A 'not authorized to use CAS' message happens before authentication. This error 
happens on ST validation.

On Tue, 2019-01-08 at 08:36 +0100, Alberto Cabello Sánchez wrote:

On Tue, 8 Jan 2019 00:50:10 +0000
Ray Bon <[email protected]<mailto:[email protected]>> wrote:



Jen,

The ST is being validated against a URL with GLMSSESSIONID... but
this was not present with the log in request (the 2 need to match).
Change the CAS client to not send GLMS... or send it with the log
in request.

Or maybe change the service registry id to something like
https://travel.host.com:4447/tvlexp/tvlexp-flex/.* (memory may be
rusty here).



Hi,

I don't think this will work: when service registry URL doesn't match
the supplied URL, the error message is different (something like "you
are not authorized to use CAS").

Greetings,

--
Alberto Cabello Sánchez
Servicio de Informática
Universidad de Extremadura



--
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | [email protected]

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1546967079.5350.23.camel%40uvic.ca.

Reply via email to