Because STs can only be used once. Once it’s validated, it’s gone and you cannot manually re-validate it.
From: [email protected] [mailto:[email protected]] On Behalf Of William Sent: Monday, May 2, 2016 1:15 PM To: CAS Community <[email protected]> Subject: [cas-user] /p3/serviceValidate returning "Ticket...not recognized" I am running CAS 4.2.1. After I login and receive a service ticket, I cannot validate it against the "/p3/serviceValidate" endpoint. I have set the "st.timeToKillInSeconds" to a long value. My URL looks like the following: https://localhost:8443/cas/p3/serviceValidate?service=https%3A%2F%2Flocalhost%3A8443%2Fprotected-web-app%2F <https://localhost:8443/cas/p3/serviceValidate?service=https%3A%2F%2Flocalhost%3A8443%2Fprotected-web-app%2F&ticket=ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org> &ticket=ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org I receive this error back: <cas:serviceResponse xmlns:cas="http://www.yale.edu/tp/cas";> <cas:authenticationFailure code="INVALID_TICKET"> Ticket 'ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org' not recognized </cas:authenticationFailure> </cas:serviceResponse> The CAS log is showing the ticket was successfully validated after login, and when I try to validate it manually then it says validation failed: 2016-05-02 16:08:03,352 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org ACTION: SERVICE_TICKET_VALIDATED APPLICATION: CAS WHEN: Mon May 02 16:08:03 EDT 2016 CLIENT IP ADDRESS: 127.0.0.1 SERVER IP ADDRESS: 127.0.0.1 ============================================================= > 2016-05-02 16:08:03,397 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Service ticket [ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org] does not exist.> 2016-05-02 16:08:03,398 INFO [org.jasig.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: audit:unknown WHAT: ST-6-fkKdVYPFypWKiqsThVfw-cas01.example.org ACTION: SERVICE_TICKET_VALIDATE_FAILED APPLICATION: CAS WHEN: Mon May 02 16:08:03 EDT 2016 CLIENT IP ADDRESS: 0:0:0:0:0:0:0:1 SERVER IP ADDRESS: 0:0:0:0:0:0:0:1 ============================================================= I noticed the IP addresses are a mixture of IPv4 and IPv6. I don't know if that would make a difference or not. Any ideas on this? Regards, William Crowell -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To post to this group, send email to [email protected] <mailto:[email protected]> . Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/b4f8eb70-5b3e-4177-b352-1e40361615e2%40apereo.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/b4f8eb70-5b3e-4177-b352-1e40361615e2%40apereo.org?utm_medium=email&utm_source=footer> . For more options, visit https://groups.google.com/a/apereo.org/d/optout. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/010c01d1a4b1%244097ec80%24c1c7c580%24%40unicon.net. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
