OK, the hint is right there: [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - AcceptUsersAuthenticationHandler failed authenticating test1+password
Your current deployment is configured with the wrong (not the DB handler that you wish to use) authentication handler. You could examine the deployerConfigContext.xml of your deployed cas.war to verify it. But first and foremost, I’d suggest that you make sure that you use the proper build model of maven war overlay as described here: https://jasig.github.io/cas/4.2.x/installation/Maven-Overlay-Installation.html <https://jasig.github.io/cas/4.2.x/installation/Maven-Overlay-Installation.html> and I’d also suggest that you use the latest CAS server version which is 4.2.1 at the moment. Best, D. > On Apr 19, 2016, at 8:44 AM, Valentine Rouzaud <[email protected]> wrote: > > Alright so when I try to login as one of my db users I get this > > 2016-04-19 14:39:41,164 INFO > [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - > Beginning ticket cleanup. > 2016-04-19 14:39:41,167 INFO > [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - 0 > tickets found to be removed. > 2016-04-19 14:39:41,167 INFO > [org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner] - > Finished ticket cleanup. > 2016-04-19 14:40:00,022 INFO > [org.jasig.cas.authentication.PolicyBasedAuthenticationManager] - > AcceptUsersAuthenticationHandler failed authenticating test1+password > 2016-04-19 14:40:00,026 INFO > [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit > trail record BEGIN > ============================================================= > WHO: audit:unknown > WHAT: supplied credentials: [test1+password] > ACTION: AUTHENTICATION_FAILED > APPLICATION: CAS > WHEN: Tue Apr 19 14:40:00 CEST 2016 > CLIENT IP ADDRESS: x.x.x.x > SERVER IP ADDRESS: x.x.x.x > ============================================================= > > 2016-04-19 14:40:00,027 INFO > [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit > trail record BEGIN > ============================================================= > WHO: audit:unknown > WHAT: 1 errors, 0 successes > ACTION: TICKET_GRANTING_TICKET_NOT_CREATED > APPLICATION: CAS > WHEN: Tue Apr 19 14:40:00 CEST 2016 > CLIENT IP ADDRESS: x.x.x.x > SERVER IP ADDRESS: x.x.x.x > ============================================================= > > > > Le mardi 19 avril 2016 14:13:51 UTC+2, Dmitriy Kopylenko a écrit : > https://jasig.github.io/cas/4.0.x/installation/Logging.html > <https://jasig.github.io/cas/4.0.x/installation/Logging.html> > > D. > > On Tue, Apr 19, 2016 at 08:07, Valentine Rouzaud <[email protected] > <javascript:>> wrote: > Hello, > > I used my own MD5 encoder method to populate my database and I thought the > issue could come from here but I ended up creating three users with password > as such: > > username : "test1" password : "test" > username : "test2" password : > "09-8F-6B-CD-46-21-D3-73-CA-DE-4E-83-26-27-B4-F6" > username : "test3" password : "098f6bcd4621d373cade4e832627b4f6" > > And I'm testing all three users each time to make sure it's not an encoder > problem... > > > Regardless of this possible issue, which log would you need to know more ? > And where would it be located ? > Thank you, > > Valentine > > Tuesday 19 April 2016 12:38:20 UTC+2, Dmitriy Kopylenko wrote : > I'm just speculating here since you did not provide any detailed logs: are > you storing the password values in the password column for your users in > plain text? If so, the DB authn handler delegates to the password encoder to > hash the provided credentials and compare it to the password value stored in > DB resulting in a rightful comparison failure, etc. > > Cheers, > D. > > On Tue, Apr 19, 2016 at 03:02, Valentine Rouzaud <[email protected] <>> wrote: > I've recently taken interest in the CAS system for a work project using > ASP.NET <http://asp.net/> MVC applications. So I made a simple test project > following MVC and I am now trying to link my MSSQL database (generated with > Entity Framework of Visual Studio 2015 Pro) and my CAS so that the CAS server > can check my project's database for users when they try to log in. > > I am using CAS 4.0.1 so I've followed this tutorial: > https://jasig.github.io/cas/4.0.x/installation/Database-Authentication.html > <https://jasig.github.io/cas/4.0.x/installation/Database-Authentication.html> > which ends up looking like the following code: > > In the "deployerConfigContext.xml" > > <bean id="authenticationManager" > class="org.jasig.cas.authentication.PolicyBasedAuthenticationManager"> > <constructor-arg> > <map> > <entry