Hello! Hope someone can give me clue to what to do next. I've searched the archives and googled but can't find anyone with the same issue.
I'm using JA-SIG CAS Java Client 3.1.1 to protect the a webapp in Tomcat (tested in 5.5.12 and 5.5.23). Here are 3 sniffed example urls that are being returned to the CAS filters in the webapp after successful authentication at our CAS server. http://resolverdev.shef.ac.uk:800/?http://infotrac.galegroup.com/itweb/su_uk?db=ecco&ticket=ST-5-Ypiy9c6ITVg1hKoEBTTJ http://resolverdev.shef.ac.uk:800/?http://www.shef.ac.uk&ticket=ST-6-3Tc8tA8Od8oni1eCiUhS These work fine, with the CAS filter letting the request through. However this url http://resolverdev.shef.ac.uk:800/?http://proquest.umi.com/pqdlink?Ver=1&Exp=02-19-2008&REQ=3&Cert=8RkgPFRptdR2FO9BI6WZzTyJQZzJBUi00ivY5SNt%20cgZLOA5G9YvJ2/7Ga9kCse4ZZL2e7vJqwjFoqZw%20P6VJ/YIAo0QQPHG&pub=37932&ticket=ST-4-W73WEvS79X0eLp0ASxxo fails with 2008-06-13 10:08:25,858 - WARN org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter - org.jasig.cas.client.validation.TicketValidationException: ticket 'ST-4-W73WEvS79X0eLp0ASxxo' does not match supplied service org.jasig.cas.client.validation.TicketValidationException: ticket 'ST-4-W73WEvS79X0eLp0ASxxo' does not match supplied service at org.jasig.cas.client.validation.Cas20ServiceTicketValidator.parseResponseFromServer(Cas20ServiceTicketValidator.java:65) at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:165) at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:129) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:103) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148) at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:868) at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:663) at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527) at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684) at java.lang.Thread.run(Thread.java:595) I'm flummoxed why. The tickets look fine. Hope someone can give me a clue to what this error means or how to debug further! Any help much appreciated. cheeeeeeeeeeeeeeeeeers I'm also adding the CAS part of my web.xml if that is useful: <!-- JA-SIG CAS filters --> <filter> <filter-name>CAS Authentication Filter</filter-name> <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class> <init-param> <param-name>casServerLoginUrl</param-name> <param-value>https://luminis.shef.ac.uk/cp/cas/login</param-value> </init-param> </filter> <filter> <filter-name>CAS Validation Filter</filter-name> <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class> <init-param> <param-name>casServerUrlPrefix</param-name> <param-value>https://luminis.shef.ac.uk/cp/cas</param-value> </init-param> <init-param> <param-name>redirectAfterValidation</param-name> <param-value>true</param-value> </init-param> </filter> <filter> <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name> <filter-class>org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class> </filter> -- Nomit Babraa Department of Corporate Information & Computing Services (CiCS) University of Sheffield 287 Glossop Rd Sheffield S10 2HB Tel: 0114 222 1162 _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
