Hello, I got an issue using REST. I can't validate a service ticket to get user's attributes. One of our service providers needs to authenticate our users with REST (it works here), but impossible to get the attributes by validating the ticket. (with /cas/p3/serviceValidate...) The error is 'invalid ticket' ... yet I follow the instructions from https://fawnoos.com/2019/06/12/cas61x-rest-api/ If anyone can point me in the right direction ....you can see the logs....
Thank you ----------------------- *1/ Get a TGT : * ----------------------- *Actions : * curl -k -X POST -H "Content-Type: Application/x-www-form-urlencoded" -H "Accept: application/json" https://myhost.mydomain.fr/cas/v1/tickets?service="service.mydomain.com"; -d "username=casuser&password=Mellon" *TGT-4-Jop40r5OJhCmXxnufayW-nKMtcKpD58j9YbxG2WHDU2GLq6hBZPXdtAswNK7p34jR7A-myhost* *Logs : * BEGIN ============================================================= WHO: casuser WHAT: TGT-4-********p34jR7A-pccas02 ACTION: TICKET_GRANTING_TICKET_CREATED APPLICATION: CAS WHEN: Thu Dec 07 16:00:37 CET 2023 CLIENT IP ADDRESS: 172.16.6.26 SERVER IP ADDRESS: 192.168.159.192 ============================================================= BEGIN ============================================================= WHO: casuser WHAT: {location=https://myhost.mydomain.fr/cas/v1/tickets/TGT-4-********p34jR7A-myhost, status=201-CREATED} ACTION: REST_API_TICKET_GRANTING_TICKET_CREATED APPLICATION: CAS WHEN: Thu Dec 07 16:00:37 CET 2023 CLIENT IP ADDRESS: 172.16.6.26 SERVER IP ADDRESS: 192.168.159.192 ============================================================= ---------------------------- *2/ Get a ST * ----------------------- curl -k -X POST -H "Content-Type: Application/x-www-form-urlencoded" -H "Accept: application/json" https://myhost.mydomain.fr/cas/v1/tickets/TGT-4-Jop40r5OJhCmXxnufayW-nKMtcKpD58j9YbxG2WHDU2GLq6hBZPXdtAswNK7p34jR7A-myhost?service="service.mydomain.com"; *ST-4-vodW-DXn3MSrZh1IDJ182HTy7yI-myhost* ============================================================= WHO: casuser WHAT: {ticket=ST-4-********2HTy7yI-myhost, service=myhost.mydomain} ACTION: SERVICE_TICKET_CREATED APPLICATION: CAS WHEN: Thu Dec 07 16:03:52 CET 2023 CLIENT IP ADDRESS: 172.16.6.26 SERVER IP ADDRESS: 192.168.159.192 ============================================================= ============================================================= WHO: casuser WHAT: {body=ST-4-********2HTy7yI-myhost, status=200-OK} ACTION: REST_API_SERVICE_TICKET_CREATED APPLICATION: CAS WHEN: Thu Dec 07 16:03:52 CET 2023 CLIENT IP ADDRESS: 172.16.6.26 SERVER IP ADDRESS: 192.168.159.192 ============================================================= *3/ (less than 10 seconds later) Ticket validation (to get user profile) : * curl -k https://myhost.mydomain.fr/cas/p3/serviceValidate?service=myhost.mydomain"&"ticket=ST-4-vodW-DXn3MSrZh1IDJ182HTy7yI-myhost <cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'> <cas:authenticationFailure code="INVALID_TICKET">Le ticket 'ST-4-vodW-DXn3MSrZh1IDJ182HTy7yI-pccas02' est inconnu</cas:authenticationFailure> </cas:serviceResponse> ============================================================= WHO: audit:unknown WHAT: {ticket=ST-4-********2HTy7yI-myhost, service=myhost.mydomain} ACTION: SERVICE_TICKET_VALIDATE_FAILED APPLICATION: CAS WHEN: Thu Dec 07 16:04:22 CET 2023 CLIENT IP ADDRESS: 172.16.6.26 SERVER IP ADDRESS: 192.168.159.192 ============================================================= -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/35a3f35c-c929-4116-80b0-9f46e7d372dcn%40apereo.org.