key-ref="primaryAuthenticationHandler" value-ref="dbAuthHandler"/> > </map> > </constructor-arg> > <property name="authenticationPolicy"> > <bean class="org.jasig.cas.authentication.AnyAuthenticationPolicy" /> > </property> > </bean> > <bean id="passwordEncoder" > class="org.jasig.cas.authentication.handler.DefaultPasswordEncoder" > c:encodingAlgorithm="MD5" > p:characterEncoding="UTF-8" /> > <bean id="dbAuthHandler" > class="org.jasig.cas.adaptors.jdbc.SearchModeSearchDatabaseAuthenticationHandler" > p:dataSource-ref="dataSource" > p:passwordEncoder-ref="passwordEncoder" > p:tableUsers="Users" > p:fieldUser="Username" > p:fieldPassword="PassWord"/> > <bean id="dataSource" > class="org.apache.tomcat.jdbc.pool" > p:driverClass="${database.driverClass}" > p:jdbcUrl="${database.url}" > p:user="${database.user}" > p:password="${database.password}" /> > > In the "cas.properties" file > > database.driverClass=com.microsoft.jdbc.sqlserver > database.url=jdbc:sqlserver://localhost:59228;DatabaseName=ConnectionTest.Models.DatabaseContext > database.user=casAdmin > database.password=casPwd > > And in the pom.xml file > > <dependencies> > <dependency> > <groupId>org.jasig.cas</groupId> > <artifactId>cas-server-webapp</artifactId> > <version>${cas.version}</version> > <type>war</type> > <scope>runtime</scope> > </dependency> > <dependency> > <groupId>org.jasig.cas</groupId> > <artifactId>cas-server-support-jdbc</artifactId> > <version>${cas.version}</version> > </dependency> > <dependency> > <groupId>com.microsoft.sqlserver</groupId> > <artifactId>sqljdbc4</artifactId> > <version>4.0</version> > </dependency> > <dependency> > <groupId>c3p0</groupId> > <artifactId>c3p0</artifactId> > <version>0.9.1.2</version> > </dependency> > <-- I tried with Tomcat JDBC driver instead of C3P0 > but it didn't seem to have changed anything --> > <dependency> > <groupId>org.apache.tomcat</groupId> > <artifactId>tomcat-jdbc</artifactId> > <version>9.0.0.M4</version> > </dependency> > </dependencies> > <properties> > <cas.version>4.0.1</cas.version> > </properties> > > I'm not getting any errors when building with Maven (3.3.9) nor when > deploying with Tomcat (9.0.0.M4) but when I try to log in on the CAS with > some of my DB's credentials it just tells me that my crendentials are > invalid. After some advice, I've found what seems to be the correct MSSQL > driver but I'm still not sure about the exact formatting given that I still > cannot log in with users from my DB. I'm suspecting the database URL to be > written with the wrong syntax but I'm not sure how to write it otherwise. > > Any help is appreciated, thanks. > Regards, > > Valentine > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <>. > To post to this group, send email to [email protected] <>. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > <https://groups.google.com/a/apereo.org/group/cas-user/>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/a3771230-f565-4821-a0f1-50f5dfab3ef6%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/a3771230-f565-4821-a0f1-50f5dfab3ef6%40apereo.org?utm_medium=email&utm_source=footer>. > For more options, visit https://groups.google.com/a/apereo.org/d/optout > <https://groups.google.com/a/apereo.org/d/optout>. > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] <javascript:>. > To post to this group, send email to [email protected] <javascript:>. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > <https://groups.google.com/a/apereo.org/group/cas-user/>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/860f9127-f19b-4f54-9302-bf5494dc6687%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/860f9127-f19b-4f54-9302-bf5494dc6687%40apereo.org?utm_medium=email&utm_source=footer>. > For more options, visit https://groups.google.com/a/apereo.org/d/optout > <https://groups.google.com/a/apereo.org/d/optout>. > > -- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected] > <mailto:[email protected]>. > To post to this group, send email to [email protected] > <mailto:[email protected]>. > Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/ > <https://groups.google.com/a/apereo.org/group/cas-user/>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/3119674a-18cb-4c4f-84df-e47e0d4fa6ef%40apereo.org > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/3119674a-18cb-4c4f-84df-e47e0d4fa6ef%40apereo.org?utm_medium=email&utm_source=footer>. > For more options, visit https://groups.google.com/a/apereo.org/d/optout > <https://groups.google.com/a/apereo.org/d/optout>. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/862F3436-79D8-4191-AF6A-24F7C3C264E8%40unicon.net. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
