Hi, "Connection refused: connect" means the filter couldn't open a socket to the CAS server, besides any authentication problems. I would guess there's some kind of firewall problem, or maybe the CAS filter isn't properly configured and is trying to access the wrong CAS server.
About the certificate: You will need to import the CAS's CA certificate into the keystore used by the Filter (either the Java keystore (lib/security/cacerts) or tomcat's keystore) HTH, Jonathan -----Message d'origine----- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Matteo Matteo Envoyé : mercredi 28 novembre 2007 10:29 À : Yale CAS mailing list Objet : CAS Client (Tomca Filter) gets "Connection refused: connect" when CAS Server is on another PC I could start CAS server on one PC and use there CAS client too. But when I'm trying to use CAS client (web Filter) on another PC - I get an exception (the listing is below). So I have several questions: - I've generated a SSL certificate myself (so it's not really "trusted") - should I import it on a client PC to a Java keystore too? - if I should not import to to a client keystore - where could be an error? Thanks Matvey ========================================================= javax.servlet.ServletException: Connection refused: connect edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:254) edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:184) root cause java.net.ConnectException: Connection refused: connect java.net.PlainSocketImpl.socketConnect(Native Method) java.net.PlainSocketImpl.doConnect(Unknown Source) java.net.PlainSocketImpl.connectToAddress(Unknown Source) java.net.PlainSocketImpl.connect(Unknown Source) java.net.Socket.connect(Unknown Source) java.net.Socket.connect(Unknown Source) sun.net.NetworkClient.doConnect(Unknown Source) sun.net.www.http.HttpClient.openServer(Unknown Source) sun.net.www.http.HttpClient.openServer(Unknown Source) sun.net.www.protocol.https.HttpsClient.<init>(Unknown Source) sun.net.www.protocol.https.HttpsClient.New(Unknown Source) sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(Unknown Source) sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source) sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source) sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source) sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source) edu.yale.its.tp.cas.util.SecureURL.retrieve(SecureURL.java:70) edu.yale.its.tp.cas.client.ServiceTicketValidator.validate(ServiceTicketValidator.java:212) edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:219) edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:184) _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas This message contains information that may be privileged or confidential and is the property of the Capgemini Group. It is intended only for the person to whom it is addressed. If you are not the intended recipient, you are not authorized to read, print, retain, copy, disseminate, distribute, or use this message or any part thereof. If you receive this message in error, please notify the sender immediately and delete all copies of this message. _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
