<!DOCTYPE html>
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi,</p>
<p>Acutally I'm installing IDP 5.1.3 with CAS Module, I want to
reduce the length of tickets generated by the CAS module because
my CAS clients can't handle and i can't modify my CAS clients<br>
<br>
according to this thread <a class="moz-txt-link-freetext"
href="http://shibboleth.net/pipermail/users/2017-April/035522.html">http://shibboleth.net/pipermail/users/2017-April/035522.html</a>
I just need to add the following block <alias
name="simpleTicketService" alias="shibboleth.CASTicketService"
/><br>
But the lentgh of the ticket is the same <br>
ex:
ST-AADXGZLDOJSXIMNUHZK6EISNVWHTPLARDGLLYA6W2PQCTUMTVTWOOMNCP6XVIVH33CLNXUTMJMY6TWXAO35LRQN2XXSQSRJECE33T5RY3PTGPZ45DSMWQCNA4SGUQCBL45YZ63CKKDYKCXZQGGYETTJMZ3HSYBFOSXDN3NBY7QA6G22TZBBQMH2RUJAXS3HBG7ZTNNPYQOMLYIAVQ2DWE2EKATQ6HDEU3XN2C7EF2J7K5WSVST7OVNCIGTJ5EOVQLYKEU6MEDTSYIDJJ7GAFAQMVKSMTI7MYHQE4J32T6BKJW2WABAKOCN57ZBPUDD4WAFBZ2N5S7IWQYSFT5QQ5A3IOZE77C7TJT37EQ7N6FWPU635JQ4CEO3UYURMIKZ4YSZTIJ4Y6KEKIOJIASYMHGHGSXUELEZ4B42YZIYPG2RZYGIR4JJBCRLC7UG5A----<br>
<br>
here are the contents of my cas-protocol.xml file:<br>
<br>
<br>
<?xml version="1.0" encoding="UTF-8"?><br>
<beans xmlns=<a class="moz-txt-link-rfc2396E"
href="http://www.springframework.org/schema/beans">"http://www.springframework.org/schema/beans"</a><br>
xmlns:xsi=<a class="moz-txt-link-rfc2396E"
href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a><br>
xmlns:c=<a class="moz-txt-link-rfc2396E"
href="http://www.springframework.org/schema/c">"http://www.springframework.org/schema/c"</a><br>
xmlns:p=<a class="moz-txt-link-rfc2396E"
href="http://www.springframework.org/schema/p">"http://www.springframework.org/schema/p"</a><br>
xmlns:util=<a class="moz-txt-link-rfc2396E"
href="http://www.springframework.org/schema/util">"http://www.springframework.org/schema/util"</a><br>
xsi:schemaLocation="<a class="moz-txt-link-freetext"
href="http://www.springframework.org/schema/beans">http://www.springframework.org/schema/beans</a>
<a class="moz-txt-link-freetext"
href="http://www.springframework.org/schema/beans/spring-beans.xsd">http://www.springframework.org/schema/beans/spring-beans.xsd</a><br>
<a class="moz-txt-link-freetext"
href="http://www.springframework.org/schema/context">http://www.springframework.org/schema/context</a>
<a class="moz-txt-link-freetext"
href="http://www.springframework.org/schema/context/spring-context.xsd">http://www.springframework.org/schema/context/spring-context.xsd</a><br>
<a class="moz-txt-link-freetext"
href="http://www.springframework.org/schema/util">http://www.springframework.org/schema/util</a>
<a class="moz-txt-link-freetext"
href="http://www.springframework.org/schema/util/spring-util.xsd">http://www.springframework.org/schema/util/spring-util.xsd</a>"<br>
default-init-method="initialize"<br>
default-destroy-method="destroy"><br>
<br>
<!--<br>
| The CAS service registry defines verified relying parties
by endpoint URI.<br>
| The default implementation treats the ID of each entry as
a regular expression defining a logical group of<br>
| services whose URIs match the expression.<br>
|<br>
| This bean is reloaded periodically according to
%{idp.home}/conf/services.properties.<br>
--><br>
<br>
<bean id="reloadableServiceRegistry"<br>
class="%{idp.cas.serviceRegistryClass:net.shibboleth.idp.cas.service.PatternServiceRegistry}"><br>
<property name="definitions"><br>
<list><br>
<bean
class="net.shibboleth.idp.cas.service.ServiceDefinition"<br>
c:regex="^<a class="moz-txt-link-freetext"
href="https://xx\.xx.xx/.*">https://xx\.xx.xx/.*</a>"<br>
p:group="non-proxying-services"<br>
p:authorizedToProxy="true"/><br>
<bean
class="net.shibboleth.idp.cas.service.ServiceDefinition"<br>
c:regex=<a class="moz-txt-link-rfc2396E"
href="https://xx.xx.xx/xx/.*">"https://xx.xx.xx/xx/.*"</a><br>
p:group="non-proxying-services"<br>
p:authorizedToProxy="true"/><br>
</list><br>
</property><br>
</bean><br>
<br>
<!-- Alias definition --><br>
<alias name="simpleTicketService"
alias="shibboleth.CASTicketService" /><br>
<br>
<!--<br>
| The predicate used to determine whether IdP session
validation is performed during the process of granting<br>
