HELP Needed urgently- CAS no longer authenticating for prod server after server move

Serge Bianda serge.bianda at appian.com
Tue Nov 20 23:56:57 EST 2007


We had a power outage in our building, so we decided to move our servers
offsite (Kerberos server (AD)and CAS Server as well). We changed IP
addresses and updated all DNS entries, however when we try to log into
the site that used to be authenticated by CAS, we get the following
error: 

------------------------------------------------------------------------
-
HTTP Status 500 -

type Exception report

message

description The server encountered an internal error () that prevented
it from fulfilling this request.

exception

javax.servlet.ServletException: Unable to validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
[edu.yale.its.tp.cas.client.ServiceTicketValidator
casValidateUrl=[https://login.domainname.com/cas/serviceValidate]
ticket=[ST-48-sKW5zzvf0SMiXRGNnqdu]
service=[https%3A%2F%2Fintranet.domainname.com%2Fsuite%2Fportal%2Fssodet
ect.do] renew=false]]]
	
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:381)
	
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilte
r.java:81)

root cause

edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to
validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
[edu.yale.its.tp.cas.client.ServiceTicketValidator
casValidateUrl=[https://login.domainname.com/cas/serviceValidate]
ticket=[ST-48-sKW5zzvf0SMiXRGNnqdu]
service=[https%3A%2F%2Fintranet.domainname.com%2Fsuite%2Fportal%2Fssodet
ect.do] renew=false]]]
	
edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:52)
	
edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilt
er.java:455)
	
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
	
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilte
r.java:81)

note The full stack trace of the root cause is available in the Apache
Tomcat/5.5.9 logs.
------------------------------------------
We're still on 2.0.12 with CAS and it's been working fine until the
move, we had planned on upgrading, but now is not the time to focus on
upgrade, we need the site up first.

Thanks


Serge


More information about the cas mailing list