CAS Ticket storage in v3.3
Andrew Morgan
morgan at orst.edu
Wed Jan 18 13:34:12 EST 2017
Are CAS Service Tickets stored differently in v3.3?
I'm testing my IDP upgrade from v3.2 to v3.3 in my DEV environment, and I
found that tickets generated on a node running v3.3 cannot be validated on
a different node running v3.2. I turned up the log level and captured
this failed validation on the v3.2 node:
2017-01-18 09:50:26,952 - DEBUG [net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:92] - Attempting to validate ST-1484761826751-azH1gRsUd63kozSBauhHAujld
2017-01-18 09:50:26,952 - DEBUG [net.shibboleth.idp.cas.ticket.impl.SimpleTicketService:226] - Reading ST-1484761826751-azH1gRsUd63kozSBauhHAujld
2017-01-18 09:50:26,957 - DEBUG [net.shibboleth.idp.cas.flow.impl.ValidateTicketAction:104] - CAS ticket retrieval failed with error: {}
java.lang.IllegalArgumentException: Expected 4 fields but got 1
at net.shibboleth.idp.cas.ticket.serialization.impl.ServiceTicketSerializer.createTicket(ServiceTicketSerializer.java:47)
2017-01-18 09:50:26,959 - INFO [Shibboleth-Audit.SSO:241] - 20170118T175026Z|||http://people.oregonstate.edu/~morgan/CAS-1.3.4/test.php|https://www.apereo.org/cas/protocol/serviceValidate||||||||ST-1484761826751-azH1gRsUd63kozSBauhHAujld|
My CAS client gets an Invalid Ticket error.
Ticket validation works fine when both nodes are v3.2 or both nodes are
v3.3, but mixed versions do not work.
Thanks,
Andy
More information about the users
mailing list