Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]

[Laurent Gougis]

Hi,

I have the same problem a few days ago...

The problem is probably due to the fact that Tomcat does not trust your 
Cas server certificate.

What I have done :

1)  keytool -import -v -trustcacerts -alias cas -noprompt -file 
certif-cas.cert -keystore trust-certif.keystore -storepass xxx
cas = alias of the cas server certificate
certif-cas.cert = certificat cas généré via keytool -genkey...

2) export JAVA_OPTS="$JAVA_OPTS 
-Djavax.net.ssl.trustStore=/usr/local/cert/trust-certif.keystore 
-Djavax.net.ssl.trustStorePassword=xxx"

Hope this will help you...






Uche Mbanaso a écrit :
> Hi,
>   Any help with this error
> ype Exception report
>
> message
>
> description The server encountered an internal error () that prevented it from
> fulfilling this request.
>
> exception
>
> javax.servlet.ServletException: Unable to validate ProxyTicketValidator
> [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
> [edu.yale.its.tp.cas.client.ServiceTicketValidator
> casValidateUrl=[https://sips.iris.salford.ac.uk/cas/serviceValidate]
> ticket=[ST-6-AtocpUH4FOT6HsFpISobGR0McnoUjpiTSZ9-20]
> service=[https%3A%2F%2Fsips.iris.salford.ac.uk%2Fshibboleth-idp%2FSSO%3Fshire%3Dhttp%253A%252F%252Fwww.sp.sips.iris.salford.ac.uk%252FShibboleth.sso%252FSAML%252FArtifact%26time%3D1152537160%26target%3Dcookie%26providerId%3Dhttps%253A%252F%252Fsp.sips.iris.salford.ac.uk]
> renew=false]]]
> 	edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:381)
>
> root cause
>
> edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate
> ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator
> proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator
> casValidateUrl=[https://sips.iris.salford.ac.uk/cas/serviceValidate]
> ticket=[ST-6-AtocpUH4FOT6HsFpISobGR0McnoUjpiTSZ9-20]
> service=[https%3A%2F%2Fsips.iris.salford.ac.uk%2Fshibboleth-idp%2FSSO%3Fshire%3Dhttp%253A%252F%252Fwww.sp.sips.iris.salford.ac.uk%252FShibboleth.sso%252FSAML%252FArtifact%26time%3D1152537160%26target%3Dcookie%26providerId%3Dhttps%253A%252F%252Fsp.sips.iris.salford.ac.uk]
> renew=false]]]
> 	edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:52)
> 	edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:455)
> 	edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
>
> note The full stack trace of the root cause is available in the Apache
> Tomcat/5.5.17 logs.
>