[cas-user] Re: CAS 5.3.3 - SAML 1.1 - Custom Saml 1.1 client not able to retrieve the assertion.

[Curtis Ruck]

I believe all of the above is due to a missing TARGET query parameter.

I really wish we had better parameter validation and logging for things 
like this.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/58946e58-b969-4257-8c95-2a1ab19ce406%40apereo.org.

[cas-user] Re: CAS 5.3.3 - SAML 1.1 - Custom Saml 1.1 client not able to retrieve the assertion.

[Curtis Ruck]

Following the logic back with TRACE logging on, it appears inside 
DefaultArgumentExtractor.java 

 its 
generating 2 of 3 different service objects.

SamlService with id=null (what i'm seeing in the logs that later NPE's in 
URLDecoder.decode).
SimpleWebApplicationServiceImpl with id=https://example.com/foo/bar not 
seeing these anywhere
and its logging "No service could be extracted based on the given request." 
this causes it to return null, which makes service=null in 
AbstractServiceValidateController.handleRequestInternal, which i'm not 
seeing i don't believe.

These all 3 appear to be getting logged, as if there are multiple 
ServiceFactories registered.


-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b4cca3ca-ad4e-4a12-ba91-75e3e90a26b4%40apereo.org.

[cas-user] Re: CAS 5.3.3 - SAML 1.1 - Custom Saml 1.1 client not able to retrieve the assertion.

[Curtis Ruck]

This has me completely confused.  I'm trying to nail down a stack trace, 
for some reason its not logging stack traces after the log file rolls over; 
and this particular client is dumb, and just keeps trying infinitely 
without any backoff algorithm when failures repeatedly occur.  It appears 
that whatever AbstractWebApplicationService is (i assume its supposed to be 
SamlService, but SamlService doesn't have a @ToString.

2018-09-10 16:15:42,078 DEBUG 
[org.apereo.cas.AbstractCentralAuthenticationService] - 
2018-09-10 16:15:42,078 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,079 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,079 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,080 ERROR 
[org.apereo.cas.authentication.principal.Service] - 
java.lang.NullPointerException: null
2018-09-10 16:15:42,080 ERROR 
[org.apereo.cas.DefaultCentralAuthenticationService] - https://example.com/foo/bar] does not match supplied service 
[AbstractWebApplicationService(id=null, originalUrl=null, 
artifactId=ST-4920--b-TI-JNe91v7ZP1P49EEXhndtwv325-core, principal=null, 
source=TARGET, loggedOutAlready=false, format=XML, attributes={})]>
2018-09-10 16:15:42,080 DEBUG 
[org.apereo.cas.ticket.support.MultiTimeUseOrTimeoutExpirationPolicy] - 

2018-09-10 16:15:42,081 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,081 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,082 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,082 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,082 DEBUG 
[org.apereo.cas.ticket.registry.AbstractTicketRegistry] - 
2018-09-10 16:15:42,083 INFO 
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - 
2018-09-10 16:15:42,097 DEBUG 
[org.opensaml.messaging.encoder.servlet.BaseHttpServletResponseXMLMessageEncoder]
 
- 
2018-09-10 16:15:42,097 DEBUG 
[org.opensaml.messaging.encoder.servlet.BaseHttpServletResponseXMLMessageEncoder]
 
- 
2018-09-10 16:15:42,097 DEBUG [PROTOCOL_MESSAGE] - <

http://schemas.xmlsoap.org/soap/envelope/;>




Ticket 
'ST-4920--b-TI-JNe91v7ZP1P49EEXhndtwv325-core' does not match supplied 
service. The original service was 'https://example.com/foo/bar' and the 
supplied service was 'null'.




>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b7559462-3a51-43c8-bbc9-9eff749b0a9e%40apereo.org.