All the work is done in the validation filter not the authentication filter.
Sent from my Verizon Wireless BlackBerry -----Original Message----- From: Aksel Bruun <[email protected]> Date: Wed, 17 Mar 2010 09:49:45 To: <[email protected]> Subject: Re: [cas-user] Proxy ticket retrieval The reason I tried the programmatic approach is that I cannot get the Authentication Filter to work with a web service. So I guess my only option is to implement a RESTful service that can carry the service ticket as a URL parameter. Then I can use the regular approach: Assertion assertion = (Assertion) session.getAttribute(AbstractCasFilter.CONST_CAS_ASSERTION); Aksel. 2010/3/17 Scott Battaglia <[email protected]>: > If you construct your own validator (I'm not sure why you would) of course > its not going to work. The filter takes care of setting everything up > correctly and validating the ticket and making proxying available. > > > > On Tue, Mar 16, 2010 at 9:30 AM, Aksel Bruun <[email protected]> wrote: >> >> Hi all, >> I am able to retrieve a proxygranting ticket(see debug below) but it >> seems that the CAS client cannot use this for retrieval of a >> proxyticket. >> Is it possible that this has something to do with the declaration of >> the proxyGrantingTicketStorage ? >> Code and debug attachet below. >> >> Aksel. >> >> CODE: >> Cas20ServiceTicketValidator ticketValidator = new >> Cas20ServiceTicketValidator(CAS_SERVER_URL); >> >> ticketValidator.setProxyCallbackUrl("https://appserver-test/RENTjenesterEkstern/proxyCallback";); >> Assertion assertion = ticketValidator.validate(ticket, >> TARGET_SERVICE_URL); >> System.out.println("Valid from: " + assertion.getValidFromDate()); >> System.out.println("Valid until: " + assertion.getValidUntilDate()); >> String proxyTicket = >> assertion.getPrincipal().getProxyTicketFor(TARGET_REPORT_URL); >> System.out.println("proxyTicket: " + proxyTicket); >> >> >> WEB.XML: >> <filter> >> <filter-name>CAS Validation Filter</filter-name> >> >> <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class> >> <init-param> >> <param-name>casServerUrlPrefix</param-name> >> <param-value>https://CAS-SERVER/cas/</param-value> >> </init-param> >> <init-param> >> <param-name>serverName</param-name> >> <param-value>http://APP-SERVER</param-value> >> </init-param> >> <init-param> >> <param-name>proxyCallbackUrl</param-name> >> >> <param-value>https://APP-SERVER/RENTjenesterEkstern/proxyCallback</param-value> >> </init-param> >> <init-param> >> <param-name>proxyReceptorUrl</param-name> >> <param-value>/proxyCallback</param-value> >> </init-param> >> <init-param> >> <param-name>proxyGrantingTicketStorageClass</param-name> >> >> <param-value>org.jasig.cas.client.proxy.ProxyGrantingTicketStorageImpl</param-value> >> </init-param> >> </filter> >> >> DEBUG: >> 14:26:09,062 DEBUG [Cas20ServiceTicketValidator] Retrieving response >> from server. >> 14:26:09,234 DEBUG [CommonUtils] Received proxyGrantingTicketId >> [TGT-179-2fcLlFEa9IAtEIkMpurdfZnhWdJMshPH2tXxNeJxXeHnpb10ji-cas] for >> proxyGrantingTicketIou [PGTIOU-56-rcQzqjhocIhDujfF64iI-cas] >> 14:26:09,234 DEBUG [ProxyGrantingTicketStorageImpl] Saving >> ProxyGrantingTicketIOU and ProxyGrantingTicket combo: >> [PGTIOU-56-rcQzqjhocIhDujfF64iI-cas, >> TGT-179-2fcLlFEa9IAtEIkMpurdfZnhWdJMshPH2tXxNeJxXeHnpb10ji-cas] >> 14:26:09,234 DEBUG [Cas20ServiceTicketValidator] Server response: >> <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'> >> <cas:authenticationSuccess> >> <cas:user>poweltest</cas:user> >> >> >> <cas:proxyGrantingTicket>PGTIOU-56-rcQzqjhocIhDujfF64iI-cas</cas:proxyGrantingTicket> >> >> >> </cas:authenticationSuccess> >> </cas:serviceResponse> >> >> 14:26:09,265 INFO [STDOUT] Valid from: Tue Mar 16 14:26:09 CET 2010 >> 14:26:09,265 INFO [STDOUT] Valid until: null >> 14:26:09,265 DEBUG [AttributePrincipalImpl] No ProxyGrantingTicket was >> supplied, so no Proxy Ticket can be retrieved. >> 14:26:09,265 INFO [STDOUT] proxyTicket: null >> >> -- >> You are currently subscribed to [email protected] as: >> [email protected] >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
