Thanks for your help. Issue #1838 has been created and my overlay has been pushed to the cas-issues repository.
On Thursday, June 16, 2016 at 3:01:54 PM UTC-6, Misagh Moayyed wrote: > > OK. Go ahead and submit an issue please. Don’t forget to post your > overlay, assuming you’re running an overlay. > > > > *From:* cas...@apereo.org <javascript:> [mailto:cas...@apereo.org > <javascript:>] *On Behalf Of *Klint > *Sent:* Thursday, June 16, 2016 12:32 PM > *To:* CAS Developer <cas...@apereo.org <javascript:>> > *Cc:* mmoa...@unicon.net <javascript:> > *Subject:* Re: [cas-dev] CAS v5 M2 Principal Attribute Per Application > (Duo) > > > > Okay I commented out the line and restarted the CAS, but am still getting > the same result. I also changed the principalAttributeValueToMatch value to > z a value that should not exists in any of the groups in memberOf. Here are > the logs after I commented out cas.mfa.principal.attributes > > > > ______ ___ _____ > > / ____// | / ___/ > > / / / /| | \__ \ > > / /___ / ___ | ___/ / > > \____//_/ |_|/____/ > > > > ******************** Welcome to CAS ******************* > > CAS Version: 5.0.0.M2 > > Build Date/Time: 2016-06-13T19:40:38Z > > Java Home: /usr/lib/jvm/java-8-openjdk-amd64/jre > > Java Vendor: Oracle Corporation > > Java Version: 1.8.0_91 > > OS Architecture: amd64 > > OS Name: Linux > > OS Version: 3.2.0-101-generic > > ******************************************************* > > > > 2016-06-16 13:07:37,838 INFO > [org.apereo.cas.web.CasWebApplicationServletInitializer] - <The following > profiles are active: native> > > 2016-06-16 13:07:41,919 WARN > [org.springframework.context.annotation.ConfigurationClassPostProcessor] - > <Cannot enhance @Configuration bean definition 'refreshScope' since its > singleton instance has been created too early. The typical cause is a > non-static @Bean method with a BeanDefinitionRegistryPostProcessor return > type: Consider declaring such methods as 'static'.> > > 2016-06-16 13:07:48,996 DEBUG > [org.apereo.cas.adaptors.duo.DuoApplicationContextWrapper] - <Adding > org.apereo.cas.adaptors.duo.DuoAuthenticationHandler@1da94dc <javascript:> > and null to application context> > > 2016-06-16 13:07:49,445 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Initializing > LDAP attribute configuration.> > > 2016-06-16 13:07:49,445 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Configured to > retrieve principal id attribute sAMAccountName> > > 2016-06-16 13:07:49,458 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Configured to > retrieve principal attribute collection of [displayName, mail, memberOf]> > > 2016-06-16 13:07:49,458 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <LDAP > authentication entry attributes are mail> > > 2016-06-16 13:07:49,530 DEBUG > [org.apereo.cas.adaptors.duo.DuoApplicationContextWrapper] - <Adding > org.apereo.cas.adaptors.duo.DuoAuthenticationMetaDataPopulator@67f2c4e9 > <javascript:> to application context> > > 2016-06-16 13:07:49,692 DEBUG > [org.apereo.cas.adaptors.duo.web.flow.DuoMultifactorWebflowConfigurer] - > <Initializing CAS webflow configuration...> > > 2016-06-16 13:07:50,765 DEBUG > [org.apereo.cas.adaptors.duo.web.flow.DuoMultifactorWebflowConfigurer] - > <Retrieved action state realSubmit> > > 2016-06-16 13:07:50,766 DEBUG > [org.apereo.cas.adaptors.duo.web.flow.DuoMultifactorWebflowConfigurer] - > <Added transition mfa-duo to the state realSubmit> > > 2016-06-16 13:07:50,822 DEBUG > [org.apereo.cas.adaptors.duo.web.flow.DuoMultifactorWebflowConfigurer] - > <Registering flow definition [mfa-duo]> > > 2016-06-16 13:07:50,823 DEBUG > [org.apereo.cas.adaptors.duo.web.flow.DuoMultifactorWebflowConfigurer] - > <Added transition mfa-duo to the state > initialAuthenticationRequestValidationCheck> > > 2016-06-16 13:07:51,058 WARN [org.apereo.cas.util.NoOpCipherExecutor] - > <[org.apereo.cas.util.NoOpCipherExecutor] does no encryption and may NOT be > safe in a production environment. Consider using other choices, such as > [org.apereo.cas.util.BaseStringCipherExecutor] to handle encryption, > signing and verification of all appropriate values.> > > 2016-06-16 13:08:01,202 INFO > [org.apereo.cas.ticket.registry.DefaultTicketRegistry] - <Preparing to > schedule job to clean up after tickets...