Hi Jérôme,

I.

Yes, I clean memcached (restart) when I restart my CAS (on my workstation) for testing purposes.

In debug mode, I can see what ticket is not well decoded by Kryo.

I dumped one from memcached here :

vincent@dgs-12-5912:/tmp$ telnet localhost 11211
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
get TGT-7-SuxCe4TvaSKxzzpHloAlfqJtFar1L5ziWJwbK1xgAVP5vmzPTb-cas.univ-rouen.fr VALUE TGT-7-SuxCe4TvaSKxzzpHloAlfqJtFar1L5ziWJwbK1xgAVP5vmzPTb-cas.univ-rouen.fr 0 599
authenticationMetho�LdapAuthenticationHandle򄏪̒T
esupde�LdapAuthenticationHandle�ui�esupde�eduPersonPrincipalNam�esupdem@univ-rouen.f�mai�demo.e...@inv.univ-rouen.f�displayNam�Demo Esu�eduPersonAffiliatio�affiliat�radiusFilterI�invite�esupde����̒T!!��ȁ !�л����TGT-7-SuxCe4TvaSKxzzpHloAlfqJtFar1L5ziWJwbK1xgAVP5vmzPTb-cas.univ-rouen.fr���̒T

END

So maybe there is an issue with KryoTransacoder and LdapAuthenticationHandler on 4.1.1 ?



II.

We updated our CAS production server to CAS 4.1.1 with success here today.
I simply disabled kryoTranscoder in ticketRegisry.xml and there is no more errors now.

I must admit however that the cpu load was near 100% again ... I found the error cause inspecting java threads. In fact I wrote an horrible regular expression as a serviceId in a RegexRegisteredService bean ... :
^https?://([A-Za-z0-9_-]+\.?)*-test\.univ-rouen\.fr(:[0-9-]*)?(/.*)?

I removed it and our CAS 4.1.1 works very well now :-)


Thank you for your help and have a nice WE,
Vincent.




On 23/10/2015 11:58, Jérôme LELEU wrote:
Hi,

Based on the logs you sent me privately, I see a lot of
ClassNotFoundException. I would recommend cleaning the whole cache
(restart memcached) before upgrading the CAS server: old TGT may not be
deserializable by the CAS server v4.1.

Thanks.
Best regards,
Jérôme


2015-10-23 11:04 GMT+02:00 Vincent Bonamy <vincent.bon...@univ-rouen.fr
<mailto:vincent.bon...@univ-rouen.fr>>:

    I'm using kryo-3.0.2.jar and kryo-serializers-0.35.jar

    Actuallay this version comes with cas-server-integration-memcached 4.1.1
    (see dependency  hierarchy in attachment).

    Thanks,
    Vincent.



    On 23/10/2015 10:53, Jérôme LELEU wrote:
     > Hi,
     >
     > Seeing this error:
     >
    
"com.esotericsoftware.kryo.serializers.ObjectField.write(Lcom/esotericsoftware
     > /kryo/io/Output;Ljava/lang/Object;)V", I would say that there is a
     > version issue somewhere. What's the version of the Kryo library
    in your
     > CAS server?
     >
     > Thanks.
     > Best regards,
     > Jérôme
     >
     >
     >
     > 2015-10-23 9:16 GMT+02:00 Vincent Bonamy
    <vincent.bon...@univ-rouen.fr <mailto:vincent.bon...@univ-rouen.fr>
     > <mailto:vincent.bon...@univ-rouen.fr
    <mailto:vincent.bon...@univ-rouen.fr>>>:
     >
     >     Using jmeter (I modified
     >
    
