Invalid Service Response

Scott Battaglia scott.battaglia at gmail.com
Thu Oct 4 17:52:36 EDT 2007 

Bob,

It looks like it tried to make a proxy granting ticket for
https://drupal.uoregon.edu/ but was unable to (adding logging for the
HttpBasedAuthenticationHandler might narrow down the reason.

-Scott

On 10/4/07, Bob Rotsted <rrotsted at uoregon.edu> wrote:
>
> Hi all,
> I am using Tomcat behind Apache with Apache2::AuthCAS for my services.
> As I understand it, in order to get CAS to authenticate correctly I must
> first import my CAS server's SSL certificate into the java keystore. As
> of now, I have imported my public ssl key into the java keystore with
> alias 'tomcat' yet I am still getting a "Invalid Service Response"
> error. This is what shows up in my cas.log when I try to authenticate:
>
> 2007-10-04 11:45:03,676 INFO
> [org.jasig.cas.authentication.AuthenticationManagerImpl] -
> AuthenticationHandler:
>
> org.jasig.cas.adaptors.radius.authentication.handler.support.RadiusAuthenticationHandler
> successfully authenticated the user which provided the following
> credentials: rrotsted
> 2007-10-04 11:45:03,677 INFO
> [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service
> ticket [ST-5-GItdoxQZzuUR0PTfhhO3wy6FZzGXuesRA61-20] for service
> [https://drupal.uoregon.edu] for user [rrotsted]
> 2007-10-04 11:45:03,731 INFO
> [org.jasig.cas.authentication.AuthenticationManagerImpl] -
> AuthenticationHandler:
>
> org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler
> failed to authenticate the user which provided the following
> credentials: https://drupal.uoregon.edu/
> 2007-10-04 11:45:03,732 ERROR
> [org.jasig.cas.web.ServiceValidateController] - TicketException
> generating ticket for: https://drupal.uoregon.edu/
> org.jasig.cas.ticket.TicketCreationException:
> error.authentication.credentials.bad
>         at
>
> org.jasig.cas.CentralAuthenticationServiceImpl.delegateTicketGrantingTicket
> (CentralAuthenticationServiceImpl.java:271)
>         at
> org.jasig.cas.web.ServiceValidateController.handleRequestInternal(
> ServiceValidateController.java:124)
>         at
> org.springframework.web.servlet.mvc.AbstractController.handleRequest(
> AbstractController.java:153)
>         at
> org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(
> SimpleControllerHandlerAdapter.java:48)
>         at
> org.springframework.web.servlet.DispatcherServlet.doDispatch(
> DispatcherServlet.java:857)
>         at
> org.springframework.web.servlet.DispatcherServlet.doService(
> DispatcherServlet.java:792)
>         at
> org.springframework.web.servlet.FrameworkServlet.processRequest(
> FrameworkServlet.java:475)
>         at
> org.springframework.web.servlet.FrameworkServlet.doGet(
> FrameworkServlet.java:430)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:690)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
>         at
> org.jasig.cas.web.init.SafeDispatcherServlet.service(
> SafeDispatcherServlet.java:115)
>         at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(
> ApplicationFilterChain.java:269)
>         at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(
> ApplicationFilterChain.java:188)
>         at
> org.apache.catalina.core.StandardWrapperValve.invoke(
> StandardWrapperValve.java:213)
>         at
> org.apache.catalina.core.StandardContextValve.invoke(
> StandardContextValve.java:174)
>         at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java
> :127)
>         at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
> :117)
>         at
> org.apache.catalina.core.StandardEngineValve.invoke(
> StandardEngineValve.java:108)
>         at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java
> :151)
>         at
> org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)
>         at
> org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)
>         at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java
> :773)
>         at
> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java
> :703)
>         at
> org.apache.jk.common.ChannelSocket$SocketConnection.runIt(
