Unable to validate ProxyTicketValidator

[Oscar Javier Gómez Reina]

Hi Andrew,

I did this using keytool however the exception persist.

The server 2 is a Websphere Application server.




-----Mensaje original-----
De: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] En nombre de Andrew Petro
Enviado el: Martes, 04 de Julio de 2006 03:19 p.m.
Para: 'Yale CAS mailing list'
Asunto: RE: Unable to validate ProxyTicketValidator 

Oscar,

This almost always ends up being a certificate trust issue.  Server2's JVM
needs to trust the SSL cert used by server1.  If server1 is not using an
expensive commercial inherently trusted cert (e.g., a verisign cert), then
you need to install the server1's cert's public key into the server2's JVM's
keystore.

Search this list's archives for many prior discussions of this issue and
there are also resources on the CAS website and wiki.

If it's not a certificate trust issue, I'd be happy to discuss and help
further, but please follow up with those resources and verify that that is
not the problem first.

Thanks,

Andrew

________________________________________
From: cas-bounces at tp.its.yale.edu [mailto:cas-bounces at tp.its.yale.edu] On
Behalf Of Oscar Javier Gómez Reina
Sent: Tuesday, July 04, 2006 10:15 AM
To: cas at tp.its.yale.edu
Subject: Unable to validate ProxyTicketValidator 

Hi, I Installed Cas in my Tomcat server (server1) and authentication is ok.
Now, I deploy a client application in another server (server2), I added the
cas filter in web.xml and refer to server1, I open in the browser the
application and it redirect to login page an authentication with cas is ok,
however when the authentication finish and redirect back (server2) throws
me:
Error 500: Unable to validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
[edu.yale.its.tp.cas.client.ServiceTicketValidator
casValidateUrl=[https://oscarg:8443/cas/proxyValidate]
ticket=[ST-4-kl1bLQ17zdmNSihUiSHHLyRUF4Eb67rIkef-20]
service=[http%3A%2F%2Fsuperwas%2Fvirtuales%2Festados%2FestadosPendientes.do]
renew=false]]]
What I must do?
Regadrs,
Oscar
oscarg at supersociedades.gov.co

 


_______________________________________________
Yale CAS mailing list
cas at tp.its.yale.edu
http://tp.its.yale.edu/mailman/listinfo/cas


********************AVISO LEGAL********************
Este mensaje electrónico y cualquier archivo anexo al mismo, contiene información de carácter confidencial y legalmente protegida, exclusivamente dirigida a su destinatario o destinatarios. Si usted ha recibido este mensaje por error, se solicita informar inmediatamente a la dirección electrónica del remitente y borrar de su sistema el mensaje, así como todas las copias que haya realizado. Si usted no es el destinatario, queda prohibida su divulgación, retención, difusión, copia o distribución a terceros sin la previa autorización expresa y escrita del remitente de la Superintendencia de Sociedades