> > > 2016-06-16 13:08:01,209 DEBUG > [org.apereo.cas.ticket.registry.DefaultTicketRegistry] - <Scheduling > DefaultTicketRegistry job> > > 2016-06-16 13:08:01,212 INFO > [org.apereo.cas.ticket.registry.DefaultTicketRegistry] - > <DefaultTicketRegistry will clean tickets every 2 minutes> > > 2016-06-16 13:08:01,487 DEBUG > [org.apereo.cas.web.support.DefaultCasCookieValueManager] - <Using cipher > [class > org.apereo.cas.util.TGCCipherExecutor$$EnhancerBySpringCGLIB$$4450d8f8 to > encrypt and decode the cookie> > > 2016-06-16 13:08:02,319 DEBUG [org.apereo.cas.util.TGCCipherExecutor] - > <Initialized cipher encryption sequence via [A128CBC-HS256]> > > 2016-06-16 13:08:02,679 DEBUG > [org.apereo.cas.web.view.Cas30JsonResponseView] - <Initializing > Cas30JsonResponseView> > > 2016-06-16 13:08:02,870 DEBUG > [org.apereo.cas.services.DefaultServicesManagerImpl] - <Loading services > from JsonServiceRegistryDao> > > 2016-06-16 13:08:02,916 DEBUG > [org.apereo.cas.services.ServiceRegistryConfigWatcher] - <Created service > registry watcher for events of type ENTRY_CREATE> > > 2016-06-16 13:08:02,918 DEBUG > [org.apereo.cas.services.ServiceRegistryConfigWatcher] - <Watching service > registry directory at > /opt/apache-tomcat-8.0.36/webapps/cas/WEB-INF/classes/services> > > 2016-06-16 13:08:02,918 DEBUG > [org.apereo.cas.services.AbstractResourceBasedServiceRegistryDao] - > <Started service registry watcher thread> > > 2016-06-16 13:08:03,203 DEBUG > [org.apereo.cas.services.DefaultServicesManagerImpl] - <Adding registered > service ^(http|imaps)://.*> > > 2016-06-16 13:08:03,203 DEBUG > [org.apereo.cas.services.DefaultServicesManagerImpl] - <Adding registered > service ^https://www.apereo.org> > > 2016-06-16 13:08:03,203 INFO > [org.apereo.cas.services.DefaultServicesManagerImpl] - <Loaded 2 services > from JsonServiceRegistryDao.> > > 2016-06-16 13:08:03,278 DEBUG > [org.apereo.cas.web.support.InMemoryThrottledSubmissionByIpAddressAndUsernameHandlerInterceptorAdapter] > > - <Calculated threshold rate as 1.6666666666666667> > > 2016-06-16 13:08:03,301 DEBUG > [org.apereo.cas.web.support.InMemoryThrottledSubmissionByIpAddressHandlerInterceptorAdapter] > > - <Calculated threshold rate as 1.6666666666666667> > > 2016-06-16 13:08:03,335 DEBUG > [org.apereo.cas.web.support.InspektrThrottledSubmissionByIpAddressAndUsernameHandlerInterceptorAdapter] > > - <Calculated threshold rate as 1.6666666666666667> > > 2016-06-16 13:08:03,336 DEBUG > [org.apereo.cas.web.support.InspektrThrottledSubmissionByIpAddressAndUsernameHandlerInterceptorAdapter] > > - <No data source is defined for inspektrIpAddressUsernameThrottle. > Ignoring the construction of JDBC template> > > 2016-06-16 13:08:03,857 INFO > [org.apereo.cas.web.CasWebApplicationServletInitializer] - <Started > CasWebApplicationServletInitializer in 29.453 seconds (JVM running for > 43.932)> > > 2016-06-16 13:08:21,099 INFO > [org.apache.catalina.util.SessionIdGeneratorBase] - <Creation of > SecureRandom instance for session ID generation using [SHA1PRNG] took > [17,221] milliseconds.> > > 16-Jun-2016 13:08:21.129 INFO [localhost-startStop-1] > org.apache.catalina.startup.HostConfig.deployWAR Deployment of web > application archive /opt/apache-tomcat-8.0.36/webapps/cas.war has finished > in 60,122 ms > > 16-Jun-2016 13:08:21.135 INFO [main] > org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler > ["http-nio-8080"] > > 16-Jun-2016 13:08:21.145 INFO [main] > org.apache.coyote.AbstractProtocol.start Starting ProtocolHandler > ["ajp-nio-8009"] > > 16-Jun-2016 13:08:21.146 INFO [main] > org.apache.catalina.startup.Catalina.start Server startup in 60181 ms > > 2016-06-16 13:08:21,237 DEBUG > [org.apereo.cas.util.CasSpringBeanJobFactory] - <Created job > org.apereo.cas.ticket.registry.DefaultTicketRegistry@351e3e3a > <javascript:> for bundle org.quartz.spi.TriggerFiredBundle@1d5d18f > <javascript:>> > > 2016-06-16 13:08:21,249 DEBUG > [org.apereo.cas.util.CasSpringBeanJobFactory] - <Autowired job per the > application context> > > 2016-06-16 13:08:21,254 DEBUG > [org.apereo.cas.ticket.registry.DefaultTicketRegistry] - <Beginning ticket > cleanup...