I increased the log level for org.jasic.cas to DEBUG and now the following information gets logged during the login failures.
--- 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: http://[application]/index.php?action=login 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Placing service in FlowScope: http://[application]/index.php?action=login 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Placing service in FlowScope: http://[application]/index.php?action=login 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-370-CsVc76of4X9OfgDHKubddrZ3QUw0WmLpfzdj293RrkdYN7ih0d-cas] 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-370-CsVc76of4X9OfgDHKubddrZ3QUw0WmLpfzdj293RrkdYN7ih0d-cas] found in registry. 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Added ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] to registry. 2011-05-25 08:02:27,706 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - Granted service ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] for service [http://[application]/index.php?action=login] for user [[email protected]] 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [TGT-370-CsVc76of4X9OfgDHKubddrZ3QUw0WmLpfzdj293RrkdYN7ih0d-cas] 2011-05-25 08:02:27,706 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [TGT-370-CsVc76of4X9OfgDHKubddrZ3QUw0WmLpfzdj293RrkdYN7ih0d-cas] found in registry. 2011-05-25 08:02:27,706 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN ============================================================= WHO: [email protected] WHAT: ST-154090-1BBSbaWxQtnC2zcpMm6m-cas for http://[application]/index.php?action=login ACTION: SERVICE_TICKET_CREATED APPLICATION: CAS WHEN: Wed May 25 08:02:27 GMT 2011 CLIENT IP ADDRESS: [ip] SERVER IP ADDRESS: [ip] ============================================================= 2011-05-25 08:02:28,748 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: http://[application]/index.php?action=login 2011-05-25 08:02:28,748 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] 2011-05-25 08:02:28,748 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] found in registry. 2011-05-25 08:02:28,748 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Removing ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] from registry 2011-05-25 08:02:28,748 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] 2011-05-25 08:02:28,748 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: ST-154090-1BBSbaWxQtnC2zcpMm6m-cas ACTION: SERVICE_TICKET_VALIDATED APPLICATION: CAS WHEN: Wed May 25 08:02:28 GMT 2011 CLIENT IP ADDRESS: [ip] SERVER IP ADDRESS: [ip] ============================================================= 2011-05-25 08:02:28,749 DEBUG [org.jasig.cas.web.ServiceValidateController] - Successfully validated service ticket: ST-154090-1BBSbaWxQtnC2zcpMm6m-cas 2011-05-25 08:02:30,113 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: http://[application]/index.php?action=login 2011-05-25 08:02:30,113 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] 2011-05-25 08:02:30,113 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - ServiceTicket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] does not exist. 2011-05-25 08:02:30,113 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] 2011-05-25 08:02:30,113 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: ST-154090-1BBSbaWxQtnC2zcpMm6m-cas ACTION: SERVICE_TICKET_VALIDATE_FAILED APPLICATION: CAS WHEN: Wed May 25 08:02:30 GMT 2011 CLIENT IP ADDRESS: [ip] SERVER IP ADDRESS: [ip] ============================================================= 2011-05-25 08:03:03,930 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor] - Extractor generated service for: http://[application]/index.php?action=login 2011-05-25 08:03:03,930 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] 2011-05-25 08:03:03,930 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - ServiceTicket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] does not exist. 2011-05-25 08:03:03,930 DEBUG [org.jasig.cas.ticket.registry.DefaultTicketRegistry] - Attempting to retrieve ticket [ST-154090-1BBSbaWxQtnC2zcpMm6m-cas] 2011-05-25 08:03:03,930 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: ST-154090-1BBSbaWxQtnC2zcpMm6m-cas ACTION: SERVICE_TICKET_VALIDATE_FAILED APPLICATION: CAS WHEN: Wed May 25 08:03:03 GMT 2011 CLIENT IP ADDRESS: [ip] SERVER IP ADDRESS: [ip] ============================================================= --- Could this be a session problem in the application running phpCAS? Ronald -----Original Message----- > We are running a CAS server (version 3.4.7) and sometimes our users can't > login. Our application (using phpCAS 1.2.1) shows a "CAS Authentication > failed!" message. The logs you shared appear to be at INFO level, which don't show enough detail. Please increase the log level for org.jasig.cas to DEBUG, retry authentication, and post those logs. M -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
