I'm new to CAS server and am looking to use it for providing SSO for a mix of
PHP and Java applications and authentication through OpenLDAP.
Here's my set-up:
1) Apache 2.2.3 integrated with tomcat 5.5.26
2) SSL is set-up for both Apache and Tomcat.
3) CAS is installed on Tomcat.
4) SSL setup on LDAP
But i am not getting the authenticated through CAS.
The phpCAS.log shows
BF16 .START ****************** [CAS.php:400]
BF16 .=> phpCAS::client('2.0', 'localhost', 8443, '/cas/login') [index.php:132]
BF16 .| => CASClient::CASClient('2.0', false, 'localhost', 8443,
'/cas/login', true) [CAS.php:301]
BF16 .| | ST or PT 'ST-140-eQpuMzWbrbfckSPv77gX-cas' found
[client.php:561]
BF16 .| <= ''
BF16 .<= ''
BF16 .=> phpCAS::setNoCasServerValidation() [index.php:133]
BF16 .<= ''
BF16 .=> phpCAS::checkAuthentication() [index.php:135]
BF16 .| => CASClient::checkAuthentication() [CAS.php:870]
BF16 .| | => CASClient::isAuthenticated() [client.php:699]
BF16 .| | | => CASClient::wasPreviouslyAuthenticated() [client.php:758]
BF16 .| | | | no user found [client.php:862]
BF16 .| | | <= false
BF16 .| | | PT `ST-140-eQpuMzWbrbfckSPv77gX-cas' is present
[client.php:779]
BF16 .| | | => CASClient::validatePT('', NULL, NULL) [client.php:780]
BF16 .| | | | => CASClient::getURL() [client.php:396]
BF16 .| | | | <=
'https://localhost/wiki/index.php?title=-&action=raw&gen=js&useskin=monobook'
BF16 .| | | | =>
CASClient::readURL('https://localhost:8443/cas/login/proxyValidate?service=https%3A%2F%2Flocalhost%2Fwiki%2Findex.php%3Ftitle%3D-%26action%3Draw%26gen%3Djs%26useskin%3Dmonobook&ticket=ST-140-eQpuMzWbrbfckSPv77gX-cas',
'', NULL, NULL, NULL) [client.php:1945]
BF16 .| | | | | curl_exec() failed [client.php:1696]
BF16 .| | | | <= false
BF16 .| | | | could not open URL
'https://localhost:8443/cas/login/proxyValidate?service=https%3A%2F%2Flocalhost%2Fwiki%2Findex.php%3Ftitle%3D-%26action%3Draw%26gen%3Djs%26useskin%3Dmonobook&ticket=ST-140-eQpuMzWbrbfckSPv77gX-cas'
to validate (CURL error #35: ) [client.php:1946]
BF16 .| | | | => CASClient::authError('PT not validated',
'https://localhost:8443/cas/login/proxyValidate?service=https%3A%2F%2Flocalhost%2Fwiki%2Findex.php%3Ftitle%3D-%26action%3Draw%26gen%3Djs%26useskin%3Dmonobook&ticket=ST-140-eQpuMzWbrbfckSPv77gX-cas',
true) [client.php:1949]
BF16 .| | | | | => CASClient::getURL() [client.php:2130]
BF16 .| | | | | <=
'https://localhost/wiki/index.php?title=-&action=raw&gen=js&useskin=monobook'
BF16 .| | | | | CAS URL:
https://localhost:8443/cas/login/proxyValidate?service=https%3A%2F%2Flocalhost%2Fwiki%2Findex.php%3Ftitle%3D-%26action%3Draw%26gen%3Djs%26useskin%3Dmonobook&ticket=ST-140-eQpuMzWbrbfckSPv77gX-cas
[client.php:2131]
BF16 .| | | | | Authentication failure: PT not validated
[client.php:2132]
BF16 .| | | | | Reason: no response from the CAS server
[client.php:2134]
BF16 .| | | | | exit()
BF16 .| | | | | -
BF16 .| | | | -
BF16 .| | | -
BF16 .| | -
BF16 .| -
Please help.
Thanks
Sunder
Disclaimer:
This message and any attachment(s) contained here are information that is
confidential, proprietary to NEC HCL System Technologies and its customers.
Contents may be privileged or otherwise protected by law. The information is
solely intended for the individual or the entity it is addressed to. If you are
not the intended recipient of this message, you are not authorized to read,
forward, print, retain, copy or disseminate this message or any part of it. If
you have received this e-mail in error, please notify the sender immediately by
return e-mail and delete it from your computer.
_______________________________________________
Yale CAS mailing list
[email protected]
http://tp.its.yale.edu/mailman/listinfo/cas