Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-08 Thread Jennifer LaVoie
yes it is part of the URL... Ok...I will speak with my app owner person thank you Jen On Tue, Jan 8, 2019 at 2:28 PM Ray Bon wrote: > Jen, > > When CAS redirects after login, is the GLMS... part of the URL? > If it is, then the fix will have to be on client side. > > Ray > > On Tue, 2019-01-08

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-08 Thread Ray Bon
Jen, When CAS redirects after login, is the GLMS... part of the URL? If it is, then the fix will have to be on client side. Ray On Tue, 2019-01-08 at 10:58 -0800, Jennifer LaVoie wrote: Hi Ray I did try to put the .* in the services URL, but no joy. Here is my service file { @class: org.ape

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-08 Thread Jennifer LaVoie
Hi Ray I did try to put the .* in the services URL, but no joy. Here is my service file { @class: org.apereo.cas.services.RegexRegisteredService serviceId: ^https://travel.host.edu:4447/tvlexp/.*(\\z|.*) name: Travel and Expense id: 1546908138322 description: Production expirationPol

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-08 Thread Ray Bon
Jen, What kind of control do you have over the client application? It is odd that GLMSSESSIONID is sent as a parameter rather than being stored in a cookie, but stranger things have happened. What does your service entry look like? We have some entries that end in a fixed pattern and some that

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-08 Thread Ray Bon
A 'not authorized to use CAS' message happens before authentication. This error happens on ST validation. On Tue, 2019-01-08 at 08:36 +0100, Alberto Cabello Sánchez wrote: On Tue, 8 Jan 2019 00:50:10 + Ray Bon mailto:r...@uvic.ca>> wrote: Jen, The ST is being validated against a URL with

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-08 Thread Jennifer LaVoie
here is the complete error I get org.jasig.cas.client.validation.TicketValidationException: org.opensaml.SAMLException: Ticket 'ST-68-Ym0B6A15gcil-QfPnLUps5D8Zt8-cas3-test' does not match supplied service. The original service was 'https://travel-test.host.edu:4443/tvlexp/index.htm;GLMSSESSION

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-07 Thread Alberto Cabello Sánchez
On Tue, 8 Jan 2019 00:50:10 + Ray Bon wrote: > Jen, > > The ST is being validated against a URL with GLMSSESSIONID... but > this was not present with the log in request (the 2 need to match). > Change the CAS client to not send GLMS... or send it with the log > in request. > > Or maybe chang

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-07 Thread Jennifer LaVoie
i tried to fiddle with the service url, but no luck...But thank you so much I have two apps acting strangely driving me crazy LOL On Monday, January 7, 2019 at 7:50:15 PM UTC-5, rbon wrote: > > Jen, > > The ST is being validated against a URL with GLMSSESSIONID... but this was > not present wit

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-07 Thread Jennifer LaVoie
how do I configure my as server not not send GLMSSESSIONID? On Monday, January 7, 2019 at 7:50:15 PM UTC-5, rbon wrote: > > Jen, > > The ST is being validated against a URL with GLMSSESSIONID... but this was > not present with the log in request (the 2 need to match). > Change the CAS client to

Re: [cas-user] Error 500 after authentication - service fails to authorize me

2019-01-07 Thread Ray Bon
Jen, The ST is being validated against a URL with GLMSSESSIONID... but this was not present with the log in request (the 2 need to match). Change the CAS client to not send GLMS... or send it with the log in request. Or maybe change the service registry id to something like https://travel.host.c