We had a power outage in our building, so we decided to move our servers
offsite (Kerberos server (AD)and CAS Server as well). We changed IP
addresses and updated all DNS entries, however when we try to log into
the site that used to be authenticated by CAS, we get the following
error: 

------------------------------------------------------------------------
-
HTTP Status 500 -

type Exception report

message

description The server encountered an internal error () that prevented
it from fulfilling this request.

exception

javax.servlet.ServletException: Unable to validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
[edu.yale.its.tp.cas.client.ServiceTicketValidator
casValidateUrl=[https://login.domainname.com/cas/serviceValidate]
ticket=[ST-48-sKW5zzvf0SMiXRGNnqdu]
service=[https%3A%2F%2Fintranet.domainname.com%2Fsuite%2Fportal%2Fssodet
ect.do] renew=false]]]
        
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:381)
        
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilte
r.java:81)

root cause

edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to
validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
[edu.yale.its.tp.cas.client.ServiceTicketValidator
casValidateUrl=[https://login.domainname.com/cas/serviceValidate]
ticket=[ST-48-sKW5zzvf0SMiXRGNnqdu]
service=[https%3A%2F%2Fintranet.domainname.com%2Fsuite%2Fportal%2Fssodet
ect.do] renew=false]]]
        
edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:52)
        
edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilt
er.java:455)
        
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
        
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilte
r.java:81)

note The full stack trace of the root cause is available in the Apache
Tomcat/5.5.9 logs.
------------------------------------------
We're still on 2.0.12 with CAS and it's been working fine until the
move, we had planned on upgrading, but now is not the time to focus on
upgrade, we need the site up first.

Thanks


Serge
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to