AV,
When you add the validation filter, remember to set the endpoint as cas-sso. You may find it easier to use 'cas' as the endpoint instead of 'cas-sso' just in case there are some defaults set. Ray ________________________________ From: [email protected] <[email protected]> on behalf of Antonios Ventouris <[email protected]> Sent: August 19, 2018 23:40 To: CAS Community Subject: Re: [cas-user] Failed to validate tickets through CAS Hello Ray, Yes, the endpoint is cas-sso. So, I need to add the validation filter in the web.xml file ? Regards, AV ?? ???????, 13 ????????? 2018 - 7:47:34 ?.?. UTC+3, ? ??????? rbon ??????: Antonios, You will need a validation filter, https://github.com/apereo/java-cas-client#orgjasigcasclientvalidationcas10ticketvalidationfilter Is the CAS endpoint cas-sso? Ray On Mon, 2018-08-13 at 06:20 -0700, Antonios Ventouris wrote: Hello, I have CAS installed for SSO. I am able to login and proceed, but the ticket is not validated. Below, is what I get from logs: Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property roleGroupName on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property ticketValidatorClass on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property defaultRoles on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property principalGroupName on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property service on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property cacheAssertions on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property cacheTimeout on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule createTicketValidator WARNING: Cannot find property roleAttributeNames on org.jasig.cas.client.validation.Cas20ServiceTicketValidator Jul 6, 2018 4:11:29 PM org.jasig.cas.client.jaas.CasLoginModule login INFO: Login failed due to CAS ticket validation failure: org.jasig.cas.client.validation.TicketValidationException: Service not allowed to validate tickets. And this is how I am trying to check if the ticket is validated: http://IP:PORT/cas-sso/validate?service=IP:PORT?ticket=<ticket> The error I get is that the ticket is not validated. Do I need to add the Ticker Validation Filter in the web.xml file ? I use this: Cas10TicketValidationFilter , for ticket validation. Thank you in advance, AV -- Ray Bon Programmer analyst Development Services, University Systems 2507218831 | CLE 019 | [email protected] -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/81377a0d-6b3a-43e9-8758-cb28b7d65181%40apereo.org<https://groups.google.com/a/apereo.org/d/msgid/cas-user/81377a0d-6b3a-43e9-8758-cb28b7d65181%40apereo.org?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/1535203353870.21918%40uvic.ca.
