CAS tickets length/format

[Mircea Baciu]

Hi,

We have an IdP version 3.3.1 working, with CAS enabled. I managed to
migrate most of the SPs off a JA-SIG CAS server to Shibboleth IdP with no
issues, except for one old Ruby on Rails application. After a successful
IdP login, the browser gets back to the SP and displays an 500 error.

Digging into this I found out that the IdP is passing a ticket that is way
longer and its format is different than what the CAS server is generating.

Here's a ticket from IdP:
ST-AAhzZWNyZXQyMLjnIZ_lGXRqhpMw2sKmON-CHB_KixeV_Mr35-aB46_zutFyEXiVESYYRgTX7JexOSd2MjxVFoe0fIwcTqf6bTQUjlHiJudA_GRbzXGtpXJzQEtJMtVVlKfPr7QSLP-ppxmE8RbMvB9SQuKmXb0bXinRTrpO4GM_jZkQBAOxARnHSEzN2ATd5qVgkfSHTGCTNs-fJJ-hzw1zJnURH8IDskoqN0xQkeOE--CDOPB5UpoMgeIIRKP9lZaJApg-mgANUzI4UnrFgpoUMpQRfpIHKt2wJX_dILBBtZqSs5VW7Hlw

The CAS server ticket looks like this:
ST-14868-0AvPvOss9kIUvFmCBhDi-login.simmons.edu

My feeling is that the application's CAS client is not happy to see such a
long ticket and that causes the error.

Is there way to control the length and/or format of the ST tickets
generated by the IdP?

Thanks,
Mircea

--
Mircea Baciu, Sr. Unix Systems Administrator
Simmons College, Boston, MA
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170420/f238ba5f/attachment.html>