Yes, you should only configure one validating filter. They're only designed for one to be protecting a url at a time.
-Scott -Scott Battaglia PGP Public Key Id: 0x383733AA LinkedIn: http://www.linkedin.com/in/scottbattaglia On Tue, Jan 13, 2009 at 4:17 PM, tedzo <[email protected]> wrote: > Mostly FYI (need confirmation)- > In moving to Java Cas client v3.1.3 (from the Yale client), I tried using > all the filters as specified in > > http://www.ja-sig.org/wiki/display/CASC/Configuring+the+JA-SIG+CAS+Client+for+Java+in+the+web.xml > > After configuring everything, I hit the ticket "foo" not recognized > problem. The problem went away after I commented out Cas10TicketValidation > Filter and used only Cas20ProxyReceivingTicketValidation Filter. Looks like > the ticket gets used a second time if both filters are configured. > > Can someone confirm that this is ok, meaning, only one of the two is to be > used? > > One other issue I hit was the "Cas server returned no response". That got > resolved after I fixed my certificate. If the certificate doesn't have a > valid date (meaning, if it has expired), Cas complained and threw the above > mentioned (no response) exception. > > Hope this helps someone. > > Thanks. > > > _______________________________________________ > Yale CAS mailing list > [email protected] > http://tp.its.yale.edu/mailman/listinfo/cas > >
_______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
