Shibboleth IDP 3 as CAS Server

[Jesse Martinich]

I was using the default cookie-based store. After some quick reading, I'm
attempting to setup the MemcachedStorageService. HA is one of the features
(in additions to CAS support) I am excited to implement with IDP 3.

Jesse


*Jesse Martinich*
Systems Administrator
Southern Oregon University | 1250 Siskiyou Blvd | Ashland OR  97520
541-552-8424


On Fri, Jun 12, 2015 at 4:18 AM, Marvin Addison <marvin.addison at gmail.com>
wrote:

> But in idp-process.log I get this:
>>
>> 2015-06-11 14:43:04,759 - INFO
>> [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:182] -
>> Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'martinicj'
>> succeeded
>> 2015-06-11 14:43:04,764 - INFO
>> [net.shibboleth.idp.cas.flow.GrantServiceTicketAction:101] - Granted
>> service ticket for https://cas.sou.edu/secure/
>> 2015-06-11 14:43:04,922 - INFO
>> [net.shibboleth.idp.cas.flow.ValidateTicketAction:117] - Successfully
>> validated ST-1434058984764-CWnL48dV62jogJ8VXk6F7cVUB for
>> https://cas.sou.edu/secure/
>>
>
> That simply means that the ticket was found in the backing store. There
> are other actions that follow ticket lookup, and judging by the detail code
> E_SESSION_EXPIRED, your IdP session could not be found. Are you using a
> server-side StorageService implementation for the session store? That's
> required since the CAS ticket validation step is a back-channel request and
> the default cookie-based store is not suitable in that situation.
>
> M
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150612/4b816f2d/attachment.html>