I realized the reason for the invalid ticket is because I got the firstURL and did another hit basically I am trying to validate a ticket twice,
But the first exception I got was nothing related to invalid ticket but something else a I stated in previous email. The thing which I can't understand is I got uPortal 2.5.3 with Yale CAS Client workiing fine with CAS 3.0.x, but with the similar setup when I replace CAS 3.2.1.1 it throws the above exception for the serviceValidate. If CAS 3.2.1.1 is compatible with Yale CAS client 2.1, I dont need to do any configuration change in uPortal or Yale CAS client, isnt it? How Can I trouble shoot this more in the CAS 3.2.1.1 Thanks scott_battaglia wrote: > > It usually just means the ticket can't be found ;-) That usually occurs > if > for some reason the ticket id being passed in is wrong or you've tried to > validate a ticket twice. > > -Scott > > > On Mon, Aug 4, 2008 at 1:08 AM, Tracy12 <[EMAIL PROTECTED]> wrote: > >> >> Hi Scott, >> >> I started debugging from the yale cas client. It fails the >> SecureURL.retrieve(url); statement of the validate method inside the >> ServiceTicketValidator. >> >> When I take a new browser instance and hit the above url which is used in >> SecureURL.retrieve(url). In the browser it comes with the following >> exception. >> >> url is something similar to this >> >> https://mymachine:8443/cas/serviceValidate?service=http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin&ticket=ST-1-s2DXcqysNuwwc6C6xwUC-cas >> >> Is there any server configuration required in this new CAS >> 3.2.1.1compared >> to CAS 3.0.x >> >> I can't think this as a certificate issue as when new CAS 3.2.1.1 is >> replaced with CAS 3.0.x it works with yale cas client 2.x >> >> What exactly the reason for the following error >> >> >> >> >> <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'> >> <cas:authenticationFailure code='INVALID_TICKET'> >> ticket 'ST-1-s2DXcqysNuwwc6C6xwUC-cas' not recognized >> </cas:authenticationFailure> >> </cas:serviceResponse> >> >> >> scott_battaglia wrote: >> > >> > The Yale CAS Client works perfectly fine with the CAS 3.2.1.1 server >> > release >> > (unless there is some bug we don't know about ). >> > >> > -Scott >> > >> > -Scott Battaglia >> > PGP Public Key Id: 0x383733AA >> > LinkedIn: http://www.linkedin.com/in/scottbattaglia >> > >> > >> > On Fri, Aug 1, 2008 at 1:59 AM, Tracy12 <[EMAIL PROTECTED]> wrote: >> > >> >> >> >> Even though, it doesnt support single log out, it should support >> things >> >> like >> >> serviceValidate isn't it? >> >> >> >> But I am getting the following exception, When I replace the old CAS >> >> which >> >> is 3.0.x it is working fine, which means it is nothing to do with the >> >> certificates, >> >> >> >> We are using yale cas client 2.1 in the uPortal. >> >> >> >> Thanks >> >> >> >> >> >> >> >> >> >> type Exception report >> >> >> >> message >> >> >> >> description The server encountered an internal error () that prevented >> it >> >> from fulfilling this request. >> >> >> >> exception >> >> >> >> javax.servlet.ServletException: Unable to validate >> ProxyTicketValidator >> >> [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] >> >> [edu.yale.its.tp.cas.client.ServiceTicketValidator >> >> casValidateUrl=[https://mymachine:8443/cas/serviceValidate] >> >> ticket=[ST-1-TWyPmOAR95g0fNryfZ1c-cas] >> >> service=[http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin] >> renew=false]]] >> >> >> >> >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:292) >> >> >> >> root cause >> >> >> >> edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to >> validate >> >> ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator >> >> proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator >> >> casValidateUrl=[https://mymachine:8443/cas/serviceValidate] >> >> ticket=[ST-1-TWyPmOAR95g0fNryfZ1c-cas] >> >> service=[http%3A%2F%2Flalitha%3A8080%2FuPortal%2FLogin] renew=false]]] >> >> >> >> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:57) >> >> >> >> >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.getAuthenticatedUser(CASValidateFilter.java:339) >> >> >> >> >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:289) >> >> >> >> root