Hi Scott, I started debugging from the yale cas client. It fails the SecureURL.retrieve(url); statement of the validate method inside the ServiceTicketValidator.
When I take a new browser instance and hit the above url which is used in SecureURL.retrieve(url). In the browser it comes with the following exception. url is something similar to this https://mymachine:8443/cas/serviceValidate?service=http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin&ticket=ST-1-s2DXcqysNuwwc6C6xwUC-cas Is there any server configuration required in this new CAS 3.2.1.1 compared to CAS 3.0.x I can't think this as a certificate issue as when new CAS 3.2.1.1 is replaced with CAS 3.0.x it works with yale cas client 2.x What exactly the reason for the following error <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'> <cas:authenticationFailure code='INVALID_TICKET'> ticket 'ST-1-s2DXcqysNuwwc6C6xwUC-cas' not recognized </cas:authenticationFailure> </cas:serviceResponse> scott_battaglia wrote: > > The Yale CAS Client works perfectly fine with the CAS 3.2.1.1 server > release > (unless there is some bug we don't know about ). > > -Scott > > -Scott Battaglia > PGP Public Key Id: 0x383733AA > LinkedIn: http://www.linkedin.com/in/scottbattaglia > > > On Fri, Aug 1, 2008 at 1:59 AM, Tracy12 <[EMAIL PROTECTED]> wrote: > >> >> Even though, it doesnt support single log out, it should support things >> like >> serviceValidate isn't it? >> >> But I am getting the following exception, When I replace the old CAS >> which >> is 3.0.x it is working fine, which means it is nothing to do with the >> certificates, >> >> We are using yale cas client 2.1 in the uPortal. >> >> Thanks >> >> >> >> >> type Exception report >> >> message >> >> description The server encountered an internal error () that prevented it >> from fulfilling this request. >> >> exception >> >> javax.servlet.ServletException: Unable to validate ProxyTicketValidator >> [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] >> [edu.yale.its.tp.cas.client.ServiceTicketValidator >> casValidateUrl=[https://mymachine:8443/cas/serviceValidate] >> ticket=[ST-1-TWyPmOAR95g0fNryfZ1c-cas] >> service=[http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin] renew=false]]] >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:292) >> >> root cause >> >> edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate >> ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator >> proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator >> casValidateUrl=[https://mymachine:8443/cas/serviceValidate] >> ticket=[ST-1-TWyPmOAR95g0fNryfZ1c-cas] >> service=[http%3A%2F%2Flalitha%3A8080%2FuPortal%2FLogin] renew=false]]] >> >> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:57) >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.getAuthenticatedUser(CASValidateFilter.java:339) >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:289) >> >> root cause >> >> java.io.IOException: Server returned HTTP response code: 500 for URL: >> >> https://mymachine:8443/cas/serviceValidate?service=http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin&ticket=ST-1-TWyPmOAR95g0fNryfZ1c-cas >> >> >> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1170) >> >> >> com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnectionOldImpl.getInputStream(HttpsURLConnectionOldImpl.java:204) >> edu.yale.its.tp.cas.util.SecureURL.retrieve(SecureURL.java:84) >> >> >> edu.yale.its.tp.cas.client.ServiceTicketValidator.validate(ServiceTicketValidator.java:216) >> >> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:55) >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.getAuthenticatedUser(CASValidateFilter.java:339) >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:289) >> >> note The full stack trace of the root cause is available in the Apache >> Tomcat/5.5.25 logs. >> >> >> John Sood wrote: >> > >> > No. Yale client does not support single signout. >> > >> > Tracy12 wrote: >> >> With CAS 3.2.1.1 can't we use cas client 2.1 from yale.? >> >> >> >> Reason is within uPortal we have CAS client 2.1 with some code >> >> modifications, >> >> >> >> Is it a must that we need to use CAS Client 3.1.1 with CAS 3.2.1.1 >> >> >> >> >> >> >> >> John Sood wrote: >> >> >> >>> I am using the following at it works for me: >> >>> >> >>> CAS Server 3.2.1 >> >>> CAS Client 3.1.1 >> >>> >> >>> Tracy12 wrote: >> >>> >> >>>> Hi, >> >>>> >> >>>> Does CAS 3.2.1.1 fully supports Single log out? >> >>>> >> >>>> Do I have to download some prior version? >> >>>> >> >>>> Reason for this question is I can remember some discussions going on >> >>>> with >> >>>> regards to this, whether to download CAS 3.2.X >> >>>> >> >>>> or 3.1.X >> >>>> >> >>>> Pls confirm for us to download the proper version. >> >>>> >> >>>> Also let us know which casclient version should we download >> >>>> correspondent >> >>>> to >> >>>> the main CAS download. >> >>>> >> >>>> Thanks >> >>>> >> >>>> >> >>>> >> >>> _______________________________________________ >> >>> Yale CAS mailing list >> >>> [email protected] >> >>> http://tp.its.yale.edu/mailman/listinfo/cas >> >>> >> >>> >> >>> >> >> >> >> >> > >> > >> > _______________________________________________ >> > Yale CAS mailing list >> > [email protected] >> > http://tp.its.yale.edu/mailman/listinfo/cas >> > >> > >> >> -- >> View this message in context: >> http://www.nabble.com/Single-Log-Out---which-version-tp18746114p18768662.html >> Sent from the CAS Users mailing list archive at Nabble.com. >> >> _______________________________________________ >> Yale CAS mailing list >> [email protected] >> http://tp.its.yale.edu/mailman/listinfo/cas >> > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > > -- View this message in context: http://www.nabble.com/Single-Log-Out---which-version-tp18746114p18805727.html Sent from the CAS Users mailing list archive at Nabble.com. _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