> > > 2016-06-16 13:08:25,940 INFO > [org.apereo.cas.web.flow.InitialFlowSetupAction] - <Setting path for > cookies for warn cookie generator to: /cas/ > > > 2016-06-16 13:08:25,952 INFO > [org.apereo.cas.web.flow.InitialFlowSetupAction] - <Setting path for > cookies for TGC cookie generator to: /cas/ > > > 2016-06-16 13:08:25,993 DEBUG > [org.apereo.cas.web.support.DefaultArgumentExtractor] - <Created > http://hadoopdev1.example.com based on > org.apereo.cas.authentication.principal.WebApplicationServiceFactory@9643a8e > <javascript:>> > > 2016-06-16 13:08:25,993 DEBUG > [org.apereo.cas.web.support.DefaultArgumentExtractor] - <Extractor > generated service type > org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl > for: http://hadoopdev1.example.com> > > 2016-06-16 13:08:25,994 DEBUG > [org.apereo.cas.web.flow.InitialFlowSetupAction] - <Placing service in > context scope: [http://hadoopdev1.example.com]> > > 2016-06-16 13:08:26,021 DEBUG [org.apereo.cas.util.RegexUtils] - <Pattern > ^(http|imaps)://.* is a valid regex.> > > 2016-06-16 13:08:26,023 DEBUG > [org.apereo.cas.web.flow.InitialFlowSetupAction] - <Placing registered > service [^(http|imaps)://.*] with id [100] in context scope> > > 2016-06-16 13:08:26,047 DEBUG [org.apereo.cas.web.support.WebUtils] - > <Evaluating request to determine if warning cookie should be generated> > > 2016-06-16 13:08:26,048 DEBUG > [org.apereo.cas.web.WarningCookieRetrievingCookieGenerator] - <Removed > cookie with name [CASPRIVACY]> > > 2016-06-16 13:08:26,057 DEBUG > [org.apereo.cas.web.flow.resolver.RankedAuthenticationProviderWebflowEventResolver] > > - <Resolved single event [success] via > [org.apereo.cas.web.flow.resolver.RankedAuthenticationProviderWebflowEventResolver] > > for this context> > > 2016-06-16 13:08:26,081 DEBUG > [org.apereo.cas.web.flow.InitializeLoginAction] - <Initialized login > sequence> > > 2016-06-16 13:08:26,321 DEBUG > [org.apereo.cas.web.support.DefaultArgumentExtractor] - <Created > http://hadoopdev1.example.com based on > org.apereo.cas.authentication.principal.WebApplicationServiceFactory@9643a8e > <javascript:>> > > 2016-06-16 13:08:26,321 DEBUG > [org.apereo.cas.web.support.DefaultArgumentExtractor] - <Extractor > generated service type > org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl > for: http://hadoopdev1.example.com> > > 2016-06-16 13:08:26,960 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code [cas.login.pagetitle]> > > 2016-06-16 13:08:26,961 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file > found for [classpath:custom_messages_en_US] - neither plain properties nor > XML> > > 2016-06-16 13:08:26,962 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [cas.login.pagetitle]> > > 2016-06-16 13:08:26,963 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file > found for [classpath:messages_en_US] - neither plain properties nor XML> > > 2016-06-16 13:08:26,963 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [cas.login.pagetitle] cannot be found in the language bundle for the locale > [en_US]> > > 2016-06-16 13:08:26,965 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file > found for [classpath:custom_messages_en] - neither plain properties nor XML> > > 2016-06-16 13:08:26,966 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file > found for [classpath:custom_messages] - neither plain properties nor XML> > > 2016-06-16 13:08:26,967 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file > found for [classpath:messages_en] - neither plain properties nor XML> > > 2016-06-16 13:08:26,967 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Loading properties > [messages.properties] with encoding 'UTF-8'> > > 2016-06-16 13:08:27,086 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code [logo.title]> > > 2016-06-16 13:08:27,086 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [logo.title]> > > 2016-06-16 13:08:27,086 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [logo.title] cannot be found in the language bundle for the locale [en_US]> > > 2016-06-16 13:08:27,094 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.cookies.disabled.title]> > > 2016-06-16 13:08:27,094 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.cookies.disabled.title]> > > 2016-06-16 13:08:27,094 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.cookies.disabled.title] cannot be found in the language