cause >> >> >> >> java.io.IOException: Server returned HTTP response code: 500 for URL: >> >> >> >> >> https://mymachine:8443/cas/serviceValidate?service=http%3A%2F%2Fmymachine%3A8080%2FuPortal%2FLogin&ticket=ST-1-TWyPmOAR95g0fNryfZ1c-cas >> >> >> >> >> >> >> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1170) >> >> >> >> >> >> >> com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnectionOldImpl.getInputStream(HttpsURLConnectionOldImpl.java:204) >> >> edu.yale.its.tp.cas.util.SecureURL.retrieve(SecureURL.java:84) >> >> >> >> >> >> >> edu.yale.its.tp.cas.client.ServiceTicketValidator.validate(ServiceTicketValidator.java:216) >> >> >> >> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:55) >> >> >> >> >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.getAuthenticatedUser(CASValidateFilter.java:339) >> >> >> >> >> >> >> edu.yale.its.tp.cas.client.filter.CASValidateFilter.doFilter(CASValidateFilter.java:289) >> >> >> >> note The full stack trace of the root cause is available in the Apache >> >> Tomcat/5.5.25 logs. >> >> >> >> >> >> John Sood wrote: >> >> > >> >> > No. Yale client does not support single signout. >> >> > >> >> > Tracy12 wrote: >> >> >> With CAS 3.2.1.1 can't we use cas client 2.1 from yale.? >> >> >> >> >> >> Reason is within uPortal we have CAS client 2.1 with some code >> >> >> modifications, >> >> >> >> >> >> Is it a must that we need to use CAS Client 3.1.1 with CAS 3.2.1.1 >> >> >> >> >> >> >> >> >> >> >> >> John Sood wrote: >> >> >> >> >> >>> I am using the following at it works for me: >> >> >>> >> >> >>> CAS Server 3.2.1 >> >> >>> CAS Client 3.1.1 >> >> >>> >> >> >>> Tracy12 wrote: >> >> >>> >> >> >>>> Hi, >> >> >>>> >> >> >>>> Does CAS 3.2.1.1 fully supports Single log out? >> >> >>>> >> >> >>>> Do I have to download some prior version? >> >> >>>> >> >> >>>> Reason for this question is I can remember some discussions going >> on >> >> >>>> with >> >> >>>> regards to this, whether to download CAS 3.2.X >> >> >>>> >> >> >>>> or 3.1.X >> >> >>>> >> >> >>>> Pls confirm for us to download the proper version. >> >> >>>> >> >> >>>> Also let us know which casclient version should we download >> >> >>>> correspondent >> >> >>>> to >> >> >>>> the main CAS download. >> >> >>>> >> >> >>>> Thanks >> >> >>>> >> >> >>>> >> >> >>>> >> >> >>> _______________________________________________ >> >> >>> Yale CAS mailing list >> >> >>> [email protected] >> >> >>> http://tp.its.yale.edu/mailman/listinfo/cas >> >> >>> >> >> >>> >> >> >>> >> >> >> >> >> >> >> >> > >> >> > >> >> > _______________________________________________ >> >> > Yale CAS mailing list >> >> > [email protected] >> >> > http://tp.its.yale.edu/mailman/listinfo/cas >> >> > >> >> > >> >> >> >> -- >> >> View this message in context: >> >> >> http://www.nabble.com/Single-Log-Out---which-version-tp18746114p18768662.html >> >> Sent from the CAS Users mailing list archive at Nabble.com. >> >> >> >> _______________________________________________ >> >> Yale CAS mailing list >> >> [email protected] >> >> http://tp.its.yale.edu/mailman/listinfo/cas >> >> >> > >> > _______________________________________________ >> > Yale CAS mailing list >> > [email protected] >> > http://tp.its.yale.edu/mailman/listinfo/cas >> > >> > >> >> -- >> View this message in context: >> http://www.nabble.com/Single-Log-Out---which-version-tp18746114p18805727.html >> Sent from the CAS Users mailing list archive at Nabble.com. >> >> _______________________________________________ >> Yale CAS mailing list >> [email protected] >> http://tp.its.yale.edu/mailman/listinfo/cas >> > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > > -- View this message in context: http://www.nabble.com/Single-Log-Out---which-version-tp18746114p18822609.html Sent from the CAS Users mailing list archive at Nabble.com. _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
