title: CAS: Unable to validate ProxyTicketValidator
body: <p>I'm currently trying to setup a CAS server and use it to login at several local applications.</p>
  
  <p>Cas Server(https): localhost:8443 (this is working correctly)</p>
  
  <p>Application: localhost:82</p>
  
  <p>When i go to localhost:82, it instantly redirects to localhost:8443. When i try to login, it returns to localhost:82/?ticket=ST-7-THoxHvfK5FoZZsejrSLh-cas01.example.org, but it shows this error:</p>
  
  <pre><code>edu.yale.its.tp.cas.client.CASAuthenticationException: Unable to validate ProxyTicketValidator [[edu.yale.its.tp.cas.client.ProxyTicketValidator proxyList=[null] [edu.yale.its.tp.cas.client.ServiceTicketValidator casValidateUrl=[https://localhost:8443/cas/serviceValidate] ticket=[ST-5-oYvT4kciKnE3Ibx1CtRd-cas01.example.org] service=[http%3A%2F%2Flocalhost%3A82%2F] renew=false entireResponse=[
  ..(complete page's HTML code)..
  ]]]]
  edu.yale.its.tp.cas.client.CASReceipt.getReceipt(CASReceipt.java:52)
  edu.yale.its.tp.cas.client.filter.CASFilter.getAuthenticatedUser(CASFilter.java:455)
  edu.yale.its.tp.cas.client.filter.CASFilter.doFilter(CASFilter.java:378)
  </code></pre>
  
  <p>When I am trying to login, Tomcat shows the following in the server log. This indicates to me that localhost:82 is authenticated, right?</p>
  
  <pre><code>2015-04-03 09:22:40,544 INFO                     [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] -   &lt;AcceptUsersAuthenticationHandler successfully authenticated admin+password&gt;
  2015-04-03 09:22:40,544 INFO  [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - &lt;Authenticated admin with credentials [admin+password].&gt;
  2015-04-03 09:22:40,544 INFO  [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - &lt;Audit trail   record BEGIN
  =============================================================
  WHO: audit:unknown
  WHAT: supplied credentials: [admin+password]
  ACTION: AUTHENTICATION_SUCCESS
  APPLICATION: CAS
  WHEN: Fri Apr 03 09:22:40 CEST 2015
  CLIENT IP ADDRESS: 127.0.0.1
  SERVER IP ADDRESS: 127.0.0.1
  =============================================================
  
  &gt;
  2015-04-03 09:22:40,545 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - &lt;Audit trail record BEGIN
  =============================================================
  WHO: audit:unknown
  WHAT: TGT-3-I53UgV3LJICJLLtxgKcAIgSmLniIGCuPZsqWs0jLa146Secypw-cas01.example.org
  ACTION: TICKET_GRANTING_TICKET_CREATED
  APPLICATION: CAS
  WHEN: Fri Apr 03 09:22:40 CEST 2015
  CLIENT IP ADDRESS: 127.0.0.1
  SERVER IP ADDRESS: 127.0.0.1
  =============================================================
  
  &gt;
  2015-04-03 09:22:40,546 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - &lt;Granted service ticket [ST-7-THoxHvfK5FoZZsejrSLh-cas01.example.org] for service [http://localhost:82/] for user [admin]&gt;
  2015-04-03 09:22:40,546 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - &lt;Audit trail record BEGIN
  =============================================================
  WHO: admin
  WHAT: ST-7-THoxHvfK5FoZZsejrSLh-cas01.example.org for http://localhost:82/
  ACTION: SERVICE_TICKET_CREATED
  APPLICATION: CAS
  WHEN: Fri Apr 03 09:22:40 CEST 2015
  CLIENT IP ADDRESS: 127.0.0.1
  SERVER IP ADDRESS: 127.0.0.1
  =============================================================
  
  &gt;
  2015-04-03 09:22:40,622 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - &lt;Granted service ticket [ST-8-ISpe32fFhErzCeFcfUgJ-cas01.example.org] for service [http://localhost:82/favicon.ico] for user [admin]&gt;
  2015-04-03 09:22:40,622 INFO [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - &lt;Audit trail record BEGIN
  =============================================================
  WHO: admin
  WHAT: ST-8-ISpe32fFhErzCeFcfUgJ-cas01.example.org for http://localhost:82/favicon.ico
  ACTION: SERVICE_TICKET_CREATED
  APPLICATION: CAS
  WHEN: Fri Apr 03 09:22:40 CEST 2015
  CLIENT IP ADDRESS: 127.0.0.1
  SERVER IP ADDRESS: 127.0.0.1
  =============================================================
  
  &gt; 
  </code></pre>
  
  <p>I created a SSL certificate according to wiki.jasig.org/display/CASUM/Demo. I have done
  <code>keytool -genkey -alias tomcat -keypass changeit -keyalg RSA</code> (with first/last name = localhost),
  <code>keytool -export -alias tomcat -keypass changeit -file server.crt</code> and
  <code>keytool -import -file server.crt -keypass changeit -keystore ..\jre\lib\security\cacerts</code></p>
  
  <p>And in the Tomcat server.xml i added</p>
  
  <pre><code>&lt;Connector port="8443" maxHttpHeaderSize="8192"maxThreads="150" minSpareThreads="25" 
  enableLookups="false" disableUploadTimeout="true"
  acceptCount="100" scheme="https" secure="true"
  clientAuth="false" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"
  keystoreFile="C:\workspace\.keystore"
  keystorePass="changeit"
  truststoreFile="C:/Program Files/Java/jdk1.7.0_76/jre/lib/security/cacerts" 
  SSLEnabled="true" protocol="org.apache.coyote.http11.Http11Protocol" /&gt;
  </code></pre>
  
  <p>Can anyone give me a clue where to find the solution for this problem? Any help would be appreciated!   </p>