bundle for > the locale [en_US]> > > 2016-06-16 13:08:27,095 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.cookies.disabled.message]> > > 2016-06-16 13:08:27,095 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.cookies.disabled.message]> > > 2016-06-16 13:08:27,095 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.cookies.disabled.message] cannot be found in the language bundle > for the locale [en_US]> > > 2016-06-16 13:08:27,101 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [cas.login.resources.header]> > > 2016-06-16 13:08:27,102 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [cas.login.resources.header]> > > 2016-06-16 13:08:27,102 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [cas.login.resources.header] cannot be found in the language bundle for the > locale [en_US]> > > 2016-06-16 13:08:27,103 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [cas.login.resources.wiki]> > > 2016-06-16 13:08:27,103 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [cas.login.resources.wiki]> > > 2016-06-16 13:08:27,103 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [cas.login.resources.wiki] cannot be found in the language bundle for the > locale [en_US]> > > 2016-06-16 13:08:27,104 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [cas.login.resources.issuetracker]> > > 2016-06-16 13:08:27,104 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [cas.login.resources.issuetracker]> > > 2016-06-16 13:08:27,104 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [cas.login.resources.issuetracker] cannot be found in the language bundle > for the locale [en_US]> > > 2016-06-16 13:08:27,105 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [cas.login.resources.mailinglist]> > > 2016-06-16 13:08:27,105 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [cas.login.resources.mailinglist]> > > 2016-06-16 13:08:27,106 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [cas.login.resources.mailinglist] cannot be found in the language bundle > for the locale [en_US]> > > 2016-06-16 13:08:27,113 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code [cas.login.pagetitle]> > > 2016-06-16 13:08:27,113 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [cas.login.pagetitle]> > > 2016-06-16 13:08:27,114 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [cas.login.pagetitle] cannot be found in the language bundle for the locale > [en_US]> > > 2016-06-16 13:08:27,122 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.instructions]> > > 2016-06-16 13:08:27,123 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.welcome.instructions]> > > 2016-06-16 13:08:27,123 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.instructions] cannot be found in the language bundle for > the locale [en_US]> > > 2016-06-16 13:08:27,123 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.label.netid]> > > 2016-06-16 13:08:27,124 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [screen.welcome.label.netid]> > > 2016-06-16 13:08:27,124 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.label.netid] cannot be found in the language bundle for the > locale [en_US]> > > 2016-06-16 13:08:27,125 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.label.netid.accesskey]> > > 2016-06-16 13:08:27,125 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.welcome.label.netid.accesskey]> > > 2016-06-16 13:08:27,125 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.label.netid.accesskey] cannot be found in the language > bundle for the locale [en_US]> > > 2016-06-16 13:08:27,130 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.label.password]> > > 2016-06-16 13:08:27,130 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.welcome.label.password]> > > 2016-06-16 13:08:27,131 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.label.password] cannot be found in the language bundle for > the locale [en_US]> > > 2016-06-16 13:08:27,131 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.label.password.accesskey]> > > 2016-06-16 13:08:27,131 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.welcome.label.password.accesskey]> > > 2016-06-16 13:08:27,132 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.label.password.accesskey] cannot be found in the language > bundle for