ProxyTicketValidator problem

Ken Fook kenfook at hsbc.com.sg
Tue Mar 13 06:42:16 EDT 2007 

Scott Battaglia <scott.battaglia at ...> writes:

> 
> 
> Is the server trying to do the callback allowed to contact the CAS server? 
(i.e. are there any settings that would prevent it?)
> 
> On 2/14/07, Ken Fook <
> kenfook at hsbc.com.sg> wrote:Hi,I am using CAS 
> 1.2 and I am getting aedu.yale.its.tp.cas.client.CASAuthenticationException 
when trying to validateProxyTicketValidator. I have printed out the stacktrace 
and it is due tojava.net.ConnectException: Operation timed out.
> Basically, CAS server has successfully validated the login id and password 
andhas forwarded to the application X which, in turn, request server 
validationand it is at this point that it failed. Anyone knows why it is 
throwing a
> java.net.ConnectException: Operation timed out? I could not come across 
asimilar problem...[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     R 
java.net.ConnectException:Operation timed out: connect
> [2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atjava.net.PlainSocketImpl.socketConnect(Native Method)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atjava.net.PlainSocketImpl.doConnect(PlainSocketImpl.java
> :345)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atjava.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:157)
[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atjava.net.PlainSocketImpl.connect
> (PlainSocketImpl.java:144)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atjava.net.Socket.<init>(Socket.java:294)[2/9/07 14:02:15:997 CST] 
30a341a7 SystemErr     R      atjava.net.Socket.<init>(
> Socket.java:121)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.jsse.bu.<init>(Unknown Source)[2/9/07 14:02:15:997 CST] 
30a341a7 SystemErr     R      atcom.ibm.jsse.JSSESocketFactory.createSocket
> (Unknown Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.https.b.b(Unknown Source)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.http.cb.a
> (Unknown Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.http.cb.p(Unknown Source)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.https.b
> .<init>(Unknown Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.https.b.a(Unknown Source)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.https.b.a
> (Unknown Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.https.b.a(Unknown Source)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.https.q.c
> (Unknown Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.https.q.connect(Unknown Source)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.www.protocol.http.ci.getInputStream
> (Unknown Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.net.ssl.internal.www.protocol.https.HttpsURLConnection.getInpu
tStream(Unknown Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at
> edu.yale.its.tp.cas.util.SecureURL.retrieve(Unknown Source)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atedu.yale.its.tp.cas.client.ServiceTicketValidator.validate(Unknown 
Source)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     R      at
> edu.yale.its.tp.cas.client.CASReceipt.getReceipt(Unknown Source)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      atedu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser
(UnknownSource)
> [2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atedu.yale.its.tp.cas.client.filter.CASFilter.doFilter(Unknown Source)
[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter
> (FilterInstanceWrapper.java:132)[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      atcom.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter
(WebAppFilterChain.java:71)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at
> com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch
(WebAppRequestDispatcher.java:1138)[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      atcom.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.dispatch
> (WebAppRequestDispatcher.java:643)[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      atcom.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.forward
(WebAppRequestDispatcher.java:207)[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     R      at
> com.ibm.ws.webcontainer.srt.WebAppInvoker.doForward(WebAppInvoker.java:80)
[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.ws.webcontainer.srt.WebAppInvoker.handleInvocationHook
(WebAppInvoker.java
> :223)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.ws.webcontainer.cache.invocation.CachedInvocation.handleInvoca
tion(CachedInvocation.java:71)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at
> com.ibm.ws.webcontainer.srp.ServletRequestProcessor.dispatchByURI
(ServletRequestProcessor.java:222)[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      atcom.ibm.ws.webcontainer.oselistener.OSEListenerDispatcher.service
> (OSEListener.java:334)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.ws.webcontainer.http.HttpConnection.handleRequest
(HttpConnection.java:56)[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at
> com.ibm.ws.http.HttpConnection.readAndHandleRequest(HttpConnection.java:622)
[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      atcom.ibm.ws.http.HttpConnection.run(HttpConnection.java:447)[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     R      at
> com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:681)
_______________________________________________Yale CAS mailing listcas-
c5E7yoNEsvRIM2btvs0Z1A at public.gmane.org
> http://tp.its.yale.edu/mailman/listinfo/cas
> 
> 
> 
> 
> 
> <div>
> <p>Is the server trying to do the callback allowed to contact the CAS 
server? (i.e. are there any settings that would prevent it?)<br><br></p>
> <div>