https://github.com/Jasig/cas/blob/v4.1.1/etc/jmeter/tests/simpleCasLoginTest.jmx
     >     to add execution parameter so that it works), it seems I can now
     >     reproduce easily the issue with KryoTranscoder on my dev
    workstation
     >     CAS.
     >
     >     I added a log line to have the stack trace (cf
     >     MemCacheTicketRegistry.java-error.diff).
     >
     >     Please see attached the catalina.out.
     >
     >     The same jmeter test without KryoTranscoder works well
    (without any
     >     errors).
     >
     >     Thank you,
     >     Vincent.
     >
     >
     >     On 22/10/2015 18:29, Misagh Moayyed wrote:
     >      > OK. Do provide the logs please when you get the chance.
     >      >
     >      >> -----Original Message-----
     >      >> From: Vincent Bonamy [mailto:vincent.bon...@univ-rouen.fr
    <mailto:vincent.bon...@univ-rouen.fr>
     >     <mailto:vincent.bon...@univ-rouen.fr
    <mailto:vincent.bon...@univ-rouen.fr>>]
     >      >> Sent: Thursday, October 22, 2015 9:22 AM
     >      >> To: cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org> <mailto:cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>>
     >      >> Subject: [cas-user] RE: [cas-user] CAS 4.1.1 and
    KryoTranscoder ?
     >      >>
     >      >> Actually , I logged in to a non proxied and a proxied app
     >     successfully
     >      >> just
     >      >> after the cas started.
     >      >> But because of the cpu charge (we switched on this new
    CAS for
     >     all our
     >      >> users
     >      >> at 13 o'clock today...), next the cas server couldn't
    answer anymore
     >      >> quickly
     >      >> ... and it crashed.
     >      >>
     >      >> I didn't have time to check that I could log in all our
    proxied
     >     apps ...
     >      >>
     >      >>
     >      >> Le Jeudi 22 Octobre 2015 18:01 CEST, Misagh Moayyed
     >     <mmoay...@unicon.net <mailto:mmoay...@unicon.net>
    <mailto:mmoay...@unicon.net <mailto:mmoay...@unicon.net>>>
     >      >> a
     >      >> écrit:
     >      >>
     >      >>> It's probably an issue with PGTs. Can you log into a
     >     non-proxied app?
     >      >>>
     >      >>>> -----Original Message-----
     >      >>>> From: Vincent Bonamy
    [mailto:vincent.bon...@univ-rouen.fr
    <mailto:vincent.bon...@univ-rouen.fr>
     >     <mailto:vincent.bon...@univ-rouen.fr
    <mailto:vincent.bon...@univ-rouen.fr>>]
     >      >>>> Sent: Thursday, October 22, 2015 7:04 AM
     >      >>>> To: cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org> <mailto:cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>>
     >      >>>> Subject: [cas-user] CAS 4.1.1 and KryoTranscoder ?
     >      >>>>
     >      >>>> Hi All,
     >      >>>>
     >      >>>> Today we tried to update our production CAS server on 4.1.1
     >     version.
     >      >>>> But we failed and we went back to our 3.5.2.1
     >      >>>>
     >      >>>> After starting, the CAS answered correctly and I logged
    in to my
     >      >>>> webmail (proxy cas) successfully for example.
     >      >>>>
     >      >>>> But the CPU charge was 100% and we had errors like this
    (we don't
     >      >>>> have the stack trace, I don't know why ...) :
     >      >>>> org.jasig.cas.ticket.registry.MemCacheTicketRegistry] -
    <Failed
     >      >>>> fetching
     >      >>>>
     >
      [PGT-************************************************cEQOZjuIUV-cas.
     >      >>>> univ-
     >      >>>> rouen.fr <http://rouen.fr> <http://rouen.fr>,
     >      >>>> java.lang.RuntimeException: Exception waiting for v alue] >
     >      >>>>
     >      >>>> We also got a crash of the JVM (!) :
     >      >>>> """
     >      >>>> # Problematic frame:
     >      >>>> # J
     >      >>>>
     >
      com.esotericsoftware.kryo.serializers.ObjectField.write(Lcom/esoteri
     >      >>>> csoftware /kryo/io/Output;Ljava/lang/Object;)V
     >      >>>> """"
     >      >>>>
     >      >>>> We enabled some features on this CAS 4.1.1 - we set up
    memcached
     >      >>>> like described on the doc - so we used kryoTranscoder :
     >      >>>>
    http://jasig.github.io/cas/4.1.x/installation/Memcached-Ticket-
     >      >>>> Registry.html#object-serialization
     >      >>>>
     >      >>>> So I think we will retry to update our CAS on 4.1.1 in
    production
     >      >>>> but without using this kryoTranscoder (on our 3.5.2.1
    we're using
     >      >>>> memcached without
     >      >>>> kryoTranscoder)
     >      >>>>
     >      >>>> Thanks for any ideas/advices about that.
     >      >>>> --
     >      >>>> Vincent Bonamy
     >      >>>> Pôle SI
     >      >>>> Direction de l'informatique &
     >      >>>> des systèmes d'information
     >      >>>> Université de ROUEN
     >      >>>>
     >      >>>> --
     >      >>>> You are currently subscribed to
    cas-user@lists.jasig.org <mailto:cas-user@lists.jasig.org>
     >     <mailto:cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>> as:
     >      >>>> mmoay...@unicon.net <mailto:mmoay...@unicon.net>
    <mailto:mmoay...@unicon.net <mailto:mmoay...@unicon.net>> To
     >     unsubscribe, change settings or access
     >      >>>> archives, see
    http://www.ja-sig.org/wiki/display/JSG/cas-user
     >      >>>
     >      >>> --
     >      >>> You are currently subscribed to cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>
     >     <mailto:cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>> as:
     >      >>> vincent.bon...@univ-rouen.fr
    <mailto:vincent.bon...@univ-rouen.fr>
     >     <mailto:vincent.bon...@univ-rouen.fr
    <mailto:vincent.bon...@univ-rouen.fr>> To unsubscribe, change
     >     settings or access
     >      >>> archives, see
    http://www.ja-sig.org/wiki/display/JSG/cas-user
     >      >>
     >      >>
     >      >>
     >     >>
     >     >> --
     >     >> You are currently subscribed tocas-u...@lists.jasig.org
    <mailto:tocas-u...@lists.jasig.org> <mailto:cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>> as:
     >     >>mmoay...@unicon.net <mailto:mmoay...@unicon.net>
    <mailto:mmoay...@unicon.net <mailto:mmoay...@unicon.net>> To
    unsubscribe,
     >     change settings or access archives,
     >     >> see
     >     >>http://www.ja-sig.org/wiki/display/JSG/cas-user
     >     >
     >     >
     >
     >     --
     >     You are currently subscribed to cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>
     >     <mailto:cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org>> as: lel...@gmail.com
    <mailto:lel...@gmail.com>
     >     <mailto:lel...@gmail.com <mailto:lel...@gmail.com>>
     >     To unsubscribe, change settings or access archives, see
     > http://www.ja-sig.org/wiki/display/JSG/cas-user
     >
    >
    > --
    > You are currently subscribed tocas-u...@lists.jasig.org 
<mailto:cas-user@lists.jasig.org> as:
    vincent.bon...@univ-rouen.fr <mailto:vincent.bon...@univ-rouen.fr>
    > To unsubscribe, change settings or access archives, 
seehttp://www.ja-sig.org/wiki/display/JSG/cas-user
    >

    --
    You are currently subscribed to cas-user@lists.jasig.org
    <mailto:cas-user@lists.jasig.org> as: lel...@gmail.com
    <mailto:lel...@gmail.com>
    To unsubscribe, change settings or access archives, see
    http://www.ja-sig.org/wiki/display/JSG/cas-user


--
You are currently subscribed to cas-user@lists.jasig.org as: 
vincent.bon...@univ-rouen.fr
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user


--
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to