Shibboleth IDP 3 as CAS Server

[Jesse Martinich]

Please excuse my ignorance. I think Walter may have alluded to this
yesterday... Might I need to setup back channel support for SOAP endpoints?

Jesse


*Jesse Martinich*
Systems Administrator
Southern Oregon University | 1250 Siskiyou Blvd | Ashland OR  97520
541-552-8424


On Fri, Jun 12, 2015 at 9:13 AM, Jesse Martinich <martinicj at sou.edu> wrote:

> I was using the default cookie-based store. After some quick reading, I'm
> attempting to setup the MemcachedStorageService. HA is one of the features
> (in additions to CAS support) I am excited to implement with IDP 3.
>
> Jesse
>
>
> *Jesse Martinich*
> Systems Administrator
> Southern Oregon University | 1250 Siskiyou Blvd | Ashland OR  97520
> 541-552-8424
>
>
> On Fri, Jun 12, 2015 at 4:18 AM, Marvin Addison <marvin.addison at gmail.com>
> wrote:
>
>> But in idp-process.log I get this:
>>>
>>> 2015-06-11 14:43:04,759 - INFO
>>> [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:182] -
>>> Profile Action ValidateUsernamePasswordAgainstLDAP: Login by 'martinicj'
>>> succeeded
>>> 2015-06-11 14:43:04,764 - INFO
>>> [net.shibboleth.idp.cas.flow.GrantServiceTicketAction:101] - Granted
>>> service ticket for https://cas.sou.edu/secure/
>>> 2015-06-11 14:43:04,922 - INFO
>>> [net.shibboleth.idp.cas.flow.ValidateTicketAction:117] - Successfully
>>> validated ST-1434058984764-CWnL48dV62jogJ8VXk6F7cVUB for
>>> https://cas.sou.edu/secure/
>>>
>>
>> That simply means that the ticket was found in the backing store. There
>> are other actions that follow ticket lookup, and judging by the detail code
>> E_SESSION_EXPIRED, your IdP session could not be found. Are you using a
>> server-side StorageService implementation for the session store? That's
>> required since the CAS ticket validation step is a back-channel request and
>> the default cookie-based store is not suitable in that situation.
>>
>> M
>>
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150612/77f48443/attachment.html>