Man,
I may have found the issue. I cannot connect to LDAP servers via 636 but I can 389. Therefore, am looking into importing the certs in the proper places. Hopefully that is my issue. But thanks for your help =========================== Thank You; Chris Cheltenham Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: [email protected] [mailto:[email protected]] On Behalf Of Man H Sent: Wednesday, February 7, 2018 10:49 AM To: [email protected] Subject: Re: [cas-user] ldap error cas 5.2 # Control log levels via properties logging.level.org.apereo.cas=debug In cas startup you can see where properties are fetched from log like this. \_\ /_/ CAS Version: 5.2.2 CAS Commit Id: eefb26e6ea0f3f0505ea7dcfc7e11c4ebcb44b7d CAS Build Date/Time: 2018-01-31T19:13:42Z Spring Boot Version: 1.5.8.RELEASE ------------------------------------------------------------ Java Home: /usr/local/jdk1.8.0_152/jre Java Vendor: Oracle Corporation Java Version: 1.8.0_152 JVM Free Memory: 560 MB JVM Maximum Memory: 1 GB JVM Total Memory: 928 MB JCE Installed: No ------------------------------------------------------------ OS Architecture: amd64 OS Name: Linux OS Version: 4.13.0-32-generic OS Date/Time: 2018-02-07T12:30:44.726 OS Temp Directory: /usr/local/apache-tomcat-8.5.23-cas5/temp ------------------------------------------------------------ 2018-02-07 12:30:44,791 INFO [org.apereo.cas.configuration.config.CasCoreBootstrapStandaloneConfiguration] - <Configuration files found at [/etc/cas/config] are [[/etc/cas/config/cas.properties]]> 2018-02-07 12:30:44,825 INFO [org.apereo.cas.configuration.config.CasCoreBootstrapStandaloneConfiguration] - <Found and loaded [188] setting(s) from [/etc/cas/config]> 2018-02-07 12:30:44,826 INFO [org.springframework.cloud.bootstrap.config.PropertySourceBootstrapConfiguration] - <Located property source: PropertiesPropertySource {name='standaloneCasConfigService'}> 2018-02-07 12:30:44,920 INFO [org.apereo.cas.web.CasWebApplicationServletInitializer] - <The following profiles are active: standalone> 2018-02-07 12:14 GMT-03:00 Cheltenham, Chris <[email protected] <mailto:[email protected]> >: Man, Let me be a bit cleaere. How do I know the ldap dependency was incorporated into the cas.war file during after the build? =========================== Thank You; Chris Cheltenham Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: [email protected] <mailto:[email protected]> [mailto:[email protected] <mailto:[email protected]> ] On Behalf Of Cheltenham, Chris Sent: Wednesday, February 7, 2018 10:13 AM To: [email protected] <mailto:[email protected]> Subject: RE: [cas-user] ldap error cas 5.2 Man, The question you asked is actually no clear to me. How do I know the ldap support was loaded during the build. It IS in the pom.xml but how can a verify its in there? =========================== Thank You; Chris Cheltenham Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 From: [email protected] <mailto:[email protected]> [mailto:[email protected]] On Behalf Of Man H Sent: Tuesday, February 6, 2018 4:55 PM To: [email protected] <mailto:[email protected]> Subject: Re: [cas-user] ldap error cas 5.2 Do you have ldap support dependency? 2018-02-06 15:45 GMT-03:00 Cheltenham, Chris <[email protected] <mailto:[email protected]> >: Hello, I am getting this error in my logs loggin in via LDAP. 2018-02-06 13:40:52,503 ERROR [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authentication has failed. Credentials may be incorrect or CAS cannot find authentication handler that supports [cheltenham-ext] of type [UsernamePasswordCredential].> 2018-02-06 13:40:52,504 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN ============================================================= WHO: cheltenham-ext WHAT: Supplied credentials: [cheltenham-ext] ACTION: AUTHENTICATION_SUCCESS APPLICATION: CAS WHEN: Tue Feb 06 13:40:52 EST 2018 CLIENT IP ADDRESS: 10.32.32.218 SERVER IP ADDRESS: 170.235.1.71 ============================================================= It’s odd , it says AUTHENTICATION _SUCCESS but it does not appear to work. Here is the LDAP properties in cas.properties. # LDAP connector cas.authn.accept.users= cas.authn.ldap[0].useSsl=true cas.authn.ldap[0].useStartTls=false cas.authn.ldap[0].ldapUrl=ldaps://devldapm-mgmt.philasd.net <http://devldapm-mgmt.philasd.net> cas.authn.ldap[0].dnFormat= cas.authn.ldap[0].baseDn=dc=philasd,dc=org cas.authn.ldap[0].connectTimeout=5000 cas.authn.ldap[0].principalAttributeId=casauth cas.authn.ldap[0].principalAttributePassword=xxxxxxxxxxxxxx cas.authn.ldap[0].minPoolSize=3 cas.authn.ldap[0].maxPoolSize=10 cas.authn.ldap[0].validateOnCheckout=true cas.authn.ldap[0].validatePeriodically=true cas.authn.ldap[0].validatePeriod=600 cas.authn.ldap[0].failFast=true cas.authn.ldap[0].idleTime=5000 cas.authn.ldap[0].prunePeriod=5000 cas.authn.ldap[0].blockWaitTime=5000 =========================== Thank You; Chris Cheltenham Technology Services The School District of Philadelphia Work # 215-400-5025 Cell # 215-301-6571 -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00d901d3a026%242a9b2b50%247fd181f0%24%40philasd.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/00d901d3a026%242a9b2b50%247fd181f0%24%40philasd.org?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00e901d3a026%2464ad8090%242e0881b0%24%40philasd.org <https://groups.google.com/a/apereo.org/d/msgid/cas-user/00e901d3a026%2464ad8090%242e0881b0%24%40philasd.org?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected] <mailto:[email protected]> . To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5mifXrudMM96ykemtGDWv10iwbrYEr1%2BcJW3UhyPkzjcLnA%40mail.gmail.com <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5mifXrudMM96ykemtGDWv10iwbrYEr1%2BcJW3UhyPkzjcLnA%40mail.gmail.com?utm_medium=email&utm_source=footer> . -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00f901d3a02c%24c27f1570%24477d4050%24%40philasd.org.
