2013-08-28 41 views
1

一個幫助請CAS憑據壞

我有一個問題,當我想用​​CAS認證的,錯誤是無效的憑證,這說明我是什麼日誌

瀏覽器

Estado HTTP 401 - Authentication Failed: Bad credential`s 

Log CAS

ServiceValidateController [ERROR] TicketException generating ticket for: [callbackUrl: https://localhost:8443/receptor] 

感謝您的時間

DispatcherServlet [DEBUG] Rendering view [org.springframework.web.servlet.view.RedirectView: unnamed; URL [https://geo.org.bo:443/geonetwork/j_spring_cas_security_check?ticket=ST-2-dLgdARnZdtPHWZa9krt9-cas]] in DispatcherServlet with name 'cas' 
DispatcherServlet [DEBUG] Successfully completed request 
DispatcherServlet [DEBUG] DispatcherServlet with name 'cas' determining Last-Modified value for [/cas/serviceValidate] 
SimpleUrlHandlerMapping [DEBUG] Mapping [/serviceValidate] to handler '[email protected]' 
DispatcherServlet [DEBUG] Last-Modified value for [/cas/serviceValidate] is: -1 
DispatcherServlet [DEBUG] DispatcherServlet with name 'cas' processing request for [/cas/serviceValidate] 
CasArgumentExtractor [DEBUG] Extractor generated service for:   https://geo.org.bo:443/j_spring_cas_security_check 
HttpBasedServiceCredentialsAuthenticationHandler [DEBUG] Attempting to resolve credentials for [callbackUrl: https://localhost:8443/receptor] 
HttpClient [DEBUG] Response Code did not match any of the acceptable response codes. Code returned was 404 
AuthenticationManagerImpl [INFO] AuthenticationHandler: org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler failed to authenticate the user which provided the following credentials: [callbackUrl:  https://localhost:8443/receptor] 
ServiceValidateController [ERROR] TicketException generating ticket for: [callbackUrl: https://localhost:8443/receptor] 
org.jasig.cas.ticket.TicketCreationException: error.authentication.credentials.bad 
at  org.jasig.cas.CentralAuthenticationServiceImpl.delegateTicketGrantingTicket(CentralAuthenticationServiceImpl.java:291) 

回答

6

此錯誤表明CAS服務器正嘗試(直接)連接到客戶端應用程序以傳遞代理授予票證(PGT)。 https://localhost:8443/receptor的網址是正在嘗試的內容,並且該應用正在返回404-Not Found。

如果您的客戶端應用程序不需要代表用戶登錄到其他CAS服務,那麼您不需要代理服務器。故障排除PGT比標準的CAS 1.0,CAS 2.0和SAML 1.1協議更加困難。

如果要使用代理的門票,那麼你可能要檢查https://wiki.jasig.org/display/CASC/Using+the+CAS+Client+3.1+with+Spring+Security

如果您不需要代理的門票,那麼你可能要檢查http://static.springsource.org/spring-security/site/docs/3.0.x/reference/cas.html