Failed to validate tickets through CAS

[Antonios Ventouris]

Hello,

I have CAS installed for SSO. 

I am able to login and proceed, but the ticket is not validated.

Below, is what I get from logs:

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property roleGroupName on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property ticketValidatorClass on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property defaultRoles on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property principalGroupName on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property service on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property cacheAssertions on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property cacheTimeout on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator

WARNING: Cannot find property roleAttributeNames on org.jasig.cas.client.validation.Cas20ServiceTicketValidator

Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule login

INFO: Login failed due to CAS ticket validation failure: org.jasig.cas.client.validation.TicketValidationException:

                Service not allowed to validate tickets.

And this is how I am trying to check if the ticket is validated:

http://IP:PORT/cas-sso/validate?service=IP:PORT?ticket=<ticket>

The error I get is that the ticket is not validated.

Do I need to add the Ticker Validation Filter in the web.xml file ?

I use this: Cas10TicketValidationFilter , for ticket validation.

Thank you in advance,

AV

[Ray Bon]

Antonios,

You will need a validation filter, https://github.com/apereo/java-cas-client#orgjasigcasclientvalidationcas10ticketvalidationfilter

Is the CAS endpoint cas-sso?

Ray

-- 
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | rb...@uvic.ca

[amit rathee]

PLEASE HELP URGENTLY 

Problem statement  :: 1) I have implemented SPNEGO but still seeing the LOGIN form sometimes for a particular application whereas it works fine for rest of the applications

2) And also sometimes getting the issue 

"org.jasig.cas.client.validation.TicketValidationException: The CAS server returned no response"

Cheers,

Amit 

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1534178847.2503.14.camel%40uvic.ca.

--

Cheers,
Amit

[Antonios Ventouris]

Hello Ray,

Yes, the endpoint is cas-sso.

So, I need to add the validation filter in the web.xml file ?

Regards,

AV

[Ray Bon]

AV,

When you add the validation filter, remember to set the endpoint as cas-sso.

You may find it easier to use 'cas' as the endpoint instead of 'cas-sso' just in case there are some defaults set.

Ray

---

From: cas-...@apereo.org <cas-...@apereo.org> on behalf of Antonios Ventouris <avent...@gmail.com>
Sent: August 19, 2018 23:40
To: CAS Community
Subject: Re: [cas-user] Failed to validate tickets through CAS

 

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/81377a0d-6b3a-43e9-8758-cb28b7d65181%40apereo.org.