.79.3 with HTTP; Thu, 12 Apr 2007 08:13:04 -0700 (PDT)* >You should be able to sign up at http://www.ja-sig.org/issues > >-Scott > >On 4/12/07, Fawad Rashid <[EMAIL PROTECTED]> wrote: > > > > > > Hi Scott > > > > Where can i signup for the JIRA id?. Sorry for all the foolish questions. > > > > Regards > > > > Fawad Rashid > > > > > > > > > > ________________________________ > > > > > > From: "Scott Battaglia" <[EMAIL PROTECTED]> > > Reply-To: Yale CAS mailing list <[EMAIL PROTECTED]> > > To: "Yale CAS mailing list" <[EMAIL PROTECTED]> > > Subject: Re: TicketValidator Error > > Date: Thu, 12 Apr 2007 08:31:30 -0400 > > > > > > The CAS server on the JA-SIG server is our production server and delegates > > authentication to the data store for JIRA so you would use your JIRA > > credentials. > > > > -Scott > > > > > > On 4/12/07, > > Fawad Rashid <[EMAIL PROTECTED]> wrote: > > > > > > > > > > Hi > > > > > > What should be the login that i should use?, i am using guest/guest. > > > > > > > > Regards > > > > > > Fawad Rashid > > > > > > > > > > > > > > > > > > > > > > > > ________________________________ > > > > > > > > From: "Scott Battaglia" < > > > > [EMAIL PROTECTED]> > > Reply-To: Yale CAS mailing list <[EMAIL PROTECTED] > > > > > > > To: "Yale CAS mailing list" <[EMAIL PROTECTED]> > > Subject: Re: TicketValidator Error > > > > Date: Wed, 11 Apr 2007 07:48:07 -0400 > > > > > > > > On 4/11/07, Fawad Rashid < > > > > [EMAIL PROTECTED]> wrote: > > > > > > > > > > <snip /> > > > > I am getting a "The credentials you provided cannot be determined to be > > > > authentic.". > > > > > > > > > > This means that the username/password you provided to CAS were not correct. > > > > -Scott > > > > > > > > > > > > My web.xml looks something like this > > > > <filter> > > > > > > > > <filter-name>CAS Validate Filter</filter-name> > > > > <filter-class>edu.yale.its.tp.cas.client.filter.CASValidateFilter </filter-class> > > <init-param> > > <param-name> > > > > edu.yale.its.tp.cas.client.filter.validateUrl > > > > > > </param-name> > > <param-value>https://www.ja-sig.org/cas/serviceValidate > > > > </param-value> > > </init-param> > > <init-param> > > > > > > > > <param-name>edu.yale.its.tp.cas.client.filter.serverName </param-name> > > <param-value>localhost:8088</param-value> > > </init-param> > > </filter> > > > > Fawad Rashid > > > > > > > > > > > > > > > > > > >From: Andrew Petro <[EMAIL PROTECTED]> > > >Reply-To: Yale CAS mailing list < > > > > [EMAIL PROTECTED]> > > >To: Yale CAS mailing list < > > > > > > [EMAIL PROTECTED]> > > >Subject: Re: TicketValidator Error > > >Date: Tue, 10 Apr 2007 08:44:42 -0700 > > > > > > > > > > > > > > > > > > > > > > > > > >Fawad, > > > > > > > > > > > > > > > >This error almost always turns out to be an SSL certificate issue. > > > > > > > > > > > >Are you sure your CAS server Tomcat instance is pointing at the server > > >keystore you intend? (Configured in the tomcat/conf context > > > > > > >declarations). > > > > > > > > > > > >Are you sure your CAS-using-application client JVM is pointing at the > > >client keystore you intend? (Typically overridden by a > > >system-property-declaring command-line argument at JVM startup.) > > > > > > > > > > > > > > > >Are you able to use test your CAS-using-application against JA-SIG's > > >CAS server? > > > > https://www.ja-sig.org/cas/ ; uses a real commercial cert > > > > > > >so SSL issues are reduced (though if you are using a nonstandard client > > >keystore, it is quite possible to not include trust for commercially > > >vended certs). > > > > > > > > > > > >Andrew > > > > > > > > > > > >http://support.unicon.net/ > > > > > > > > > > > >Fawad Rashid wrote: > > > > > > > > > > > > > > > > > > > > > > > > >Hi > > > > > >I am facing a problem which has been repeatiditly reported by many > > > > > > >people but so far i have not been able to solve the issue. > > > > > >I have successfully installed CAS under Tomcat 5.5.20 and i have > > >setup SSL on port 8443 using my self generated certs. The certs > > > > > > > > > > > > > >have been generated using the following commands. > > > > > >keytool -genkey -alias tomcat-sv -dname "CN=localhost, OU=ECOM, > > >O=xib, L=Lahore, S=Punjab, C=PK" -keyalg RSA -keypass 123456 -storepass > > > > > > >changeit -keystore server.keystore > > > > > >keytool -export -alias tomcat-sv -storepass 123456 -file > > >server.cer -keystore server.keystore > > > > > >keytool -genkey -alias tomcat-cl -dname "CN=localhost,OU=ECOM, > > > > > > >O=xib, L=Lahore, S=Punjab, C=PK" -keyalg RSA -keypass 123456 -storepass > > >changeit -keystore client.keystore > > > > > >keytool -export -alias tomcat-cl -storepass changeit -file > > >client.cer > > > > -keystore > > > > > > client.keystore > > > > > >keytool -import -v -trustcacerts -alias tomcat -file server.cer > > >-keystore client.keystore -keypass 123456 -storepass changeit > > > > > >keytool -import -v -trustcacerts -alias tomcat -file > > > > > > client.cer > > >-keystore server.keystore -keypass 123456 -storepass changeit > > > > > > > > > > > >When i access the CAS portal on > > > > https://localhost:8443 > > >i get a Log In Successful page. When i try to access the uPortal portal > > > > > > >using > > > > > >the url > > > https://localhost:8443/cas/login?service=http%3A%2F%2Flocalhost:8088%2FuPortal%2FLogin > > > > > > >i can see the login page. When i submit the login > > > > > >I get the following error. > > > > > >HTTP Status 500 - > > > > > >type Exception report > > > > > >message > > > > > >description The server encountered an internal error () that > > > > > > >prevented it from fulfilling this request. > > > > > >exception > > > > > >javax.servlet.ServletException: Unable to validate > > >ProxyTicketValidator [[ edu.yale.its.tp.cas.client.ProxyTicketValidator > > > > > > > > > > >proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator > > >casValidateUrl=[ > > > > https://localhost:8443/cas/serviceValidate] > > >ticket=[ST-6-mWf3oVDr9HepuwDRk9cSch0J4IqgpZm17pi-20] > > > > > > >service=[http%3A%2F%2Flocalhost%3A8088%2FuPortal%2FLogin] renew=false]]] > > > > > >edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter( CASValidateFilter.java:292) > > > > > >root cause > > > > > > > > > > > > > >edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to > > >validate ProxyTicketValidator > > >[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] > > >[edu.yale.its.tp.cas.client.ServiceTicketValidator > > > > > > > > >casValidateUrl=[https://localhost:8443/cas/serviceValidate] > > >ticket=[ST-6-mWf3oVDr9HepuwDRk9cSch0J4IqgpZm17pi-20] > > > > >service=[http%3A%2F%2Flocalhost%3A8088%2FuPortal%2FLogin] renew=false]]] > > > > > > > > > >edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:52) > > > > > > edu.yale.its.tp.cas.client.filter.CASValidateFilter.getAuthenticatedUser( CASValidateFilter.java:339) > > > > > > > > > >edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter > > > > > > (CASValidateFilter.java:289) > > > > > >note The full stack trace of the root cause is available in the > > >Apache Tomcat/5.5.20 logs. > > > > > >The url changes to > > > > > > > > > > > http://localhost:8088/uPortal/Login?ticket=ST-6-mWf3oVDr9HepuwDRk9cSch0J4IqgpZm17pi-20 , > > >I am not sure what i am missing here, kindly guide me through. > > > > > >Regards > > > > > >Fawad Rashid > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Express yourself instantly with MSN Messenger! MSN > > >Messenger Download today it's FREE! > > > > > > > > > > > >_______________________________________________ > > > > > > >Yale CAS mailing list > > >[EMAIL PROTECTED] > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > > > >_______________________________________________ > > >Yale CAS mailing list > > > > > > > [EMAIL PROTECTED] > > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > _________________________________________________________________ > > Express yourself instantly with MSN Messenger! Download today it's FREE! > > > > > > > > > > http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ > > > > _______________________________________________ > > Yale CAS mailing list > > > > > > [EMAIL PROTECTED] > > > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > -- > > -Scott Battaglia > > > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > > > > > > > > > > > > > > > > >_______________________________________________ > > >Yale CAS mailing list > > >[EMAIL PROTECTED] > > > > >http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > > > > > > > > > > > > > > > ________________________________ > > Express yourself instantly with MSN Messenger! > > MSN Messenger Download today it's FREE! > > > > > > > > _______________________________________________ > > Yale CAS mailing list > > [EMAIL PROTECTED] > > > > > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > > > > > > > -- > > -Scott Battaglia > > > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > > > > > > > > >_______________________________________________ > > >Yale CAS mailing list > > >[EMAIL PROTECTED] > > >http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > ________________________________ > > Need a break? Find your escape route with Live Search Maps. > > >-- >-Scott Battaglia > >LinkedIn: http://www.linkedin.com/in/scottbattaglia >_______________________________________________ >Yale CAS mailing list >[EMAIL PROTECTED] >http://tp.its.yale.edu/mailman/listinfo/cas ------------------------------ Express yourself instantly with MSN Messenger! MSN Messenger<http://g.msn.com/8HMBEN/2743??PS=47575>Download today it's FREE! _______________________________________________ Yale CAS mailing list [EMAIL PROTECTED] http://tp.its.yale.edu/mailman/listinfo/cas
-- -Scott Battaglia LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________ Yale CAS mailing list [EMAIL PROTECTED] http://tp.its.yale.edu/mailman/listinfo/cas
