HELP Needed urgently- CAS no longer authenticating for prod server after server move
Serge Bianda
serge.bianda at appian.com
Tue Nov 20 23:56:57 EST 2007
We had a power outage in our building, so we decided to move our servers
offsite (Kerberos server (AD)and CAS Server as well). We changed IP
addresses and updated all DNS entries, however when we try to log into
the site that used to be authenticated by CAS, we get the following
error:
------------------------------------------------------------------------
-
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented
it from fulfilling this request.
exception
javax.servlet.ServletException: Unable to validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
[edu.yale.its.tp.cas.client.ServiceTicketValidator
casValidateUrl=[https://login.domainname.com/cas/serviceValidate]
ticket=[ST-48-sKW5zzvf0SMiXRGNnqdu]
service=[https%3A%2F%2Fintranet.domainname.com%2Fsuite%2Fportal%2Fssodet
ect.do] renew=false]]]
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:381)
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilte
r.java:81)
root cause
edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to
validate ProxyTicketValidator
[[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null]
[edu.yale.its.tp.cas.client.ServiceTicketValidator
casValidateUrl=[https://login.domainname.com/cas/serviceValidate]
ticket=[ST-48-sKW5zzvf0SMiXRGNnqdu]
service=[https%3A%2F%2Fintranet.domainname.com%2Fsuite%2Fportal%2Fssodet
ect.do] renew=false]]]
edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:52)
edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilt
er.java:455)
edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilte
r.java:81)
note The full stack trace of the root cause is available in the Apache
Tomcat/5.5.9 logs.
------------------------------------------
We're still on 2.0.12 with CAS and it's been working fine until the
move, we had planned on upgrading, but now is not the time to focus on
upgrade, we need the site up first.
Thanks
Serge
More information about the cas
mailing list