<html><head></head><body><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div></div>
<div>Thanks Joseph,</div><div>that was exactly my problem.</div><div>We have a test idp.<br></div><div>I thought that it would be enough to change the host file of the machine where browser is located.</div><div>But of course it was needed to also modify the host file of the machine where phpcas client is located.</div><div><br></div><div>Thanks again,</div><div>Dimitris<br></div><div><br></div>
<div id="yahoo_quoted_0226602366" class="yahoo_quoted">
<div style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif;font-size:13px;color:#26282a;">
<div>
On Friday, November 3, 2017, 4:21:57 PM GMT+2, Joseph Fischetti <Joseph.Fischetti@marist.edu> wrote:
</div>
<div><br></div>
<div><br></div>
<div><div dir="ltr"><div class="yqt1861297843" id="yqtfd96604">Dimitris,</div><br clear="none">Without getting too involved in the configuration, what's your test environment look like? <br clear="none"><br clear="none">Our test idp is configured the same as our production idp, and I do all of my testing with a modified host file on my local machine. Since the CAS service ticket validation process requires direct communication between the CAS service and the idp, during my initial testing/configuration I was seeing that error because the CAS service was trying to validate to our production server. I wasn't seeing the service ticket validation request in the access logs on the test server and I couldn't figure out why. I had an "of course" moment, modified the cas configuration to use the IP of our test/dev server and ignore the SSL error, and all started working.<br clear="none"><br clear="none">It's very possible that ISN'T your problem, but should be verified either way.<br clear="none"><br clear="none"><br clear="none">Joseph Fischetti <br clear="none">Linux System Administrator <br clear="none">Marist College <br clear="none"><br clear="none">-- <br clear="none">For Consortium Member technical support, see <a shape="rect" href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br clear="none">To unsubscribe from this list send an email to <a shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><div class="yqt1861297843" id="yqtfd31336"><br clear="none"></div></div></div>
</div>
</div></div></body></html>