It usually just means the ticket can't be found ;-)  That usually occurs if
for some reason the ticket id being passed in is wrong or you've tried to
validate a ticket twice.

-Scott


On Mon, Aug 4, 2008 at 1:08 AM, Tracy12 <[EMAIL PROTECTED]> wrote:

>
> Hi  Scott,
>
> I started debugging from the yale cas client.  It fails the
> SecureURL.retrieve(url); statement of the validate method inside the
> ServiceTicketValidator.
>
> When I take a new browser instance and hit the above url which is used in
> SecureURL.retrieve(url). In the browser it comes with the following
> exception.
>
> url is something similar to this
>
> https://mymachine:8443/cas/serviceValidate?service=http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin&ticket=ST-1-s2DXcqysNuwwc6C6xwUC-cas
>
> Is there any server configuration required in this new CAS 3.2.1.1compared
> to CAS 3.0.x
>
> I can't think this as a certificate issue as when new CAS 3.2.1.1 is
> replaced with CAS 3.0.x it works with yale cas client 2.x
>
> What exactly the reason for the following error
>
>
>
>
> <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
>        <cas:authenticationFailure code='INVALID_TICKET'>
>                ticket 'ST-1-s2DXcqysNuwwc6C6xwUC-cas' not recognized
>        </cas:authenticationFailure>
> </cas:serviceResponse>
>
>
> scott_battaglia wrote:
> >
> > The Yale CAS Client works perfectly fine with the CAS 3.2.1.1 server
> > release
> > (unless there is some bug we don't know about ).
> >
> > -Scott
> >
> > -Scott Battaglia
> > PGP Public Key Id: 0x383733AA
> > LinkedIn: http://www.linkedin.com/in/scottbattaglia
> >
> >
> > On Fri, Aug 1, 2008 at 1:59 AM, Tracy12 <[EMAIL PROTECTED]> wrote:
> >
> >>
> >> Even though, it doesnt support single log out, it should support things
> >> like
> >> serviceValidate  isn't it?
> >>
> >> But I am getting the following exception, When I replace the old CAS
> >> which
> >> is 3.0.x it is working fine, which means it is nothing to do with the
> >> certificates,
> >>
> >> We are using yale cas client 2.1 in the uPortal.
> >>
> >> Thanks
> >>
> >>
> >>
> >>
> >> type Exception report
> >>
> >> message
> >>
> >> description The server encountered an internal error () that prevented
> it
> >> from fulfilling this request.
> >>
> >> exception
> >>
> >> javax.servlet.ServletException: Unable to validate ProxyTicketValidator
> >> [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
> >> [edu.yale.its.tp.cas.client.ServiceTicketValidator
> >> casValidateUrl=[https://mymachine:8443/cas/serviceValidate]
> >> ticket=[ST-1-TWyPmOAR95g0fNryfZ1c-cas]
> >> service=[http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin] renew=false]]]
> >>
> >>
> >>
> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:292)
> >>
> >> root cause
> >>
> >> edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to
> validate
> >> ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator
> >> proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator
> >> casValidateUrl=[https://mymachine:8443/cas/serviceValidate]
> >> ticket=[ST-1-TWyPmOAR95g0fNryfZ1c-cas]
> >> service=[http%3A%2F%2Flalitha%3A8080%2FuPortal%2FLogin] renew=false]]]
> >>
> >> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:57)
> >>
> >>
> >>
> edu.yale.its.tp.cas.client.filter.CASValidateFilter.getAuthenticatedUser(CASValidateFilter.java:339)
> >>
> >>
> >>
> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:289)
> >>
> >> root cause
> >>
> >> java.io.IOException: Server returned HTTP response code: 500 for URL:
> >>
> >>
> https://mymachine:8443/cas/serviceValidate?service=http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin&ticket=ST-1-TWyPmOAR95g0fNryfZ1c-cas
> >>
> >>
> >>
> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1170)
> >>
> >>
> >>
> com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnectionOldImpl.getInputStream(HttpsURLConnectionOldImpl.java:204)
> >>        edu.yale.its.tp.cas.util.SecureURL.retrieve(SecureURL.java:84)
> >>
> >>
> >>
> edu.yale.its.tp.cas.client.ServiceTicketValidator.validate(ServiceTicketValidator.java:216)
> >>
> >> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:55)
> >>
> >>
> >>
> edu.yale.its.tp.cas.client.filter.CASValidateFilter.getAuthenticatedUser(CASValidateFilter.java:339)
> >>
> >>
> >>
> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:289)
> >>
> >> note The full stack trace of the root cause is available in the Apache
> >> Tomcat/5.5.25 logs.
> >>
> >>
> >> John Sood wrote:
> >> >
> >> > No. Yale client does not support single signout.
> >> >
> >> > Tracy12 wrote:
> >> >> With CAS 3.2.1.1 can't we use cas client 2.1 from yale.?
> >> >>
> >> >> Reason is within uPortal we have CAS client 2.1 with some code
> >> >> modifications,
> >> >>
> >> >> Is it a must that we need to use CAS Client 3.1.1 with CAS 3.2.1.1
> >> >>
> >> >>
> >> >>
> >> >> John Sood wrote:
> >> >>
> >> >>> I am using the following at it works for me:
> >> >>>
> >> >>> CAS Server 3.2.1
> >> >>> CAS Client 3.1.1
> >> >>>
> >> >>> Tracy12 wrote:
> >> >>>
> >> >>>> Hi,
> >> >>>>
> >> >>>> Does CAS 3.2.1.1 fully supports Single log out?
> >> >>>>
> >> >>>> Do I have to download some prior version?
> >> >>>>
> >> >>>> Reason for this question is I can remember some discussions going
> on
> >> >>>> with
> >> >>>> regards to this, whether to download CAS 3.2.X
> >> >>>>
> >> >>>> or 3.1.X
> >> >>>>
> >> >>>> Pls confirm for us to download the proper version.
> >> >>>>
> >> >>>> Also let us know which casclient version should we download
> >> >>>> correspondent
> >> >>>> to
> >> >>>> the main CAS download.
> >> >>>>
> >> >>>> Thanks
> >> >>>>
> >> >>>>
> >> >>>>
> >> >>> _______________________________________________
> >> >>> Yale CAS mailing list
> >> >>> [email protected]
> >> >>> http://tp.its.yale.edu/mailman/listinfo/cas
> >> >>>
> >> >>>
> >> >>>
> >> >>
> >> >>
> >> >
> >> >
> >> > _______________________________________________
> >> > Yale CAS mailing list
> >> > [email protected]
> >> > http://tp.its.yale.edu/mailman/listinfo/cas
> >> >
> >> >
> >>
> >> --
> >> View this message in context:
> >>
> http://www.nabble.com/Single-Log-Out---which-version-tp18746114p18768662.html
> >> Sent from the CAS Users mailing list archive at Nabble.com.
> >>
> >> _______________________________________________
> >> Yale CAS mailing list
> >> [email protected]
> >> http://tp.its.yale.edu/mailman/listinfo/cas
> >>
> >
> > _______________________________________________
> > Yale CAS mailing list
> > [email protected]
> > http://tp.its.yale.edu/mailman/listinfo/cas
> >
> >
>
> --
> View this message in context:
> http://www.nabble.com/Single-Log-Out---which-version-tp18746114p18805727.html
> Sent from the CAS Users mailing list archive at Nabble.com.
>
> _______________________________________________
> Yale CAS mailing list
> [email protected]
> http://tp.its.yale.edu/mailman/listinfo/cas
>
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas

Reply via email to