Shibboleth + CAS 3.5.2 error

[Kevin P. Foote]

On Mon, 2 Dec 2013, Gianluigi Ruggeri wrote:

> I have a question about Shibboleth + CAS 3.5.2
> I followed this tutoria to configure my Shibboleth Idp.
> https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration
>
> I can try the Idp using TestShib:
>
> I set my idp url ad I have a redirect to my CAS Server login Page.
> I put my credentials: I'm authenticated but I'm redirected to error
> page and I have this log error:
>
> 15:57:00.158 - ERROR [org.jasig.cas.client.util.CommonUtils:340] -
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to$
> javax.net.ssl.SSLHandshakeException:
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path$


This is a CAS client error. You have to ensure that your SSL exchanges
or permissions are correct for your CAS setup.

The Shibboleth IdP cares nothing of this error and is just waiting for the
REMOTE_USER to be filled in by your CAS client.


------
thanks
  kevin.foote