CAS + Glassfish + Java WebServices

[halsafar]

I have a j2ee app running on glassfishv2u2 server.  It works fine without CAS.  By works fine I mean using the ?tester and ?wsdl parameters on the service url generate a test page or the raw wsdl.  As well actual web service calls work.

If I edit web.xml and stick CASFilter in there for /* url matching (so everything is behind CAS) then some things break.  Specifically, I cannot actually make the web service calls or view the tester page, however the wsdl will still generate.  Yes I logged in through CAS first, then tested this, CAS was happy with my ticket, glassfish just dies.

Has anyone gotten CAS to work behind a glassfish app?

[ERROR] java.security.cert.CertificateException: No name matching localhost found
Failed to read the WSDL document: https://localhost:8181/Admin/ContentService?WSDL, because 1) could not find the document; /2) the document could not be read; 3) the root element of the document is not <wsdl:definitions>


The error makes me think this is not even CAS related, rather my SSL certificate has problems which CAS is complaining about?

Thanks,
Stephen Damm

[scott_battaglia]

Yes, it appears to be your SSL certificate.  Try adding to to the JVM's cacerts file.

-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia

On Wed, Jul 2, 2008 at 3:41 PM, halsafar <shinhalsafar@...> wrote:

I have a j2ee app running on glassfishv2u2 server.  It works fine without
CAS.  By works fine I mean using the ?tester and ?wsdl parameters on the
service url generate a test page or the raw wsdl.  As well actual web
service calls work.

If I edit web.xml and stick CASFilter in there for /* url matching (so
everything is behind CAS) then some things break.  Specifically, I cannot
actually make the web service calls or view the tester page, however the
wsdl will still generate.  Yes I logged in through CAS first, then tested
this, CAS was happy with my ticket, glassfish just dies.

Has anyone gotten CAS to work behind a glassfish app?

[ERROR] java.security.cert.CertificateException: No name matching localhost
found
Failed to read the WSDL document:
https://localhost:8181/Admin/ContentService?WSDL, because 1) could not find
the document; /2) the document could not be read; 3) the root element of the
document is not <wsdl:definitions>


The error makes me think this is not even CAS related, rather my SSL
certificate has problems which CAS is complaining about?

Thanks,
Stephen Damm
--
View this message in context: http://www.nabble.com/CAS-%2B-Glassfish-%2B-Java-WebServices-tp18245230p18245230.html
Sent from the CAS Users mailing list archive at Nabble.com.

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[halsafar]

Fixing that issue did not fix the problem.  It seems when any web
service calls are made, they just don't happen.  They return in error
only when CASFilter is protecting the entire web application.  If I
remove CASFilter then everything works as should.  However, this means
our web services could be called by anyone at anytime.

Thanks,
Stephen Damm

Scott Battaglia wrote:

> Yes, it appears to be your SSL certificate.  Try adding to to the
> JVM's cacerts file.
>
> -Scott
>
> -Scott Battaglia
> PGP Public Key Id: 0x383733AA
> LinkedIn: http://www.linkedin.com/in/scottbattaglia
>
> On Wed, Jul 2, 2008 at 3:41 PM, halsafar <shinhalsafar@...
> <mailto:shinhalsafar@...>> wrote:
>
>
>     I have a j2ee app running on glassfishv2u2 server.  It works fine
>     without
>     CAS.  By works fine I mean using the ?tester and ?wsdl parameters
>     on the
>     service url generate a test page or the raw wsdl.  As well actual web
>     service calls work.
>
>     If I edit web.xml and stick CASFilter in there for /* url matching (so
>     everything is behind CAS) then some things break.  Specifically, I
>     cannot
>     actually make the web service calls or view the tester page,
>     however the
>     wsdl will still generate.  Yes I logged in through CAS first, then
>     tested
>     this, CAS was happy with my ticket, glassfish just dies.
>
>     Has anyone gotten CAS to work behind a glassfish app?
>
>     [ERROR] java.security.cert.CertificateException: No name matching
>     localhost
>     found
>     Failed to read the WSDL document:
>     https://localhost:8181/Admin/ContentService?WSDL, because 1) could
>     not find
>     the document; /2) the document could not be read; 3) the root
>     element of the
>     document is not <wsdl:definitions>
>
>
>     The error makes me think this is not even CAS related, rather my SSL
>     certificate has problems which CAS is complaining about?
>
>     Thanks,
>     Stephen Damm
>     --
>     View this message in context:
>     http://www.nabble.com/CAS-%2B-Glassfish-%2B-Java-WebServices-tp18245230p18245230.html
>     Sent from the CAS Users mailing list archive at Nabble.com.
>
>     _______________________________________________
>     Yale CAS mailing list
>     cas@... <mailto:cas@...>
>     http://tp.its.yale.edu/mailman/listinfo/cas
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Yale CAS mailing list
> cas@...
> http://tp.its.yale.edu/mailman/listinfo/cas
>  

_______________________________________________
Yale CAS mailing list
cas@...
http://tp.its.yale.edu/mailman/listinfo/cas

[halsafar]

Fixing that issue did not fix the problem.  It seems when any web service calls are made, they just don't happen.  They return in error only when CASFilter is protecting the entire web application.  If I remove CASFilter then everything works as should.  However, this means our web services could be called by anyone at anytime.

scott_battaglia wrote:

Yes, it appears to be your SSL certificate.  Try adding to to the JVM's
cacerts file.

-Scott

-Scott Battaglia
PGP Public Key Id: 0x383733AA
LinkedIn: http://www.linkedin.com/in/scottbattaglia

On Wed, Jul 2, 2008 at 3:41 PM, halsafar <[e-mail]> wrote:

>
> I have a j2ee app running on glassfishv2u2 server.  It works fine without
> CAS.  By works fine I mean using the ?tester and ?wsdl parameters on the
> service url generate a test page or the raw wsdl.  As well actual web
> service calls work.
>
> If I edit web.xml and stick CASFilter in there for /* url matching (so
> everything is behind CAS) then some things break.  Specifically, I cannot
> actually make the web service calls or view the tester page, however the
> wsdl will still generate.  Yes I logged in through CAS first, then tested
> this, CAS was happy with my ticket, glassfish just dies.
>
> Has anyone gotten CAS to work behind a glassfish app?
>
> [ERROR] java.security.cert.CertificateException: No name matching localhost
> found
> Failed to read the WSDL document:
> https://localhost:8181/Admin/ContentService?WSDL, because 1) could not
> find
> the document; /2) the document could not be read; 3) the root element of
> the
> document is not <wsdl:definitions>
>
>
> The error makes me think this is not even CAS related, rather my SSL
> certificate has problems which CAS is complaining about?
>
> Thanks,
> Stephen Damm
> --
> View this message in context:
> http://www.nabble.com/CAS-%2B-Glassfish-%2B-Java-WebServices-tp18245230p18245230.html
> Sent from the CAS Users mailing list archive at Nabble.com.
>
> _______________________________________________
> Yale CAS mailing list
> [e-mail]
> http://tp.its.yale.edu/mailman/listinfo/cas
>

_______________________________________________
Yale CAS mailing list
[e-mail]
http://tp.its.yale.edu/mailman/listinfo/cas