Hi, Wanted to add that this seems to be happening more with sites that are not internal to our University.
___________________ Juan Quintanilla UTS - Enterprise Group 305-348-6573 jquin...@fiu.edu<mailto:jquin...@fiu.edu> ________________________________ From: Juan Quintanilla Sent: Wednesday, August 14, 2013 2:51 PM To: cas-user@lists.jasig.org Subject: CAS Client application not processing Service Ticket Hi, We are running CAS SSO 3.4.7 and we have several client applications that are using are SSO system without a problem. Recently we encountered a problem with 2 Applications were after the user has authenticated they receive blank page and the URL just shows the client application url along with the Service Ticket. One application shows the following message: <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'> <cas:authenticationFailure code='INVALID_TICKET'> ticket 'ST-118496-HYwZKjo0zLJ1zEZE1by0-fiusso3.fiu.edu<http://ST-118496-HYwZKjo0zLJ1zEZE1by0-fiusso3.fiu.edu>' not recognized </cas:authenticationFailure> </cas:serviceResponse> When I set the CAS Server in debug mode I don't see any logs that show it attempting to validate the Service Ticket. When I use CAS to authenticate into an application that is working I see the transactions and the Service Ticket being validated and I gain access to the application. Below are some of the logs, any assistance or suggestions would be greatly appreciated. CAS Client that is not working ============================ 2013-08-13 11:17:41,539 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler successfully authenticated the user which provided the following credentials: [username: taccount5]> 2013-08-13 11:17:41,682 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <Resolved principal taccount5> 2013-08-13 11:17:41,683 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <Principal found: taccount5> 2013-08-13 11:17:41,696 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [addTicket with arguments [[TGT-1-CtvDjIsA5LhnJS6HAWLA9xfL3dCPQile5Y6rrFsi09r7QJARMr-fiussodev.fiu.edu]]> 2013-08-13 11:17:41,727 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [addTicket] with return value [null].> 2013-08-13 11:17:41,757 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[TGT-1-CtvDjIsA5LhnJS6HAWLA9xfL3dCPQile5Y6rrFsi09r7QJARMr-fiussodev.fiu.edu, interface org.jasig.cas.ticket.TicketGrantingTicket]]> 2013-08-13 11:17:41,757 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[TGT-1-CtvDjIsA5LhnJS6HAWLA9xfL3dCPQile5Y6rrFsi09r7QJARMr-fiussodev.fiu.edu]]> 2013-08-13 11:17:41,769 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:17:41,769 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [hashCode] with return value [162350667].> 2013-08-13 11:17:41,769 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator@9ad464b].> 2013-08-13 11:17:41,769 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:17:41,770 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [hashCode] with return value [162350667].> 2013-08-13 11:17:41,770 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator@9ad464b].> 2013-08-13 11:17:41,770 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [isExpired with arguments []> 2013-08-13 11:17:41,770 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [isExpired] with return value [false].> 2013-08-13 11:17:41,777 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [grantServiceTicket with arguments [[ST-1-G9a0Fz2BEE5G2Bwc943J-fiussodev.fiu.edu, https://sedonaweb.com/public/cas/FIU/, org.jasig.cas.ticket.support.MultiTimeUseOrTimeoutExpirationPolicy@73d74138, false]]> 2013-08-13 11:17:41,780 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [grantServiceTicket] with return value [ST-1-G9a0Fz2BEE5G2Bwc943J-fiussodev.fiu.edu].> 2013-08-13 11:17:41,780 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [addTicket with arguments [[ST-1-G9a0Fz2BEE5G2Bwc943J-fiussodev.fiu.edu]]> 2013-08-13 11:17:41,783 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [addTicket] with return value [null].> 2013-08-13 11:17:41,783 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-1-G9a0Fz2BEE5G2Bwc943J-fiussodev.fiu.edu] for service [https://sedonaweb.com/public/cas/FIU/] for user [taccount5]> 2013-08-13 11:17:41,784 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[TGT-1-CtvDjIsA5LhnJS6HAWLA9xfL3dCPQile5Y6rrFsi09r7QJARMr-fiussodev.fiu.edu]]> 2013-08-13 11:17:41,784 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:17:41,784 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [hashCode] with return value [162350667].> 2013-08-13 11:17:41,784 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator@9ad464b].> 2013-08-13 11:17:41,784 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [getAuthentication with arguments []> 2013-08-13 11:17:41,784 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [getAuthentication] with return value [[Principal=taccount5, attributes={authenticationMethod=org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler}]].> 2013-08-13 11:17:45,430 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - <Reloading registered services.> 2013-08-13 11:17:45,563 INFO [org.jasig.cas.services.DefaultServicesManagerImpl] - <Loaded 111 services.> ===================================================================================================================== ===================================================================================================================== Working Local CAS Client 2013-08-13 11:22:34,752 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <Resolved principal taccount5> 2013-08-13 11:22:34,752 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <Principal found: taccount5> 2013-08-13 11:22:34,755 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [addTicket with arguments [[TGT-2-tt3XGTFwdby9qQ4ZMskuZeOATAhoARGa54mQRZVXBd1BgDFC7Q-fiussodev.fiu.edu]]> 2013-08-13 11:22:34,758 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [addTicket] with return value [null].> 2013-08-13 11:22:34,768 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[TGT-2-tt3XGTFwdby9qQ4ZMskuZeOATAhoARGa54mQRZVXBd1BgDFC7Q-fiussodev.fiu.edu, interface org.jasig.cas.ticket.TicketGrantingTicket]]> 2013-08-13 11:22:34,768 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[TGT-2-tt3XGTFwdby9qQ4ZMskuZeOATAhoARGa54mQRZVXBd1BgDFC7Q-fiussodev.fiu.edu]]> 2013-08-13 11:22:34,772 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:22:34,772 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [hashCode] with return value [-938751289].