ProxyTicketReceptor.getProxyTicket provides ST

[Scott Battaglia]

If you are using CAS 3, CAS 3 will return a ST (in fact CAS 3 has no PTs and
the specification says it can return either ST or PT).  phpCAS recently
released an update that can correctly handle the scenario where a ticket is
given to it with an ST:

http://www.ja-sig.org/products/cas/announcements/index.html#ann1

-Scott

On 1/24/07, Arno <acogoluegnes at sqli.com> wrote:
>
>
> Hi all,
>
> I've been trying to use the CAS proxy mode with Liferay Portal, so that a
> portlet can use the portal to authenticate a CAS protected service. I set
> the ProxyTicketReceptor servlet in the web.xml. This works great if the
> protected service is for example a Java Web application, protected with
> the
> CAS filter.
>
> Nevertheless, I noticed the ticket provided by the
> ProxyTicketReceptor.getProxyTicket method (which I'm using in the portlet)
> begins with ST. I thought this ticket would be a proxy ticket and so would
> begin by PT. I then encountered problems if my protected services is for
> example a PHP application, using the PHP CAS API. I get the following
> error:
>
> <cas:authenticationFailure code='INVALID_TICKET'>
>                 Ticket failed validation specification. Possible errors
> could include
> attempting to validate a Proxy Ticket via a Service Ticket validator, or
> not
> complying with the renew true request.
> </cas:authenticationFailure>
>
> It seems the PHP CAS client tries to validate the ticket as a service
> ticket, but notices that it does not fit. The result is that the
> authentication fails.
>
> Does anyone know if I'm misusing the ProxyTicketReceptor servlet, as it
> does
> not generate a proxy ticket?
>
> Thanks all.
> --
> View this message in context:
> http://www.nabble.com/ProxyTicketReceptor.getProxyTicket-provides-ST-tf3080322.html#a8558333
> Sent from the CAS Users mailing list archive at Nabble.com.
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20070124/49a1b21d/attachment.html