If the CAS Server responds to python-cas with a 403 and an error html page, it still tries to parse the response as if it were XML to be interpreted as a CAS ticket verification response. Shouldn't there be an exception raised before it gets to the XML parsing to indicate that something other than a 200 level HTTP status code was received?