I am running CAS 4.2.1. After I login and receive a service ticket, I cannot validate it against the "/p3/serviceValidate" endpoint.
I have set the "st.timeToKillInSeconds" to a long value. My URL looks like the following: https://localhost:8443/cas/p3/serviceValidate?service=https%3A%2F%2Flocalhost%3A8443%2Fprotected-web-app%2F&ticket= *ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org* I receive this error back: <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas";> <cas:authenticationFailure code="INVALID_TICKET"> *Ticket 'ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org' not recognized* </cas:authenticationFailure> </cas:serviceResponse> The CAS log is showing the ticket was successfully validated after login, and when I try to validate it manually then it says validation failed: 2016-05-02 16:08:03,352 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: *ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org* ACTION: *SERVICE_TICKET_VALIDATED* APPLICATION: CAS WHEN: Mon May 02 16:08:03 EDT 2016 CLIENT IP ADDRESS: 127.0.0.1 SERVER IP ADDRESS: 127.0.0.1 ============================================================= > 2016-05-02 16:08:03,397 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Service ticket [ *ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org*] does not exist.> 2016-05-02 16:08:03,398 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: *ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org* ACTION: *SERVICE_TICKET_VALIDATE_FAILED* APPLICATION: CAS WHEN: Mon May 02 16:08:03 EDT 2016 CLIENT IP ADDRESS: 0:0:0:0:0:0:0:1 SERVER IP ADDRESS: 0:0:0:0:0:0:0:1 ============================================================= I noticed the IP addresses are a mixture of IPv4 and IPv6. I don't know if that would make a difference or not. Any ideas on this? Regards, William Crowell -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/b4f8eb70-5b3e-4177-b352-1e40361615e2%40apereo.org. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