the locale [en_US]> > > 2016-06-16 13:08:27,133 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code [screen.capslock.on]> > > 2016-06-16 13:08:27,133 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [screen.capslock.on]> > > 2016-06-16 13:08:27,134 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.capslock.on] cannot be found in the language bundle for the locale > [en_US]> > > 2016-06-16 13:08:27,135 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.button.login]> > > 2016-06-16 13:08:27,135 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.welcome.button.login]> > > 2016-06-16 13:08:27,135 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.button.login] cannot be found in the language bundle for > the locale [en_US]> > > 2016-06-16 13:08:27,136 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.button.clear]> > > 2016-06-16 13:08:27,136 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code > [screen.welcome.button.clear]> > > 2016-06-16 13:08:27,136 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.button.clear] cannot be found in the language bundle for > the locale [en_US]> > > 2016-06-16 13:08:27,138 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code > [screen.welcome.security]> > > 2016-06-16 13:08:27,138 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [screen.welcome.security]> > > 2016-06-16 13:08:27,138 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [screen.welcome.security] cannot be found in the language bundle for the > locale [en_US]> > > 2016-06-16 13:08:27,140 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:custom_messages_en_US] for the code [copyright]> > > 2016-06-16 13:08:27,140 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <Examining language > bundle [classpath:messages_en_US] for the code [copyright]> > > 2016-06-16 13:08:27,141 DEBUG > [org.apereo.cas.web.view.CasReloadableMessageBundle] - <The code > [copyright] cannot be found in the language bundle for the locale [en_US]> > > 2016-06-16 13:08:37,545 DEBUG [org.apereo.cas.WebflowCipherExecutor] - > <Successfully decoded value. Result in Base64-encoding is []> > > 2016-06-16 13:08:37,558 DEBUG > [org.apereo.cas.web.support.DefaultArgumentExtractor] - <Created > http://hadoopdev1.example.com based on > org.apereo.cas.authentication.principal.WebApplicationServiceFactory@9643a8e > <javascript:>> > > 2016-06-16 13:08:37,559 DEBUG > [org.apereo.cas.web.support.DefaultArgumentExtractor] - <Extractor > generated service type > org.apereo.cas.authentication.principal.SimpleWebApplicationServiceImpl > for: http://hadoopdev1.example.com> > > 2016-06-16 13:08:37,604 DEBUG [org.apereo.cas.web.support.WebUtils] - > <Evaluating request to determine if warning cookie should be generated> > > 2016-06-16 13:08:37,604 DEBUG > [org.apereo.cas.web.WarningCookieRetrievingCookieGenerator] - <Removed > cookie with name [CASPRIVACY]> > > 2016-06-16 13:08:37,620 DEBUG [org.apereo.cas.web.support.WebUtils] - > <Evaluating request to determine if warning cookie should be generated> > > 2016-06-16 13:08:37,620 DEBUG > [org.apereo.cas.web.WarningCookieRetrievingCookieGenerator] - <Removed > cookie with name [CASPRIVACY]> > > 2016-06-16 13:08:37,716 DEBUG > [org.apereo.cas.authentication.RegisteredServiceAuthenticationHandlerResolver] > > - <Authentication handlers used for this transaction are > [org.apereo.cas.authentication.LdapAuthenticationHandler@f16d1eb, > org.apereo.cas.adaptors.duo.DuoAuthenticationHandler@1da94dc <javascript:> > ]> > > 2016-06-16 13:08:37,726 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Attempting > LDAP authentication for klintholmes> > > 2016-06-16 13:08:37,761 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <LDAP response: > [org.ldaptive.auth.AuthenticationResponse@1434418651::authenticationResultCode=AUTHENTICATION_HANDLER_SUCCESS, > > resolvedDn=CN=klintholmes,OU=Users,DC=example,DC=com, > ldapEntry=[dn=CN=klintholmes,OU=Users,DC=example,DC=com[[mail[ > klint...