[cas-dev] Java CAS client and error 500 when validating ticket

[Matthieu MARC]

Hi all,

I am playing with Java CAS client in a J2EE web application (with tomcat).

I am using the basic CASFilter configuration 
(http://www.ja-sig.org/products/cas/client/javaclient/index.html)

It is working well, user is authenticated against CAS server, and I can 
retreive his username from session.

But :-)

I am using eclipse for developing, and when I change a class, tomcat is 
restarting. It is not a problem for me but when I refresh my web browser 
which pointed to my web application, I get an error 500.

example url : http://dev.com/page?ticket=xxxxxx

and the error is :

avax.servlet.ServletException: edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://cas-b.ensam.eu/cas/serviceValidate] ticket=[ST-95-ma7fcuthRZYjiXFm65we-cas] service=[http%3A%2F%2Flocalhost%3A8080%2Fholidays%2FdoLogin.action] errorCode=[INVALID_TICKET] errorMessage=[le ticket 'ST-95-ma7fcuthRZYjiXFm65we-cas' est inconnu] renew=false entireResponse=[<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
	<cas:authenticationFailure code='INVALID_TICKET'>
		le ticket &#039;ST-95-ma7fcuthRZYjiXFm65we-cas&#039; est inconnu
	</cas:authenticationFailure>
</cas:serviceResponse>


I read on a forum that the problem is maybe because It is trying to 
validate the ticket twice.

My question is :  what to do to not have this error page ? must I catch 
the exception (how?) and destroy the ticket ? must I catch the exception 
and redirect the user to CAS server to authenticate again ?

Cordialy,

Matthieu MARC

-- 
Matthieu MARC
matthieu.marc at angers.ensam.fr