| a proxy ticket. When the predicate evaluates to true, an
IdP session is resolved and validated prior to<br>
| granting a proxy ticket. This feature prevents issuing
proxy tickets when an IdP session is expired, but comes<br>
| at the cost of requiring server-side storage of IdP
session data. If this is configured to a predicate that<br>
| evaluates to true under any condition, a server-side
storage service must be enabled for IdP session<br>
| storage. The most common non-default value is
"alwaysTrue."<br>
--><br>
<bean id="shibboleth.CASProxyValidateIdPSessionPredicate"
parent="shibboleth.Conditions.FALSE" /><br>
<br>
<!--<br>
| Define the list of static certificates that you trust to
secure CAS proxy callback endpoints.<br>
| Typically these are CA certificates and apply to _all_
CAS proxy callback endpoints.<br>
| This facility complements the capability to supply
relying-party-specific certificates in SAML metadata,<br>
| which is the preferred mechanism to specify CAS proxy
trust material. In the case of metadata, self-signed<br>
| certificates are recommended.<br>
--><br>
<util:list id="shibboleth.CASProxyTrustedCertificates"
value-type="java.lang.String"><br>
<!--<value>%{idp.home}/credentials/your_ca.pem</value>--><br>
</util:list><br>
<br>
</beans></p>
<p>How can I troubleshoot this issue ? </p>
Thanks, <br>
Loïc
<p></p>
<div class="moz-signature">-- <br>
<div style="font-size: 10px;"><span
style="color: rgb(58, 52, 44); font-family: "Lucida Grande", Verdana, Arial, sans-serif; font-size: 12px; line-height: 17px;"
class="Apple-style-span">
<p
style="outline-style: none; outline-width: initial; outline-color: initial; margin-top: 9px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px;"><b
style="outline: none; font-size: 13px;"><img
style="margin-top:-4px;color: rgb(0, 0, 0);font-family: Arial;font-size: 10px;float: left;"
src="cid:part1.AAGdFQDI.wEoF4nhQ@univ-toulouse.fr"
alt="Logo UT" class="">Loïc NAUD | </b><b
style="outline: none; color: rgb(0, 0, 0); font-family: Tahoma, Helvetica, Arial, sans-serif; line-height: normal; background-color: rgb(255, 255, 255);"><span
style="outline: none; font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(127, 127, 127);">Ingénieur
Systèmes</span></b> <br
style="outline-style: none; outline-width: initial; outline-color: initial;">
<i>SNUT > Infrastructure et support</i><br
style="outline-style: none; outline-width: initial; outline-color: initial;">
<b style="outline: none; color: #e05656; font-size: 14px;">Université
de Toulouse</b> <br
style="outline-style: none; outline-width: initial; outline-color: initial;">
Maison de la Recherche et de la Valorisation - MRV<br
style="outline-style: none; outline-width: initial; outline-color: initial;">
118 route de Narbonne - 31062 Toulouse Cedex 09<br
style="outline-style: none; outline-width: initial; outline-color: initial;">
Tél. : <a href="tel:05 62 25 01 28" moz-do-not-send="true">05
62 25 01 28</a> / <a href="tel:06 26 62 98 50"
moz-do-not-send="true">06 26 62 98 50</a> poste int. : 11
01 28 </p>
<p
style="outline: none; clear: left; margin-left: 7px; font-size: 11px;">
<a
style="outline-style: none; outline-width: initial; outline-color: initial; color: rgb(0, 149, 162); text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(51, 51, 51); border-bottom-style: dotted; font-size: 10px;"
title="Facebook de l'Université de Toulouse"
href="http://www.facebook.com/pages/Universit%C3%A9-de-Toulouse/189718587732582"
moz-do-not-send="true">Facebook</a> | <a
style="outline-style: none; outline-width: initial; outline-color: initial; color: rgb(0, 149, 162); text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(51, 51, 51); border-bottom-style: dotted; font-size: 10px;"
title="Compte X de l'Université de Toulouse"
href="https://x.com/Univ_Toulouse" moz-do-not-send="true">X</a> | <a
style="outline-style: none; outline-width: initial; outline-color: initial; color: rgb(0, 149, 162); text-decoration: none; border-bottom-width: 1px; border-bottom-color: rgb(51, 51, 51); border-bottom-style: dotted; font-size: 10px;"
href="http://www.univ-toulouse.fr/" moz-do-not-send="true">www.univ-toulouse.fr</a>
</p>
</span> </div>
</div>
</body>
</html>