If you need the single sign out you HAVE to use the JASIG CAS Client for Java. If you don't need it you can use either client, but not both.
You should also ensure that the certificates for your client applications match the hostname of the machine they reside on. If your client is named "clienta" it can't be telling people its certificate is for "clientb" -Scott -Scott Battaglia PGP Public Key Id: 0x383733AA LinkedIn: http://www.linkedin.com/in/scottbattaglia On Tue, Jul 15, 2008 at 10:54 AM, Scott Battaglia <[EMAIL PROTECTED]> wrote: > Why are you trying to use two completely incompatible CAS clients? Please > choose one or the other. > > > > On Tue, Jul 15, 2008 at 10:45 AM, SMallik <[EMAIL PROTECTED]> > wrote: > >> >> Hi Scott, >> Can you please look into the config files for any possible >> mis-configuration >> ? I could not locate any and still facing the same issues. >> One more thing to add , may or may not be related to the SSOut problem . >> In >> my CAS client I have to use both the jars casclient-2.1.1 and >> cas-client-core-3.1.3 . If I use cas-client-core-3.1.3 only I am getting >> >> java.lang.NoClassDefFoundError: >> edu/yale/its/tp/cas/client/ProxyTickeValidator error >> >> and if I use casclient-2.1.1.jar only , I am getting >> >> java.lang.ClassNotFoundException: >> org.jasig.cas.client.session.SingleSignOutHttpSessionListener. >> >> I am using CAS 3.2.1 , how to avoid this 2 jars problem ? >> >> >> >> >> >> scott_battaglia wrote: >> > >> > I don't know how you have anything set up. All I can tell you is that >> the >> > hostname that your application is accessed under MUST match the CN of >> the >> > certificate that is being returned when that application is requested. >> > >> > -SCott >> > >> > -Scott Battaglia >> > PGP Public Key Id: 0x383733AA >> > LinkedIn: http://www.linkedin.com/in/scottbattaglia >> > >> > On Mon, Jul 14, 2008 at 1:24 PM, SMallik <[EMAIL PROTECTED]> >> wrote: >> > >> >> >> >> Hi, >> >> When I generate certificate in the name of "testcasa" ( machine where >> 2nd >> >> application is running ) and use it on testcasa, I get the following >> >> error >> >> : >> >> >> >> Your CAS credentials were rejected. >> >> Reason: sun.security.validator.ValidatorException: PKIX path building >> >> failed: sun.security.provider.certpath.SunCertPathBuilderException: >> >> unable >> >> to find valid certification path to requested target >> >> >> >> and then I cant access secured pages. >> >> >> >> But if I use testcas ( machine where 1st application and CAS are >> running >> >> ) >> >> generated certificate on testcasa though I can access secured pages but >> >> on >> >> click of logout I get the following error : >> >> >> >> 2008-07-14 11:31:14,189 ERROR [org.jasig.cas.util.HttpClient] - >> >> java.io.IOException: HTTPS hostname wrong: should be <testcasa> >> >> java.io.IOException: HTTPS hostname wrong: should be <testcasa> . >> >> >> >> Is it mandatory that all CASified applications running on different >> >> machines >> >> use the same certificate as the the machine on which CAS server is >> >> running >> >> ? >> >> If I do the same , I get the error and If I use machine specific >> >> certificate >> >> then also I am getting error. >> >> >> >> Can you please suggest me, where I am going wrong ? I need to implement >> >> SSOut anyhow. >> >> >> >> Thanks >> >> >> >> >> >> >> >> >> >> >> >> -- >> >> View this message in context: >> >> http://www.nabble.com/Logout-problem-tp18407195p18448728.html >> >> Sent from the CAS Users mailing list archive at Nabble.com. >> >> >> >> _______________________________________________ >> >> Yale CAS mailing list >> >> [email protected] >> >> http://tp.its.yale.edu/mailman/listinfo/cas >> >> >> > >> > _______________________________________________ >> > Yale CAS mailing list >> > [email protected] >> > http://tp.its.yale.edu/mailman/listinfo/cas >> > >> > >> >> -- >> View this message in context: >> http://www.nabble.com/Logout-problem-tp18407195p18467036.html >> Sent from the CAS Users mailing list archive at Nabble.com. >> >> _______________________________________________ >> Yale CAS mailing list >> [email protected] >> http://tp.its.yale.edu/mailman/listinfo/cas >> > >
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
