[cas-dev] Problems with Tomcat 5.5 and localhost applications / No problems with Tomcat 5.0

Imanol Apaolaza Sanz iapaolaza at unav.es
Thu Oct 5 05:14:44 EDT 2006


the problem disappears with another version (5.5.15, 5.5.17, 5.5.20 ...)

only occurrs with 5.5.16

thank you very much.

Imanol Apaolaza Sanz escribió:
> our main developer uses 5.5.16.
>
>     He'll try with 5.5.15 and 5.5.17. I'll redirect the test result.
>
> Regards
>
> Scott Battaglia escribió:
>   
>> Which version of Tomcat 5.5 are you using?  Tomcat 5.5.16 made a 
>> change to how they handle querystring that was changed back in 5.5.17.
>>
>> -Scott
>>
>> On 10/4/06, * Imanol Apaolaza Sanz* <iapaolaza at unav.es 
>> <mailto:iapaolaza at unav.es>> wrote:
>>
>>     Hello,
>>
>>         We are setting up a test enviromment to develop with CAS
>>     between our
>>     CAS server and the localhost of each developer. The cacerts file is
>>     properly set up (in other client applications hosted in other
>>     Applications Servers works OK)
>>
>>     web.xml of CAS-ified application:
>>
>>     <filter>
>>                     <filter-name>CAS Filter</filter-name>
>>
>>     <filter-class>edu.yale.its.tp.cas.client.filter.CASFilter
>>     </filter-class>
>>         <init-param>
>>           
>>     <param-name>edu.yale.its.tp.cas.client.filter.loginUrl</param-name>
>>            <param-value>https://www.unav.es/cas-pruebas/login
>>     <https://www.unav.es/cas-pruebas/login></param-value>
>>         </init-param>
>>         <init-param>
>>
>>     <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
>>
>>     <param-value>
>>     https://www.unav.es/cas-pruebas/serviceValidate</param-value>
>>         </init-param>
>>     *    <init-param>
>>           
>>     <param-name>edu.yale.its.tp.cas.client.filter.serverName</param-name>
>>            <param-value>localhost:8080</param-value>
>>         </init-param>*
>>             </filter>
>>
>>
>>         If we use:
>>
>>         *<init-param>
>>            <param-name>edu.yale.its.tp.cas.client.filter.serviceUrl
>>     </param-name>
>>           
>>     <param-value>http://localhost:8080/CASTest/Hello.html</param-value>
>>         </init-param>*
>>
>>     istead of:
>>
>>          *<init-param>
>>
>>     <param-name>edu.yale.its.tp.cas.client.filter.validateUrl</param-name>
>>
>>     <param-value>https://www.unav.es/cas-pruebas/serviceValidate
>>     <https://www.unav.es/cas-pruebas/serviceValidate></param-value>
>>         </init-param>*
>>
>>         it works. but we need
>>     edu.yale.its.tp.cas.client.filter.serverName.
>>
>>         The problem is that if CAS server is in a Tomcat 5.5 + jdk
>>     1.5, the
>>     localhost application crashes like this. this problem doesn't
>>     occurr in
>>     Tomcat 5.0.
>>
>>     Could anyone help me?
>>
>>     *type* Informe de Excepción
>>
>>     *mensaje*
>>
>>     *descripción* _El servidor encontró un error interno () que hizo
>>     que no
>>     pudiera rellenar este requerimiento._
>>
>>     *excepción*
>>
>>     javax.servlet.ServletException: Unable to validate
>>     ProxyTicketValidator
>>     [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
>>     [edu.yale.its.tp.cas.client.ServiceTicketValidator
>>     casValidateUrl=[ https://www.unav.es/cas-pruebas/serviceValidate]
>>     ticket=[ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20]
>>     service=[http%3A%2F%2Flocalhost%3A8080%2FCASTest%2FHello.html]
>>     errorCode=[INVALID_SERVICE] errorMessage=[ticket
>>     'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not match supplied
>>     service] renew=false entireResponse=[<cas:serviceResponse
>>     xmlns:cas=' http://www.yale.edu/tp/cas'
>>     <http://www.yale.edu/tp/cas%27>>
>>         <cas:authenticationFailure code='INVALID_SERVICE'>
>>             ticket 'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not
>>     match supplied service
>>         </cas:authenticationFailure>
>>     </cas:serviceResponse>
>>     ]]]]
>>         edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:381)
>>
>>
>>     *causa raíz*
>>
>>     edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to
>>     validate ProxyTicketValidator
>>     [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
>>     [edu.yale.its.tp.cas.client.ServiceTicketValidator
>>     casValidateUrl=[https://www.unav.es/cas-pruebas/serviceValidate
>>     <https://www.unav.es/cas-pruebas/serviceValidate>]
>>     ticket=[ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20]
>>     service=[http%3A%2F%2Flocalhost%3A8080%2FCASTest%2FHello.html]
>>     errorCode=[INVALID_SERVICE] errorMessage=[ticket
>>     'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not match supplied
>>     service] renew=false entireResponse=[<cas:serviceResponse
>>     xmlns:cas='http://www.yale.edu/tp/cas'
>>     <http://www.yale.edu/tp/cas%27>>
>>         <cas:authenticationFailure code='INVALID_SERVICE'>
>>             ticket 'ST-2-GHg0s0fT4fuF2lVmfArAiBvOIReRn4v9aef-20' does not
>>     match supplied service
>>         </cas:authenticationFailure>
>>     </cas:serviceResponse>
>>     ]]]]
>>         edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:62)
>>         edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser
>>     (CASFilter.java:455)
>>
>>         edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
>>
>>
>>
>>
>>     Con jdk1.5 y Tomcat 5.5 NO funciona
>>
>>     --
>>
>>     Imanol Apaolaza Sanz
>>     Servicios Informáticos (área sistemas)
>>     Universidad de Navarra
>>     Tel. 948425600 +2810
>>     http://www.unav.es/SI/
>>     JabberID: iapaolaza at icaro.cti.unav.es
>>     <mailto:iapaolaza at icaro.cti.unav.es>
>>
>>     Para la atención de problemas o consultas que tengan que ver con
>>     los servicios
>>     informáticos, diríjase al 2992 o haga un parte a través de:
>>     http://www.unav.es/net/at.html.
>>
>>
>>
>>     _______________________________________________
>>     cas-dev mailing list
>>     cas-dev at tp.its.yale.edu <mailto:cas-dev at tp.its.yale.edu>
>>     http://tp.its.yale.edu/mailman/listinfo/cas-dev
>>
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> cas-dev mailing list
>> cas-dev at tp.its.yale.edu
>> http://tp.its.yale.edu/mailman/listinfo/cas-dev
>>   
>>     
>
>   

-- 

Imanol Apaolaza Sanz
Servicios Informáticos (área sistemas)
Universidad de Navarra
Tel. 948425600 +2810
http://www.unav.es/SI/
JabberID: iapaolaza at icaro.cti.unav.es

Para la atención de problemas o consultas que tengan que ver con los servicios
informáticos, diríjase al 2992 o haga un parte a través de: http://www.unav.es/net/at.html.





More information about the cas-dev mailing list