@example.com <javascript:>]], [displayName[Klint Holmes]], > [memberOf[CN=All Students,OU=Groups,DC=example,DC=com]], > [sAMAccountName[klintholmes]]], responseControls=null, messageId=-1], > accountState=null, result=true, resultCode=SUCCESS, message=null, > controls=null]> > > 2016-06-16 13:08:37,761 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <No ldap > password policy configuration is defined> > > 2016-06-16 13:08:37,761 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <LDAP response > returned as result. Creating the final LDAP principal> > > 2016-06-16 13:08:37,761 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Creating LDAP > principal for klintholmes based on > CN=klintholmes,OU=Users,DC=example,DC=com> > > 2016-06-16 13:08:37,761 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Retrieved > principal id attribute klintholmes> > > 2016-06-16 13:08:37,772 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Found > principal attribute: [displayName[Klint Holmes]]> > > 2016-06-16 13:08:37,772 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Found > principal attribute: [mail[klint...@example.com <javascript:>]]> > > 2016-06-16 13:08:37,772 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Found > principal attribute: [memberOf[CN=All > Students,OU=Groups,DC=example,DC=com]]> > > 2016-06-16 13:08:37,772 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Principal > attribute: [memberOf[CN=All Students,OU=Groups,DC=example,DC=com]] is > multivalued> > > 2016-06-16 13:08:37,772 DEBUG > [org.apereo.cas.authentication.LdapAuthenticationHandler] - <Created LDAP > principal for id klintholmes and 4 attributes> > > 2016-06-16 13:08:37,788 INFO > [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - > <LdapAuthenticationHandler successfully authenticated klintholmes> > > 2016-06-16 13:08:37,788 DEBUG > [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <No > resolver configured for LdapAuthenticationHandler. Falling back to handler > principal klintholmes> > > 2016-06-16 13:08:37,806 INFO > [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - > <Authenticated klintholmes with credentials [klintholmes].> > > 2016-06-16 13:08:37,806 DEBUG > [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - > <Attribute map for klintholmes: > {LdapAuthenticationHandler.dn=CN=klintholmes,OU=Users,DC=example,DC=com, > memberOf=[CN=All Students,OU=Groups,DC=example,DC=com, > mail=kli...@example.com <javascript:>, displayName=Klint Holmes}> > > 2016-06-16 13:08:37,825 DEBUG > [org.apereo.cas.audit.spi.AssertionAsReturnValuePrincipalResolver] - > <Trying to see if target's return value is instance of [Assertion]...> > > 2016-06-16 13:08:37,825 DEBUG > [org.apereo.cas.audit.spi.AssertionAsReturnValuePrincipalResolver] - > <Resolving principal from the delegate principal resolver: > [org.apereo.cas.audit.spi.TicketOrCredentialPrincipalResolver@50bd742f]...> > > 2016-06-16 13:08:37,830 DEBUG > [org.apereo.cas.audit.spi.TicketOrCredentialPrincipalResolver] - <Resolving > argument [AuthenticationTransaction] for audit> > > 2016-06-16 13:08:37,833 DEBUG > [org.apereo.cas.audit.spi.TicketOrCredentialPrincipalResolver] - <Resolving > argument [UsernamePasswordCredential] for audit> > > 2016-06-16 13:08:37,836 INFO > [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit > trail record BEGIN > > ============================================================= > > WHO: klintholmes > > WHAT: Supplied credentials: [klintholmes] > > ACTION: AUTHENTICATION_SUCCESS > > APPLICATION: CAS > > WHEN: Thu Jun 16 13:08:37 MDT 2016 > > CLIENT IP ADDRESS: 137.*.*.* > > SERVER IP ADDRESS: 137.*.*.* > > ============================================================= > > > > > > > 2016-06-16 13:08:37,840 DEBUG > [org.apereo.cas.authentication.DefaultAuthenticationTransactionManager] - > <Successful authentication; Collecting authentication result > [org.apereo.cas.authentication.DefaultAuthentication@c81b5b07]> > > 2016-06-16 13:08:37,842 DEBUG > [org.apereo.cas.web.flow.resolver.InitialAuthenticationAttemptWebflowEventResolver] > > - <Locating service http://hadoopdev1.example.com in service registry to > determine authentication policy> > > 2016-06-16 13:08:37,846 DEBUG > [org.apereo.cas.web.flow.resolver.InitialAuthenticationAttemptWebflowEventResolver] > > - <Evaluating authentication policy for ^(http|imaps)://.