CAS Client 3.1.1
Scott Battaglia
scott.battaglia at gmail.com
Fri Mar 7 14:15:50 EST 2008
This is wrong:
<context-param>
<param-name>serverName</param-name>
<param-value>http://Liferay-hostname:9090/c/portal/login<http://liferay-hostname:9090/c/portal/login></param-value>
</context-param>
You either need to merely supply the host name (http://Liferay-hostname:9090)
or change that to serviceUrl (you may want to double check that name, I
could be missing part of it).
Either way you're constructing a service url from the serverName which
already has most of your URL. If you look at the log there is a line in the
error log that says the service urls don't match.
-Scott
On Fri, Mar 7, 2008 at 11:48 AM, Teggo Lam <teggolam at gmail.com> wrote:
>
> Please someone can tell me how to configure the CAS Client 3.1.1 with
> Liferay:
>
> The content of my web.xml is:
>
> <context-param>
> <param-name>serverName</param-name>
> <param-value>http://Liferay-hostname:9090/c/portal/login</param-value>
>
> </context-param>
>
> <filter>
> <filter-name>CAS Single Sign Out Filter</filter-name>
> <filter-class>org.jasig.cas.client.session.SingleSignOutFilter
> </filter-class>
> </filter>
>
>
> <filter>
> <filter-name>CAS Authentication Filter</filter-name>
> <filter-class>com.liferay.portal.servlet.filters.sso.cas.CASFilter
> </filter-class>
> <filter-class>
> org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>
> <init-param>
> <param-name>casServerLoginUrl</param-name>
> <param-value>https://Liferay-hostname:8443/cas-web/login
> </param-value>
> </init-param>
> </filter>
>
> <filter>
> <filter-name>CAS Validation Filter</filter-name>
> <filter-class>
> org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
> </filter-class>
> <init-param>
> <param-name>casServerUrlPrefix</param-name>
> <param-value>https://Liferay-hostname:8443/cas-web</param-value>
> </init-param>
> </filter>
>
>
> <filter>
> <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
> <filter-class>
> org.jasig.cas.client.util.HttpServletRequestWrapperFilter</filter-class>
> </filter>
>
>
> <filter>
> <filter-name>CAS Assertion Thread Local Filter</filter-name>
> <filter-class>org.jasig.cas.client.util.AssertionThreadLocalFilter
> </filter-class>
> </filter>
>
>
> <filter-mapping>
> <filter-name>CAS Authentication Filter</filter-name>
> <url-pattern>/*</url-pattern>
> </filter-mapping>
>
> <filter-mapping>
> <filter-name>CAS Validation Filter</filter-name>
> <url-pattern>/*</url-pattern>
> </filter-mapping>
>
> <filter-mapping>
> <filter-name>CAS HttpServletRequest Wrapper Filter</filter-name>
> <url-pattern>/*</url-pattern>
> </filter-mapping>
>
> <filter-mapping>
> <filter-name>CAS Assertion Thread Local
> Filter</filter-name>
> <url-pattern>/*</url-pattern>
> </filter-mapping>
>
> <filter-mapping>
> <filter-name>CAS Single Sign Out Filter</filter-name>
> <url-pattern>/*</url-pattern>
> </filter-mapping>
>
> <listener>
> <listener-class>
> org.jasig.cas.client.session.SingleSignOutHttpSessionListener
> </listener-class>
> </listener>
> **************************************************
>
> When I try to authenticate the user, I get this ERROR:
> INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service
> ticket [ST-1-RXH7RbUYL03Kk7cIvlCc] for service [
> http://Liferay-hostname:9090/c/portal/login/] for user [Tuser]>
> 2008-03-07 15:33:45,086 ERROR [
> org.jasig.cas.CentralAuthenticationServiceImpl] - <ServiceTicket
> [ST-1-RXH7RbUYL03Kk7cIvlCc] with service [
> http://Liferay-hostname:9090/c/portal/login/ does not match supplied
> service [http://Liferay-hostname:9090/c/portal/login/c/portal/login/]<http://Liferay-hostname:9090/c/portal/login/c/portal/login/%5D>
> >
> 15:33:45,140 WARN [Cas20ProxyReceivingTicketValidationFilter:147]
> org.jasig.cas.client.validation.TicketValidationException:
> le ticket 'ST-1-RXH7RbUYL03Kk7cIvlCc' ne correspond pas au service
> demand�
>
> org.jasig.cas.client.validation.TicketValidationException:
> le ticket 'ST-1-RXH7RbUYL03Kk7cIvlCc' ne correspond pas au service
> demand�
>
> at
> org.jasig.cas.client.validation.Cas20ServiceTicketValidator.parseResponseFromServer
> (Cas20ServiceTicketValidator.java:65)
>
>
>
>
> Thanks in advance
>
>
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
>
--
-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20080307/d2ac4031/attachment.html
More information about the cas
mailing list