Certain clients have hard-coded it that way. However, the protocol says that either ST or PT is allowed. PT was recommended because that is what CAS 2 issued. CAS 3 makes no distinction between Service Ticket and Proxy Ticket and therefore only issues tickets with a prefix of ST.
-Scott On 8/10/07, Paul Hunnisett <[EMAIL PROTECTED]> wrote: > > That's very interesting. The CAS authentication module that Bristol uni > wrote to get into blackboard uses the prefix of the ticjet (ST or PT) to > determine whether to proxy validate or service validate. The fact that I'm > always getting a ST ticket back means that it will always fail. > > I could try and re-engineer the authentication module - although I'm > wondering if anyone already has... > > Cheers > > Paul > > ------------------------------ > *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On > Behalf Of *Scott Battaglia > *Sent:* 10 August 2007 12:56 > *To:* Yale CAS mailing list > *Subject:* Re: Proxy Tickets > > Paul, > > A ProxyTicket with a prefix of "ST" is valid. You haven't done anything > wrong. > > Hope that helps. > -Scott > > On 8/10/07, Paul Hunnisett <[EMAIL PROTECTED]> wrote: > > > > Apologies if this is a stupid question. We set up CAS with out uPortal > > a couple of years ago and then moved away from CAS. We're now looknig > > at CAS again and are trying to get it set up, but a few things seem to > > have changed. First of all - should a valid proxy ticket start with PT? > > I've run through the proxy validation tests in the wiki and also tried > > to do validation from within uPortal and I only ever get a ticket > > starting with ST... > > > > I'm guessing that's wrong and that we have things set up wrong > > somewhere... The relevant bits of my web.xml are: > > > > <filter> > > > > <filter-name>CAS Validate Filter</filter-name> > > > > <filter-class>edu.yale.its.tp.cas.client.filter.CASValidateFilter</filte > > r-class> > > > > <init-param> > > > > <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name> > > > > <param-value>https://paulh.uwe.ac.uk/cas/proxyValidate</param-value> > > > > </init-param> > > > > <init-param> > > > > <param-name>edu.yale.its.tp.cas.client.filter.serverName </param-name> > > > > <param-value>paulh.uwe.ac.uk</param-value> > > > > </init-param> > > > > <init-param> > > > > <param-name>edu.yale.its.tp.cas.client.filter.proxyCallbackUrl</param-na > > me> > > > > <param-value>https://paulh.uwe.ac.uk/uPortal/CasProxyServlet</param-valu > > e> > > > > </init-param> > > > > <init-param> > > > > <param-name>edu.yale.its.tp.cas.client.filter.authorizedProxy</param-nam > > e> > > > > <param-value>https://paulh.uwe.ac.uk/uPortal/CasProxyServlet > > </param-valu > > e> > > > > </init-param> > > > > </filter> > > > > <filter> > > <filter-name>CAS Receipt Cacher</filter-name> > > > > <filter-class>edu.yale.its.tp.cas.client.filter.StaticCasReceiptCacherFi > > lter</filter-class> > > </filter> > > > > <filter-mapping> > > <filter-name>CAS Validate Filter</filter-name> > > <url-pattern>/Login</url-pattern> > > </filter-mapping> > > > > <filter-mapping> > > <filter-name>CAS Receipt Cacher</filter-name> > > <url-pattern>/Login</url-pattern> > > </filter-mapping> > > > > ... > > > > <servlet> > > <servlet-name>ProxyTicketReceptor</servlet-name> > > > > <servlet-class>edu.yale.its.tp.cas.proxy.ProxyTicketReceptor</servlet-cl > > ass> > > <init-param> > > <param-name>edu.yale.its.tp.cas.proxyUrl</param-name> > > <param-value> https://paulh.uwe.ac.uk/cas/proxy</param-value> > > </init-param> > > <load-on-startup>1</load-on-startup> > > </servlet> > > > > <servlet-mapping> > > <servlet-name>ProxyTicketReceptor</servlet-name> > > <url-pattern>/CasProxyServlet</url-pattern> > > </servlet-mapping> > > > > > > Can anyone see where I'm going wrong? > > > > Cheers > > > > Paul Hunnisett > > UWE > > > > > > > > This email was independently scanned for viruses by McAfee anti-virus > > software and none were found > > _______________________________________________ > > Yale CAS mailing list > > [email protected] > > http://tp.its.yale.edu/mailman/listinfo/cas > > > > > > -- > -Scott Battaglia > > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > ------------------------------ > This incoming email to UWE has been independently scanned for viruses by > McAfee anti-virus software and none were detected > > ------------------------------ > This email was independently scanned for viruses by McAfee anti-virus > software and none were found > > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > > -- -Scott Battaglia LinkedIn: http://www.linkedin.com/in/scottbattaglia
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