* based on > principal attribute requirements only when accessing > http://hadoopdev1.example.com> > > 2016-06-16 13:08:37,861 DEBUG [org.apereo.cas.web.support.WebUtils] - > <Evaluating request to determine if warning cookie should be generated> > > 2016-06-16 13:08:37,867 DEBUG > [org.apereo.cas.web.WarningCookieRetrievingCookieGenerator] - <Removed > cookie with name [CASPRIVACY]> > > 2016-06-16 13:08:37,872 DEBUG > [org.apereo.cas.web.flow.resolver.RegisteredServicePrincipalAttributeAuthenticationPolicyWebflowEventResolver] > > - <Locating bean definition for mfa-duo> > > 2016-06-16 13:08:37,896 DEBUG > [org.apereo.cas.web.flow.resolver.RegisteredServicePrincipalAttributeAuthenticationPolicyWebflowEventResolver] > > - <Locating principal attribute value for [memberOf]> > > 2016-06-16 13:08:37,898 DEBUG > [org.apereo.cas.web.flow.resolver.RegisteredServicePrincipalAttributeAuthenticationPolicyWebflowEventResolver] > > - <Selecting a multifactor authentication provider out of > [org.apereo.cas.adaptors.duo.DuoMultifactorAuthenticationProvider@3982c782] > for klintholmes and service id=100,name=HTTPS and > IMAPS,description=<null>,serviceId=^(http|imaps)://.*,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=0,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy@63fa1ba7[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@2f1838d7[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseProxyGrantingTicket=false,allowedAttributes=[]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@c5750a8[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1fec28dd,logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@2c783565[multifactorAuthenticationProviders=[mfa-duo],failureMode=CLOSED,principalAttributeNameTrigger=memberOf,principalAttributeValueToMatch=z],<null>> > > 2016-06-16 13:08:37,907 DEBUG > [org.apereo.cas.web.flow.authentication.FirstMultifactorAuthenticationProviderSelector] > > - <Selected the first provider > org.apereo.cas.adaptors.duo.DuoMultifactorAuthenticationProvider@3982c782 > <javascript:> for service id=100,name=HTTPS and > IMAPS,description=<null>,serviceId=^(http|imaps)://.*,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=0,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy@63fa1ba7[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@2f1838d7[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseProxyGrantingTicket=false,allowedAttributes=[]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@c5750a8[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1fec28dd,logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@2c783565[multifactorAuthenticationProviders=[mfa-duo],failureMode=CLOSED,principalAttributeNameTrigger=memberOf,principalAttributeValueToMatch=z],<null> > > out of 1 providers> > > 2016-06-16 13:08:37,912 DEBUG > [org.apereo.cas.web.flow.resolver.InitialAuthenticationAttemptWebflowEventResolver] > > - <Evaluating authentication policy based on principal attribute > requirements for http://hadoopdev1.example.com> > > 2016-06-16 13:08:37,924 DEBUG [org.apereo.cas.web.support.WebUtils] - > <Evaluating request to determine if warning cookie should be generated> > > 2016-06-16 13:08:37,925 DEBUG > [org.apereo.cas.web.WarningCookieRetrievingCookieGenerator] - <Removed > cookie with name [CASPRIVACY]> > > 2016-06-16 13:08:37,926 DEBUG > [org.apereo.cas.web.flow.resolver.PrincipalAttributeAuthenticationPolicyWebflowEventResolver] > > - <Attribute name to determine event is not configured for klintholmes> > > 2016-06-16 13:08:37,929 DEBUG > [org.apereo.cas.web.flow.resolver.InitialAuthenticationAttemptWebflowEventResolver] > > - <Evaluating authentication policy for http://hadoopdev1.example.com> > > 2016-06-16 13:08:37,945 DEBUG [org.apereo.cas.web.support.WebUtils] - > <Evaluating request to determine if warning cookie should be generated> > > 2016-06-16 13:08:37,946 DEBUG > [org.apereo.cas.web.WarningCookieRetrievingCookieGenerator] - <Removed > cookie with name [CASPRIVACY]> > > 2016-06-16 13:08:37,948 DEBUG > [org.apereo.cas.web.flow.resolver.RegisteredServiceAuthenticationPolicyWebflowEventResolver] > > - <Locating bean definition for mfa-duo> > > 2016-06-16 13:08:37,950 DEBUG > [org.apereo.cas.web.flow.authentication.FirstMultifactorAuthenticationProviderSelector] > > - <Selected the first provider > org.apereo.cas.adaptors.duo.DuoMultifactorAuthenticationProvider@3982c782 > <javascript:> for service id=100,name=HTTPS and > IMAPS,description=<null>,serviceId=^(http|imaps)://.