You will need to remove those references. Spring Security is no longer used: https://github.com/Jasig/cas/blob/4.2.x/cas-server-webapp/src/main/webapp/WEB-INF/spring-configuration/securityContext.xml
-- Misagh From: William <[email protected]> Reply: William <[email protected]> Date: February 9, 2016 at 10:16:44 PM To: CAS Community <[email protected]> Subject: [cas-user] Spring Security Dependencies Missing In 4.2.0-RC1 and RC2 This question may be because of my unfamiliarity of the CAS build. I noticed that the following Spring Security dependencies were missing in the CAS 4.2.0-RC1 and RC2 cas-overlay-template builds: Group ID: org.springframework.security Artifact IDs: spring-security-core, spring-security-config, and spring-security-web This is causing my cas.war to fail on startup: ... 15:11:21.203 [localhost-startStop-1] ERROR org.springframework.web.context.ContextLoader - Context initialization failed org.springframework.beans.factory.parsing.BeanDefinitionParsingException: Configuration problem: Unable to locate Spring NamespaceHandler for XML schema namespace [http://www.springframework.org/schema/security] Offending resource: ServletContext resource [/WEB-INF/spring-configuration/securityContext.xml] at org.springframework.beans.factory.parsing.FailFastProblemReporter.error(FailFastProblemReporter.java:70) ... I noticed in the CAS 4.1.4 that these dependencies are present: https://oss.sonatype.org/content/repositories/releases/org/jasig/cas/cas-server-webapp-support/4.1.4/cas-server-webapp-support-4.1.4.pom I also noticed that the latest Spring Security release was version 4.0.3 (dated October 2015), but this includes Spring Core 4.2.2 and not 4.2.3 which CAS 4.2.0-RC1 and RC2 requires. Is the plans to keep the Spring Security jars out of the build or wait until version 4.0.4 when the Spring Core dependencies are updated to 4.2.3? I saw these issues as well for CAS 4.2.0: https://github.com/Jasig/cas/pull/1232 https://github.com/Jasig/cas/issues/1222 Just wondered how folks are getting around this issue. I am including the Spring Security 4.0.3 dependencies in my pom.xml, but Maven insists to include Spring Core 4.2.2 in the WEB-INF/lib even with exclusions. Regards. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/.