> ChannelSocket.java:895)
>         at
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(
> ThreadPool.java:689)
>         at java.lang.Thread.run(Thread.java:619)
> Caused by: error.authentication.credentials.bad
>         at
> org.jasig.cas.authentication.handler.BadCredentialsAuthenticationException
> .<clinit>(BadCredentialsAuthenticationException.java:25)
>         at
> org.jasig.cas.authentication.AuthenticationManagerImpl.authenticate(
> AuthenticationManagerImpl.java:108)
>         at
> org.jasig.cas.CentralAuthenticationServiceImpl.createTicketGrantingTicket(
> CentralAuthenticationServiceImpl.java:383)
>         at
> org.jasig.cas.web.flow.AuthenticationViaFormAction.submit(
> AuthenticationViaFormAction.java:107)
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java
> :39)
>         at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:25)
>         at java.lang.reflect.Method.invoke(Method.java:597)
>         at
> org.springframework.webflow.util.DispatchMethodInvoker.invoke(
> DispatchMethodInvoker.java:103)
>         at
> org.springframework.webflow.action.MultiAction.doExecute(MultiAction.java
> :136)
>         at
> org.springframework.webflow.action.AbstractAction.execute(
> AbstractAction.java:203)
>         at
> org.springframework.webflow.engine.AnnotatedAction.execute(
> AnnotatedAction.java:142)
>         at
> org.springframework.webflow.engine.ActionExecutor.execute(
> ActionExecutor.java:61)
>         at
> org.springframework.webflow.engine.ActionState.doEnter(ActionState.java
> :180)
>         at org.springframework.webflow.engine.State.enter(State.java:200)
>         at
> org.springframework.webflow.engine.Transition.execute(Transition.java:229)
>         at
> org.springframework.webflow.engine.TransitionableState.onEvent(
> TransitionableState.java:112)
>         at org.springframework.webflow.engine.Flow.onEvent(Flow.java:572)
>         at
>
> org.springframework.webflow.engine.impl.RequestControlContextImpl.signalEvent
> (RequestControlContextImpl.java:208)
>         at
> org.springframework.webflow.engine.ActionState.doEnter(ActionState.java
> :185)
>         at org.springframework.webflow.engine.State.enter(State.java:200)
>         at
> org.springframework.webflow.engine.Transition.execute(Transition.java:229)
>         at
> org.springframework.webflow.engine.TransitionableState.onEvent(
> TransitionableState.java:112)
>         at org.springframework.webflow.engine.Flow.onEvent(Flow.java:572)
>         at
>
> org.springframework.webflow.engine.impl.RequestControlContextImpl.signalEvent
> (RequestControlContextImpl.java:208)
>         at
> org.springframework.webflow.engine.impl.FlowExecutionImpl.signalEvent(
> FlowExecutionImpl.java:214)
>         at
> org.springframework.webflow.executor.FlowExecutorImpl.resume(
> FlowExecutorImpl.java:245)
>         at
>
> org.springframework.webflow.executor.support.FlowRequestHandler.handleFlowRequest
> (FlowRequestHandler.java:115)
>         at
>
> org.springframework.webflow.executor.mvc.FlowController.handleRequestInternal
> (FlowController.java:172)
>         at
> org.springframework.web.servlet.mvc.AbstractController.handleRequest(
> AbstractController.java:153)
>         at
> org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(
> SimpleControllerHandlerAdapter.java:48)
>         at
> org.springframework.web.servlet.DispatcherServlet.doDispatch(
> DispatcherServlet.java:857)
>         at
> org.springframework.web.servlet.DispatcherServlet.doService(
> DispatcherServlet.java:792)
>         at
> org.springframework.web.servlet.FrameworkServlet.processRequest(
> FrameworkServlet.java:475)
>         at
> org.springframework.web.servlet.FrameworkServlet.doPost(
> FrameworkServlet.java:440)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
>         ... 17 more
>
> Any suggestions would be greatly appreciated!
>
> Thanks,
> Bob Rotsted
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>



-- 
-Scott Battaglia

LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20071004/530f8e92/attachment-0001.html

More information about the cas mailing list