CAS in IdP v3

[Brian Biggs]

Absolutely.

when I authenticate it seems to create an idp session successfully:

2016-02-02 11:14:43,297 - DEBUG 
[net.shibboleth.idp.session.impl.DetectIdentitySwitch:148] - Profile 
Action DetectIdentitySwitch: No previous session found, nothing to do
2016-02-02 11:14:43,298 - DEBUG 
[net.shibboleth.idp.authn.impl.FinalizeAuthentication:137] - Profile 
Action FinalizeAuthentication: Canonical principal name was established 
as 'biggsb'
2016-02-02 11:14:43,299 - DEBUG 
[net.shibboleth.idp.authn.impl.FinalizeAuthentication:186] - Profile 
Action FinalizeAuthentication: Request did not have explicit 
authentication requirements, result is accepted
2016-02-02 11:14:43,300 - DEBUG 
[net.shibboleth.idp.session.impl.UpdateSessionWithAuthenticationResult:221] 
- Profile Action UpdateSessionWithAuthenticationResult: Creating new 
session for principal biggsb
2016-02-02 11:14:43,303 - DEBUG 
[net.shibboleth.idp.session.impl.StorageBackedSessionManager:533] - 
Created new session 
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0 for 
principal biggsb
2016-02-02 11:14:43,304 - DEBUG 
[net.shibboleth.idp.session.impl.StorageBackedIdPSession:561] - Saving 
AuthenticationResult for flow authn/Password in session 
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0


However, when I go back to the same page that I got into, it sends me 
back to authenticate again and I see:

2016-02-02 11:14:44,669 - DEBUG 
[net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] - 
Profile Action SelectRelyingPartyConfiguration: Found relying party 
configuration shibboleth.DefaultRelyingParty for request
2016-02-02 11:14:44,670 - DEBUG 
[net.shibboleth.idp.cas.flow.impl.ValidateTicket Action:92] - Attempting 
to validate ST-1454440484132NQj5toJoKOBk3ZSRFlAd3cQxm
2016-02-02 11:14:44,670 - DEBUG 
[net.shibboleth.idp.cas.ticket.impl.SimpleTicket Service:226] - Reading 
ST-1454440484132-NQj5toJoKOBk3ZSRFlAd3cQxm
2016-02-02 11:14:44,670 - DEBUG 
[net.shibboleth.idp.cas.ticket.impl.SimpleTicket Service:215] - 
Attempting to delete ST-1454440484132NQj5toJoKOBk3ZSRFlAd3cQxm from 
context https://www.apereo.org/cas/protocol/login
2016-02-02 11:14:44,670 - DEBUG 
[net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:101] - Found and 
removed 
ST-1454440484132NQj5toJoKOBk3ZSRFlAd3cQxm/3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0 
from ticket store
2016-02-02 11:14:44,671 - INFO 
[net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:117] - 
Successfully validated ST-1454440484132-NQj5toJoKOBk3ZSRFlAd3cQxm for 
https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi
2016-02-02 11:14:44,671 - DEBUG 
[net.shibboleth.idp.cas.flow.impl.ValidateIdpSessionAction:81] - 
Attempting to retrieve session 
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0
2016-02-02 11:14:44,671 - DEBUG 
[net.shibboleth.idp.session.impl.StorageBackedSessionManager:707] - 
Performing primary lookup on session ID 
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0
2016-02-02 11:14:44,673 - DEBUG 
[net.shibboleth.idp.session.impl.StorageBackedIdPSession:90] - Updating 
expiration of master record for session 
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0 to 
2016-02-02T12:14:44.673-08:00
2016-02-02 11:14:44,673 - DEBUG 
[net.shibboleth.idp.cas.flow.impl.ValidateIdpSessionAction:91] - Session 
3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0 
expired=false
2016-02-02 11:14:45,212 - INFO [Shibboleth-Audit.SSO:241] - 
20160202T191445Z||3bc14bcbe2cddd2a5d11079ec2cb352c0fd774e2f5e46729bbf03ba0faef7af0|https://ldap-cgi2.dev.sonoma.edu/portal/index.cgi|https://www.apereo.org/cas/protocol/serviceValidate||||biggsb|||biggsb|ST-1454440484132-NQj5toJoKOBk3ZSRFlAd3cQxm|


(BTW, it's a bit weird seeing 
"https://www.apereo.org/cas/protocol/serviceValidate" in the logs since 
i have no references to it...)

Thanks for looking
-Brian

On 02/02/2016 10:36 AM, Marvin Addison wrote:
>
>     idp.session.StorageService = shibboleth.StorageService
>     idp.cas.StorageService=shibboleth.StorageService
>
>
> That should work. Can you share some logs? You should never need to 
> increase the ticket timeout beyond the default.
>
> M
>
>
>

-- 

Brian Biggs
Sonoma State University

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160202/1e96160b/attachment.html>