CAS 5 Logout Shows Error in Logs but Browser Shows Logout Success

[Matt S.]

Hi,

When I access the CAS logout URL, the browser seems to show a successful logout but the CAS log shows the following error:

ERROR [org.pac4j.cas.client.direct.DirectCasClient] - <Failed to retrieve or validate CAS credentials>

org.pac4j.core.exception.CredentialsException: POST requests not supported

We're using an external Tomcat, not the embedded Tomcat, so I'm not sure if this is related to the issue.

Any suggestions?

Thanks,
Matt

[Matt S.]

Quick update.

This only seems to happen if I login, access the Admin web app (/cas/status/dashboard) and call /cas/logout.

If I just login and logout, there is no error.

Thanks,
Matt

[Matt S.]

After reverting back to using the embedded Tomcat in CAS 5.0.4, this error still shows in the logs, so this seems to be an issue in CAS (pac4j) itself.

It seems to occur during ticket cleanup, such as after the TGT is destroyed for a user.

Has anyone else noticed this and is it something that we need to worry about, considering that the logout functionality seems to be working fine otherwise?

On Thursday, April 13, 2017 at 9:46:54 AM UTC-4, Matt S. wrote:

[李勉才]

Hi, 

    I have the same problem, it seems need inject cas credential in post request.