CAS单点登录的一个异常求解

cas-server-3.4.3.1
cas-client-3.2.1
tomcat：6.0.35
jdk：1.6.0_10，
登录服务时，系统跳转到CAS登录页面，输入用户名密码，server端日志显示验证通过，然后出现下面的问题，三次之后抛出500异常

org.xml.sax.SAXParseException: The element type "label" must be terminated by the matching end-tag "</label>".

org.xml.sax.SAXParseException: The element type "label" must be terminated by the matching end-tag "</label>".

	at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:195)

	at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.fatalError(ErrorHandlerWrapper.java:174)

	at com.sun.org.apache.xerces.internal.impl.XMLErrorReporter.reportError(XMLErrorReporter.java:388)

	at com.sun.org.apache.xerces.internal.impl.XMLScanner.reportFatalError(XMLScanner.java:1411)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1741)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2930)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:648)

	at com.sun.org.apache.xerces.internal.impl.XMLNSDocumentScannerImpl.next(XMLNSDocumentScannerImpl.java:140)

	at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:510)

	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:807)

	at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:737)

	at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:107)

	at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.parse(AbstractSAXParser.java:1205)

	at org.jasig.cas.client.util.XmlUtils.getTextForElement(XmlUtils.java:164)

	at org.jasig.cas.client.validation.Cas20ServiceTicketValidator.parseResponseFromServer(Cas20ServiceTicketValidator.java:90)

	at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:217)

	at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:169)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:116)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:76)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88)

	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at com.jspbook.GZIPFilter.doFilter(GZIPFilter.java:28)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)

	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)

	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)

	at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:877)

	at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:594)

	at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1675)

	at java.lang.Thread.run(Thread.java:619)

500空指针异常：

2012-9-19 17:54:00 org.apache.catalina.core.StandardWrapperValve invoke

严重: Servlet.service() for servlet jsp threw exception

java.lang.NullPointerException

	at java.util.concurrent.ConcurrentHashMap.get(ConcurrentHashMap.java:768)

	at org.jasig.cas.client.proxy.ProxyGrantingTicketStorageImpl.retrieve(ProxyGrantingTicketStorageImpl.java:85)

	at org.jasig.cas.client.validation.Cas20ServiceTicketValidator.parseResponseFromServer(Cas20ServiceTicketValidator.java:91)

	at org.jasig.cas.client.validation.AbstractUrlBasedTicketValidator.validate(AbstractUrlBasedTicketValidator.java:217)

	at org.jasig.cas.client.validation.AbstractTicketValidationFilter.doFilter(AbstractTicketValidationFilter.java:169)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.jasig.cas.client.authentication.AuthenticationFilter.doFilter(AuthenticationFilter.java:116)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.jasig.cas.client.session.SingleSignOutFilter.doFilter(SingleSignOutFilter.java:76)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88)

	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at com.jspbook.GZIPFilter.doFilter(GZIPFilter.java:28)

	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)

	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)

	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)

	at org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:877)

	at org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:594)

	at org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1675)

	at java.lang.Thread.run(Thread.java:619)

--------------------编程问答-------------------- 、、、、没人遇见过么？ --------------------编程问答-------------------- 耶鲁的东西。。建议贴到stackoverflow上面去！~~ --------------------编程问答-------------------- 额我也要做单点登录了。。。唉 --------------------编程问答-------------------- stackoverflow太专业了英文不好看不太懂 --------------------编程问答-------------------- 看你的异常信息,是在ticket验证中出错了,说明服务器端正常返回了,但是返回的xml片段不能被正常解析

casServiceValidationSuccess.jsp这个文件有改动过吗?

还有,把你在ticket验证过程的xml返回信息贴出来看看 --------------------编程问答-------------------- 刚刚经历过这件事情。非常操蛋的一个配置错误。在你的application的web.xml中（不是sso的web.xml）。CAS Authentication Filter和CAS Validation Filter的casServerUrlPrefix是不一样的。



注意是/login，登录的URL

  <filter>

    <filter-name>CAS Authentication Filter</filter-name>

    <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>

    <init-param>

        <param-name>casServerLoginUrl</param-name>

        <param-value>https://battags.ad.ess.rutgers.edu:8443/cas/login</param-value>

    </init-param>

  </filter>



注意是没有/login的根目录

  <filter>

    <filter-name>CAS Validation Filter</filter-name>

    <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>

    <init-param>

        <param-name>casServerUrlPrefix</param-name>

        <param-value>https://battags.ad.ess.rutgers.edu:8443/cas</param-value>

    </init-param>

  </filter>

一般我们会习惯性的都配置成加/login的地址，Validation就会一直帮你解析这个login页面就会一直报错，而这个错误又不是特别的明确，搞得一头雾水不知道该怎么办。。。 --------------------编程问答--------------------

引用 6 楼 shallowlong 的回复:

刚刚经历过这件事情。非常操蛋的一个配置错误。在你的application的web.xml中（不是sso的web.xml）。CAS Authentication Filter和CAS Validation Filter的casServerUrlPrefix是不一样的。



注意是/login，登录的URL

  <filter>

    <filter-name>CAS Authentication Filter</filter-name>

    <filter-class>org.jasig.cas.client.authentication.AuthenticationFilter</filter-class>

    <init-param>

        <param-name>casServerLoginUrl</param-name>

        <param-value>https://battags.ad.ess.rutgers.edu:8443/cas/login</param-value>

    </init-param>

  </filter>



注意是没有/login的根目录

  <filter>

    <filter-name>CAS Validation Filter</filter-name>

    <filter-class>org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter</filter-class>

    <init-param>

        <param-name>casServerUrlPrefix</param-name>

        <param-value>https://battags.ad.ess.rutgers.edu:8443/cas</param-value>

    </init-param>

  </filter>

一般我们会习惯性的都配置成加/login的地址，Validation就会一直帮你解析这个login页面就会一直报错，而这个错误又不是特别的明确，搞得一头雾水不知道该怎么办。。。

太他妈操蛋了，就这问题，让我找了整整一天，无意中看到你这么说，我还没当回事，可没想到还就是这问题啊。。

补充：Java ,  Java EE