*,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=0,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy@63fa1ba7[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@2f1838d7[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseProxyGrantingTicket=false,allowedAttributes=[]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@c5750a8[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@1fec28dd,logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@2c783565[multifactorAuthenticationProviders=[mfa-duo],failureMode=CLOSED,principalAttributeNameTrigger=memberOf,principalAttributeValueToMatch=z],<null> > > out of 1 providers> > > 2016-06-16 13:08:37,953 DEBUG > [org.apereo.cas.web.flow.resolver.RegisteredServiceAuthenticationPolicyWebflowEventResolver] > > - <Selected multifactor authentication provider for this transaction is > org.apereo.cas.adaptors.duo.DuoMultifactorAuthenticationProvider@3982c782 > <javascript:>> > > 2016-06-16 13:08:37,955 DEBUG > [org.apereo.cas.adaptors.duo.DuoMultifactorAuthenticationProvider] - > <Multifactor failure mode for ^(http|imaps)://.* is defined as CLOSED> > > 2016-06-16 13:08:38,040 DEBUG > [org.apereo.cas.authentication.FileTrustStoreSslSocketFactory] - > <Connecting socket to api-********.duosecurity.com/8.8.8.8:443 with > timeout 5000> > > 2016-06-16 13:08:38,121 DEBUG > [org.apereo.cas.authentication.FileTrustStoreSslSocketFactory] - <Enabled > protocols: [TLSv1, TLSv1.1, TLSv1.2]> > > 2016-06-16 13:08:38,122 DEBUG > [org.apereo.cas.authentication.FileTrustStoreSslSocketFactory] - <Enabled > cipher suites:[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, > TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, > TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384, > TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384, TLS_DHE_RSA_WITH_AES_256_CBC_SHA256, > TLS_DHE_DSS_WITH_AES_256_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, > TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, > TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, > TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_256_CBC_SHA, > TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, > TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, > TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256, > TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256, TLS_DHE_RSA_WITH_AES_128_CBC_SHA256, > TLS_DHE_DSS_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, > TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, > TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA, TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, > TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, > TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, > TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, > TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_GCM_SHA384, > TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, > TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384, TLS_DHE_RSA_WITH_AES_256_GCM_SHA384, > TLS_DHE_DSS_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, > TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, > TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256, > TLS_DHE_DSS_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, > TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, > TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA, TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA, > SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, > TLS_EMPTY_RENEGOTIATION_INFO_SCSV]> > > 2016-06-16 13:08:38,122 DEBUG > [org.apereo.cas.authentication.FileTrustStoreSslSocketFactory] - <Starting > handshake> > > 2016-06-16 13:08:38,249 DEBUG > [org.apereo.cas.authentication.FileTrustStoreSslSocketFactory] - <Secure > session established> > > 2016-06-16 13:08:38,249 DEBUG > [org.apereo.cas.authentication.FileTrustStoreSslSocketFactory] - < > negotiated protocol: TLSv1.2> > > 2016-06-16 13:08:38,249 DEBUG [org.aper > ... -- You received this message because you are subscribed to the Google Groups "CAS Developer" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-dev+unsubscr...@apereo.org. Visit this group at https://groups.google.com/a/apereo.org/group/cas-dev/.
