CAS error: E_ILLEGAL_STATE

[Dimitris Maniadakis]

 Thanks Joseph,that was exactly my problem.We have a test idp.
I thought that it would be enough to change the host file of the machine where browser is located.But of course it was needed to also modify the host file of the machine where phpcas client is located.
Thanks again,Dimitris

    On Friday, November 3, 2017, 4:21:57 PM GMT+2, Joseph Fischetti <Joseph.Fischetti at marist.edu> wrote:  
 
 Dimitris,
Without getting too involved in the configuration, what's your test environment look like? 

Our test idp is configured the same as our production idp, and I do all of my testing with a modified host file on my local machine. Since the CAS service ticket validation process requires direct communication between the CAS service and the idp, during my initial testing/configuration I was seeing that error because the CAS service was trying to validate to our production server. I wasn't seeing the service ticket validation request in the access logs on the test server and I couldn't figure out why. I had an "of course" moment, modified the cas configuration to use the IP of our test/dev server and ignore the SSL error, and all started working.

It's very possible that ISN'T your problem, but should be verified either way.


Joseph Fischetti 
Linux System Administrator 
Marist College 

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171107/e6fa27cc/attachment.html>