SAML attribute release error

118 views
Skip to first unread message

Bryan Wooten

unread,
May 13, 2020, 12:51:08 PM5/13/20
to cas-...@apereo.org
Hi all,

I wrote a brain dead simple CAS servlet that demos attribute release about 5 years ago. Worked as expected.

But suddenly it does this:

HTTP Status 500 – Internal Server Error

Type Exception Report

Message org.jasig.cas.client.validation.TicketValidationException: Error processing SAML response

Description The server encountered an unexpected condition that prevented it from fulfilling the request.

Exception

javax.servlet.ServletException: org.jasig.cas.client.validation.TicketValidationException: Error processing SAML response
	org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:227)
	org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:164)

Root Cause

org.jasig.cas.client.validation.TicketValidationException: Error processing SAML response
	org.jasig.cas.client.validation.Saml11TicketValidator.parseResponseFromServer(Saml11TicketValidator.java:162)
	org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:201)
	org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:204)
	org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:164)

Root Cause

org.jasig.cas.client.validation.TicketValidationException: Invalid SAML assertion
	org.jasig.cas.client.validation.Saml11TicketValidator.parseResponseFromServer(Saml11TicketValidator.java:128)
	org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:201)
	org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:204)
	org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:164)

Note The full stack trace of the root cause is available in the server logs.


I can't find any errors on the cas (5.x) server it self. Other apps hitting this cas server are not reporting any issues...

Any hints?

Cheers,


-Bryan

University of Utah

Daniel Ellentuck

unread,
May 13, 2020, 1:00:14 PM5/13/20
to CAS Users
Hi Bryan,

CAS client version, plus supporting libraries on your demo app?

    Dan

Dan Ellentuck
Columbia University I.T.


--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAG9x2GWEYftEcsJL4567jfPH80an_XRye-un8q4RXUr1Oix2Jg%40mail.gmail.com.

Bryan Wooten

unread,
May 13, 2020, 1:17:14 PM5/13/20
to cas-...@apereo.org
cas-client-core-3.4.1.jar and cas-client-support-saml-3.40.jar

I should have included that in the first place, apologies.

-Bryan

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFqYg5%2BOmBJck%2B1qHcm5r2E8abw31bkRr2CDt_-2gUEJ6AhaYA%40mail.gmail.com.

Daniel Ellentuck

unread,
May 13, 2020, 1:35:53 PM5/13/20
to CAS Users
Hi Bryan,

Before debugging, I would bump up to the latest client (3.6.x).  Easy to do and might just fix it.  

    Dan
 

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAG9x2GXz%3DGz%3DvorAtKz%3D9hYJHBFs%3DT8byY-FHs2-stWv5UeQBg%40mail.gmail.com.

Bryan Wooten

unread,
May 13, 2020, 1:40:12 PM5/13/20
to cas-...@apereo.org

thanks, I am looking for a place to download the newest jar files...


I don't really want to build from scratch. Check maven central repo now...

-Bryan

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFqYg5J%2BQ_DHnFgO%3DyMsopRwnUVP-bYSf_1yaijR%2BwZzr-iE5A%40mail.gmail.com.

Ray Bon

unread,
May 13, 2020, 1:49:50 PM5/13/20
to cas-...@apereo.org
Bryan,

Check your app certificate for a valid date.

Ray
--
Ray Bon
Programmer Analyst
Development Services, University Systems

I respectfully acknowledge that my place of work is located within the ancestral, traditional and unceded territory of the Songhees, Esquimalt and WSÁNEĆ Nations.
Reply all
Reply to author
Forward
0 new messages