> 2013-08-13 11:22:34,773 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator@c80bcac7].> 2013-08-13 11:22:34,773 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:22:34,773 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [hashCode] with return value [-938751289].> 2013-08-13 11:22:34,773 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator@c80bcac7].> 2013-08-13 11:22:34,773 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [isExpired with arguments []> 2013-08-13 11:22:34,774 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [isExpired] with return value [false].> 2013-08-13 11:22:34,781 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [grantServiceTicket with arguments [[ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu, http://oestest.fiu.edu/castest/simple_login.php, org.jasig.cas.ticket.support.MultiTimeUseOrTimeoutExpirationPolicy@73d74138, false]]> 2013-08-13 11:22:34,781 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [grantServiceTicket] with return value [ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu].> 2013-08-13 11:22:34,781 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [addTicket with arguments [[ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu]]> 2013-08-13 11:22:34,783 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [addTicket] with return value [null].> 2013-08-13 11:22:34,784 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu] for service [http://oestest.fiu.edu/castest/simple_login.php] for user [taccount5]> 2013-08-13 11:22:34,784 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[TGT-2-tt3XGTFwdby9qQ4ZMskuZeOATAhoARGa54mQRZVXBd1BgDFC7Q-fiussodev.fiu.edu]]> 2013-08-13 11:22:34,784 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:22:34,784 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [hashCode] with return value [-938751289].> 2013-08-13 11:22:34,785 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator@c80bcac7].> 2013-08-13 11:22:34,785 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Entering method [getAuthentication with arguments []> 2013-08-13 11:22:34,785 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$TicketGrantingTicketDelegator] - <Leaving method [getAuthentication] with return value [[Principal=taccount5, attributes={authenticationMethod=org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler}]].> 2013-08-13 11:22:35,069 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu, interface org.jasig.cas.ticket.ServiceTicket]]> 2013-08-13 11:22:35,072 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu]]> 2013-08-13 11:22:35,101 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:22:35,101 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [hashCode] with return value [-1948965225].> 2013-08-13 11:22:35,101 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator@8bd52697].> 2013-08-13 11:22:35,101 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [hashCode with arguments []> 2013-08-13 11:22:35,102 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [hashCode] with return value [-1948965225].> 2013-08-13 11:22:35,102 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator@8bd52697].> 2013-08-13 11:22:35,127 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [isExpired with arguments []> 2013-08-13 11:22:35,130 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [isExpired] with return value [false].> 2013-08-13 11:22:35,131 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [isValidFor with arguments [[http://oestest.fiu.edu/castest/simple_login.php]]> 2013-08-13 11:22:35,132 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [isValidFor] with return value [true].> 2013-08-13 11:22:35,132 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [getGrantingTicket with arguments []> 2013-08-13 11:22:35,133 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [getGrantingTicket] with return value [TGT-2-tt3XGTFwdby9qQ4ZMskuZeOATAhoARGa54mQRZVXBd1BgDFC7Q-fiussodev.fiu.edu].> 2013-08-13 11:22:35,133 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [getGrantingTicket with arguments []> 2013-08-13 11:22:35,133 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [getGrantingTicket] with return value [TGT-2-tt3XGTFwdby9qQ4ZMskuZeOATAhoARGa54mQRZVXBd1BgDFC7Q-fiussodev.fiu.edu].> 2013-08-13 11:22:35,145 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [getService with arguments []> 2013-08-13 11:22:35,145 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [getService] with return value [http://oestest.fiu.edu/castest/simple_login.php].> 2013-08-13 11:22:35,145 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [isFromNewLogin with arguments []> 2013-08-13 11:22:35,145 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [isFromNewLogin] with return value [true].> 2013-08-13 11:22:35,146 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Entering method [isExpired with arguments []> 2013-08-13 11:22:35,146 TRACE [org.jasig.cas.ticket.registry.AbstractDistributedTicketRegistry$ServiceTicketDelegator] - <Leaving method [isExpired] with return value [true].> 2013-08-13 11:22:35,147 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [deleteTicket with arguments [[ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu]]> 2013-08-13 11:22:35,148 DEBUG [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Removing Ticket >ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu< created: Tue Aug 13 11:22:34 EDT 2013> 2013-08-13 11:22:35,152 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [deleteTicket] with return value [true].> 2013-08-13 11:22:35,153 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Entering method [getTicket with arguments [[ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu]]> 2013-08-13 11:22:35,153 TRACE [org.jasig.cas.ticket.registry.JpaTicketRegistry] - <Leaving method [getTicket] with return value [null].> 2013-08-13 11:22:35,176 DEBUG [org.jasig.cas.web.ServiceValidateController] - <Successfully validated service ticket: ST-2-ogVTw7mxJ41usw5Uo9sM-fiussodev.fiu.edu> ___________________ Juan Quintanilla jquin...@fiu.edu<mailto:jquin...@fiu.edu> -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user