[long] various problems with demo installation (casServerUrlPrefix, parsing error, PKIX)

Bergmann Gábor zerobaba at gmail.com
Thu Mar 6 10:42:51 EST 2008


Hi!

> We'll be fixing the Cas10TicketValidator but we actually recommend you 
> use the more recent Cas20 Ticket Validation Filters.

Thank you very much, this solved the problem.

> As for your certificate issue, if you're sure you've added the 
> appropriate certs to the keystores I would next suggest just double 
> checking that you're using the right JVM (I've seen people add it to one 
> JVM cacerts file and then start up Tomcat with another...I've done it 
> myself once or twice ;-)).

For those who are interesed: I overestimated my knowledge of Glassfish. It turned out that GF maintains a separate cacerts store for its domains, and does not 
consult the one by the jre.

----

Some other issues:

1. Some of the image files of the CAS webapp in the "cas-server-3.2-release.tar.gz" distribution are corrupt. They can be recovered from the prebuilt .war file, 
though.

2. While the PKIX problem on compB was still unresolved, the Cas20 filter threw a "CAS Server returned no response" exception, hiding the PKIX exception (even 
from log files!). If it is easy to make this error indication more verbose or to-the-point, please do so, for the sake of future generations :)


Thanks and keep up with the nice work,
Gábor



More information about the cas mailing list