> <span class="gmail_quote">On 2/14/07, Ken Fook <
> <a href="mailto:kenfook at ...">kenfook at ...</a>> wrote:</span><blockquote 
class="gmail_quote">Hi,<br><br>I am using CAS 
> 1.2 and I am getting 
a<br>edu.yale.its.tp.cas.client.CASAuthenticationException when trying to 
validate<br>ProxyTicketValidator. I have printed out the stacktrace and it is 
due to<br>java.net.ConnectException: Operation timed out.
> <br><br>Basically, CAS server has successfully validated the login id and 
password and<br>has forwarded to the application X which, in turn, request 
server validation<br>and it is at this point that it failed. Anyone knows why 
it is throwing a
> <br>java.net.ConnectException: Operation timed out? I could not come across 
a<br>similar problem...<br><br><br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     R java.net.ConnectException:<br>Operation 
timed out: connect<br>
> [2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at<br>java.net.PlainSocketImpl.socketConne
ct(Native Method)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>java.net.PlainSocketImpl.doConnect
(PlainSocketImpl.java
> :345)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>java.net.PlainSocketImpl.connectToAd
dress(PlainSocketImpl.java:157)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>java.net.PlainSocketImpl.connect
> (PlainSocketImpl.java:144)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>java.net.Socket.<init>
(Socket.java:294)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>java.net.Socket.<init>(
> Socket.java:121)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.jsse.bu.<init>
(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.jsse.JSSESocketFactory.creat
eSocket
> (Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.https.b
.b(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.http.cb
.a
> (Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.http.cb
.p(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.https.b
> .<init>(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.https.b
.a(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.https.b
.a
> (Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.https.b
.a(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.https.q
.c
> (Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.https.q
.connect(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.www.protocol.http.ci
.getInputStream
> (Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.net.ssl.internal.www.protoco
l.https.HttpsURLConnection.getInputStream<br>(Unknown Source)<br>[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      at
> <br>edu.yale.its.tp.cas.util.SecureURL.retrieve(Unknown Source)<br>[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      at<br>edu.yale.its.tp.cas.client.ServiceTi
cketValidator.validate(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     R      at
> <br>edu.yale.its.tp.cas.client.CASReceipt.getReceipt(Unknown Source)<br>
[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at<br>edu.yale.its.tp.cas.client.filter.CA
SFilter.getAuthenticatedUser(Unknown<br>Source)<br>
> [2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at<br>edu.yale.its.tp.cas.client.filter.CA
SFilter.doFilter(Unknown Source)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.filter.Filte
rInstanceWrapper.doFilter
> <br>(FilterInstanceWrapper.java:132)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.filter.WebAp
pFilterChain.doFilter<br>(WebAppFilterChain.java:71)<br>[2/9/07 14:02:15:997 
CST] 30a341a7 SystemErr     
R      at
> 
<br>com.ibm.ws.webcontainer.webapp.WebAppRequestDispatcher.handleWebAppDispatch
<br>(WebAppRequestDispatcher.java:1138)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.webapp.WebAp
pRequestDispatcher.dispatch
> <br>(WebAppRequestDispatcher.java:643)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.webapp.WebAp
pRequestDispatcher.forward<br>(WebAppRequestDispatcher.java:207)<br>[2/9/07 
14:02:15:997 CST] 30a341a7 SystemErr     
R      at
> <br>com.ibm.ws.webcontainer.srt.WebAppInvoker.doForward
(WebAppInvoker.java:80)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.srt.WebAppIn
voker.handleInvocationHook<br>(WebAppInvoker.java
> :223)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.cache.invoca
tion.CachedInvocation.handleInvocation<br>(CachedInvocation.java:71)<br>
[2/9/07 14:02:15:997 CST] 30a341a7 SystemErr     
R      at
> <br>com.ibm.ws.webcontainer.srp.ServletRequestProcessor.dispatchByURI<br>
(ServletRequestProcessor.java:222)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.oselistener.
OSEListenerDispatcher.service
> <br>(OSEListener.java:334)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.webcontainer.http.HttpCon
nection.handleRequest<br>(HttpConnection.java:56)<br>[2/9/07 14:02:15:997 CST] 
30a341a7 SystemErr     
R      at
> <br>com.ibm.ws.http.HttpConnection.readAndHandleRequest
(HttpConnection.java:622)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     
R      at<br>com.ibm.ws.http.HttpConnection.run
(HttpConnection.java:447)<br>[2/9/07 14:02:15:997 CST] 30a341a7 
SystemErr     R      at
> <br>com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:681)
<br><br><br><br>_______________________________________________<br>Yale CAS 
mailing list<br><a href="mailto:cas at ...">cas at ...</a><br><a 
href="http://tp.its.yale.edu/mailman/listinfo/cas">
> http://tp.its.yale.edu/mailman/listinfo/cas</a><br>
> </blockquote>
> </div>
> <br>
> </div>
> 

Hi Scott, 

We thought that it could be a firewall issue, and so we have opened a port to 
allow the Websphere server to connect to the IBM Http Server. 
Besides the firewall isssue, can you please advise us on any other settings to 
consider to troubleshoot this problem?

Thanks,
Ken

More information about the cas mailing list