[Building Sakai] CAS TicketValidationException errors

[Steve Swinsburg]

Here's the Jira, steps to reproduce and possible solutions. Note it is not fixed.
https://issues.jasig.org/browse/CASC-170

Sent from my iPad

On 17/07/2013, at 16:53, Steve Swinsburg <steve.swinsburg at gmail.com> wrote:

> I've seen this and I've logged a ticket with CAS about it a while back. I'll find it. We did some detailed analysis on it.
> The stack trace comes from the CAS client before it gets back to Sakai so it's hard to make it pretty. 
> 
> Cheers
> Steve
> 
> Sent from my iPhone
> 
> On 17/07/2013, at 16:36, Stephen Marquard <stephen.marquard at uct.ac.za> wrote:
> 
>> Hi all,
>>  
>> We get the occasional error (< 1% of logins) from CAS as below. Our CAS people say that the timeout for tickets on the CAS side is set to 60s. The browser gets back a 500 response code (internal server error) and presumably a stack trace though I’ve never seen this from the UI side and am not sure how to reproduce it.
>>  
>> Has anyone else running CAS seen this, and if so is it something one should ignore, or is it fixable somehow? It seems even if the ticket has expired, Sakai should perhaps respond more gracefully to this than returning an internal server error.
>>  
>> 2013-07-16 09:04:00,758  WARN ajp-bio-8009-exec-232 org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter - org.jasig.cas.client.validation.TicketValidationException:
>>                 ticket 'ST-70439-f3tL4kFsKYNB49gKUnkY-srvslscas001.uct.ac.za' not recognized
>>  
>> org.jasig.cas.client.validation.TicketValidationException:
>>                 ticket 'ST-70439-f3tL4kFsKYNB49gKUnkY-srvslscas001.uct.ac.za' not recognized
>>  
>>         at org.jasig.cas.client.validation.Cas20ServiceTicketValidator.parseResponseFromServer(Cas20ServiceTicketValidator.java:86)
>>         at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:217)
>>         at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:169)
>>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
>>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
>>         at org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:107)
>>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
>>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
>>         at org.sakaiproject.util.RequestFilter.doFilter(RequestFilter.java:695)
>>         at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
>>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
>>         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
>>         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
>>         at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
>>         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
>>         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
>>         at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:953)
>>         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
>>         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
>>         at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:200)
>>         at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
>>         at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:310)
>>         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
>>         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>>         at java.lang.Thread.run(Thread.java:722)
>>  
>> Regards
>> Stephen
>>  
>> ---
>> Stephen Marquard, Acting Director
>> Centre for Educational Technology, University of Cape Town
>> http://www.cet.uct.ac.za
>> stephen.marquard at uct.ac.za 
>> Phone: +27-21-650-5037 Cell: +27-83-500-5290
>>  
>> UNIVERSITY OF CAPE TOWN 
>> 
>> This e-mail is subject to the UCT ICT policies and e-mail disclaimer published on our website at http://www.uct.ac.za/about/policies/emaildisclaimer/ or obtainable from +27 21 650 9111. This e-mail is intended only for the person(s) to whom it is addressed. If the e-mail has reached you in error, please notify the author. If you are not the intended recipient of the e-mail you may not use, disclose, copy, redirect or print the content. If this e-mail is not related to the business of UCT it is sent by the sender in the sender's individual capacity.
>> _______________________________________________
>> sakai-dev mailing list
>> sakai-dev at collab.sakaiproject.org
>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>> 
>> TO UNSUBSCRIBE: send email to sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20130717/eee21d6e/attachment.html