[cas-dev] Problems with Tomcat 5.5 and localhost applications / No problems with Tomcat 5.0
Imanol Apaolaza Sanz
iapaolaza at unav.es
Thu Oct 5 03:52:58 EDT 2006
our main developer uses 5.5.16.
He'll try with 5.5.15 and 5.5.17. I'll redirect the test result.
Regards
Scott Battaglia escribió:
> Which version of Tomcat 5.5 are you using? Tomcat 5.5.16 made a
> change to how they handle querystring that was changed back in 5.5.17.
>
> -Scott
>
> On 10/4/06, * Imanol Apaolaza Sanz* <iapaolaza at unav.es
> <mailto:iapaolaza at unav.es>> wrote:
>
> Hello,
>
> We are setting up a test enviromment to develop with CAS
> between our
> CAS server and the localhost of each developer. The cacerts file is
> properly set up (in other client applications hosted in other
> Applications Servers works OK)
>
> web.xml of CAS-ified application:
>
> <filter>
> <filter-name>CAS Filter</filter-name>
>
> <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter
> </filter-class>
> <init-param>
>
> <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
> <param-value>https://www.unav.es/cas-pruebas/login
> <https://www.unav.es/cas-pruebas/login></param-value>
> </init-param>
> <init-param>
>
> <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
>
> <param-value>
> https://www.unav.es/cas-pruebas/serviceValidate</param-value>
> </init-param>
> * <init-param>
>
> <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
> <param-value>localhost:8080</param-value>
> </init-param>*
> </filter>
>
>
> If we use:
>
> *<init-param>
> <param-name>edu.yale.its.tp.cas.client.filter.serviceUrl
> </param-name>
>
> <param-value>http://localhost:8080/CASTest/Hello.html</param-value>
> </init-param>*
>
> istead of:
>
> *<init-param>
>
> <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
>
> <param-value>https://www.unav.es/cas-pruebas/serviceValidate
> <https://www.unav.es/cas-pruebas/serviceValidate></param-value>
> </init-param>*
>
> it works. but we need
> edu.yale.its.tp.cas.client.filter.serverName.
>
> The problem is that if CAS server is in a Tomcat 5.5 + jdk
> 1.5, the
> localhost application crashes like this. this problem doesn't
> occurr in
> Tomcat 5.0.
>
> Could anyone help me?
>
> *type* Informe de Excepción
>
> *mensaje*
>
> *descripción* _El servidor encontró un error interno () que hizo
> que no
> pudiera rellenar este requerimiento._
>
> *excepción*
>
> javax.servlet.ServletException: Unable to validate
> ProxyTicketValidator
> [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
> [edu.yale.its.tp.cas.client.ServiceTicketValidator
> casValidateUrl=[ https://www.unav.es/cas-pruebas/serviceValidate]
> ticket=[ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20]
> service=[http%3A%2F%2Flocalhost%3A8080%2FCASTest%2FHello.html]
> errorCode=[INVALID_SERVICE] errorMessage=[ticket
> 'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not match supplied
> service] renew=false entireResponse=[<cas:serviceResponse
> xmlns:cas=' http://www.yale.edu/tp/cas'
> <http://www.yale.edu/tp/cas%27>>
> <cas:authenticationFailure code='INVALID_SERVICE'>
> ticket 'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not
> match supplied service
> </cas:authenticationFailure>
> </cas:serviceResponse>
> ]]]]
> edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:381)
>
>
> *causa raíz*
>
> edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to
> validate ProxyTicketValidator
> [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
> [edu.yale.its.tp.cas.client.ServiceTicketValidator
> casValidateUrl=[https://www.unav.es/cas-pruebas/serviceValidate
> <https://www.unav.es/cas-pruebas/serviceValidate>]
> ticket=[ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20]
> service=[http%3A%2F%2Flocalhost%3A8080%2FCASTest%2FHello.html]
> errorCode=[INVALID_SERVICE] errorMessage=[ticket
> 'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not match supplied
> service] renew=false entireResponse=[<cas:serviceResponse
> xmlns:cas='http://www.yale.edu/tp/cas'
> <http://www.yale.edu/tp/cas%27>>
> <cas:authenticationFailure code='INVALID_SERVICE'>
> ticket 'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not
> match supplied service
> </cas:authenticationFailure>
> </cas:serviceResponse>
> ]]]]
> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:62)
> edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser
> (CASFilter.java:455)
>
> edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
>
>
>
>
> Con jdk1.5 y Tomcat 5.5 NO funciona
>
> --
>
> Imanol Apaolaza Sanz
> Servicios Informáticos (área sistemas)
> Universidad de Navarra
> Tel. 948425600 +2810
> http://www.unav.es/SI/
> JabberID: iapaolaza at icaro.cti.unav.es
> <mailto:iapaolaza at icaro.cti.unav.es>
>
> Para la atención de problemas o consultas que tengan que ver con
> los servicios
> informáticos, diríjase al 2992 o haga un parte a través de:
> http://www.unav.es/net/at.html.
>
>
>
> _______________________________________________
> cas-dev mailing list
> cas-dev at tp.its.yale.edu <mailto:cas-dev at tp.its.yale.edu>
> http://tp.its.yale.edu/mailman/listinfo/cas-dev
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> cas-dev mailing list
> cas-dev at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas-dev
>
--
Imanol Apaolaza Sanz
Servicios Informáticos (área sistemas)
Universidad de Navarra
Tel. 948425600 +2810
http://www.unav.es/SI/
JabberID: iapaolaza at icaro.cti.unav.es
Para la atención de problemas o consultas que tengan que ver con los servicios
informáticos, diríjase al 2992 o haga un parte a través de: http://www.unav.es/net/at.html.
More information about the cas-dev
mailing list