Folks We called a CAS protected REST Service using the Proxy Ticket. In the CAS client in tomcat - we changed the order of filters to first perform Validation and then perform Authentication.
On the CAS server side - we are getting the following error: 2022-07-10 17:58:44,858 DEBUG [org.apereo.cas.ticket.registry.AbstractMapBasedTicketRegistry] - <Added ticket [PT-6-eZteQYrBDZiJdmSuG6jY2LbPdO0-cas] to registry.> 2022-07-10 17:58:44,858 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: ritesh@xxxx WHAT: PT-6-eZteQYrBDZiJdmSuG6jY2LbPdO0-cas for https://casclient.xxxx/basic-struts/ ACTION: *SERVICE_TICKET_VALIDATE_SUCCESS* APPLICATION: CAS WHEN: Sun Jul 10 17:58:44 CEST 2022 CLIENT IP ADDRESS: 127.0.0.1 SERVER IP ADDRESS: 127.0.1.1 ============================================================= > 2022-07-10 17:58:44,859 WARN [org.apereo.cas.validation.AbstractCasProtocolValidationSpecification] - <[ *Cas20WithoutProxyingValidationSpecification*] *is not internally satisfied by the produced assertion>* 2022-07-10 17:58:44,859 WARN [org.apereo.cas.web.AbstractServiceValidateController] - <Service ticket [PT-6-eZteQYrBDZiJdmSuG6jY2LbPdO0-cas] *does not satisfy validation specification.>* *We are getting the above error - after the PT has been validated as successful. * *Question: *what is to be done on server side to ensure that the CAS server uses the *correct validation specification? *Here on server side its passing the request to *Cas20WithoutProxyingValidationSpecification - *even though *we are posting a proxy ticket to the server *and its validating it successfully in the error messages shown. Am i missing some configuration etc to be provided? Please Help. Best regards Ritesh -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ebed3ea8-387f-4dc5-81fe-fac92697d5edn%40apereo.org.
