[cas-user] Banner SSO Manager and JSON Service Registry

[Robert Beer]

I am experiencing a weird issue with CAS authentication from Banner (Ellucian) SSO Manager. Using a JPA or InMemory serviceRegistryDao works with version 3.4.11 and 3.4.12. Howerver, when I include:

<dependency>
<groupId>net.unicon.cas</groupId>
<artifactId>cas-addons</artifactId>
<version>0.9.5</version>
</dependency>

in the pom.xml file I get a 500 error on the Banner side. The error will occur without configuring JSON for serviceRegistryDao in deployerConfigContext.xml.

That error from the Banner WebLogic server is:
####<Aug 24, 2012 1:32:18 PM EDT> <Error> <HTTP> <ssb8test.onu.edu> <mserver1> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1345829538463> <BEA-101020> <[ServletContext@552295986[app:ssomanager module:ssomanager path:/ssomanager spec-version:2.5]] Servlet failed with Exception
java.lang.StringIndexOutOfBoundsException: String index out of range: -1
at java.lang.String.substring(String.java:1937)
at org.jasig.cas.client.validation.Saml11TicketValidator.parseResponseFromServer(Saml11TicketValidator.java:49)
at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:188)
at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:132)
at com.sghe.sso.client.web.filter.SSOValidationFilter.doFilter(Unknown Source)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:102)
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:237)
at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:167)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
>

I believe this error is coming from a string error from the attribute release in SAML Validate. I am not sure I can up the debug level on the Banner side.

Does anyone have and thoughts how to debug this?
--
Bob Beer <r-b...@onu.edu>
Ohio Northern University, Information Technology, Ada, OH 45810


--
You are currently subscribed to cas-...@lists.jasig.org as: jasig-cas-user...@googlegroups.com
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user