CAS error: E_ILLEGAL_STATE

[Joseph Fischetti]

Dimitris,
Without getting too involved in the configuration, what's your test environment look like? 

Our test idp is configured the same as our production idp, and I do all of my testing with a modified host file on my local machine. Since the CAS service ticket validation process requires direct communication between the CAS service and the idp, during my initial testing/configuration I was seeing that error because the CAS service was trying to validate to our production server. I wasn't seeing the service ticket validation request in the access logs on the test server and I couldn't figure out why. I had an "of course" moment, modified the cas configuration to use the IP of our test/dev server and ignore the SSL error, and all started working.

It's very possible that ISN'T your problem, but should be verified either way.


Joseph Fischetti 
Linux System Administrator 
Marist College