I try to make CAS 6.1 work with Azure AD
1. I added compile
"org.apereo.cas:cas-server-support-pac4j-webflow:${casServerVersion}"
dependency to build.gradle and all settings related with azure to
cas.properties file
Logs says „No delegated authentication clients are defined and/or
configured“ and authentication fails.
What am i doing wrong?
The attached files are the logs, cas.properties, build.gradle and
screenshot of authentication attempt
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/39bc30f3-20cc-4551-a7e8-0946fd98e08b%40apereo.org.
cas.properties
Description: Binary data
build.gradle
Description: Binary data
>gradlew run
> Task :run
_ ____ _____ ____ _____ ___ ____ _ ____
/ \ | _ \| ____| _ \| ____/ _ \ / ___| / \ / ___|
/ _ \ | |_) | _| | |_) | _|| | | | | | / _ \ \___ \
/ ___ \| __/| |___| _ <| |__| |_| | | |___ / ___ \ ___) |
/_/ \_\_| |_____|_| \_\_____\___/ \____/_/ \_\____/
CAS Version: 6.1.1
CAS Branch: 6.1.x
CAS Commit Id: 12b12af2c9b9334a782804590cbcd8ebe6660eef
CAS Build Date/Time: 2019-10-30T22:01:10Z
Spring Boot Version: 2.2.0.RELEASE
Spring Version: 5.2.0.RELEASE
Java Home: C:\Program Files\Java\jdk-11.0.4
Java Vendor: Oracle Corporation
Java Version: 11.0.4
JVM Free Memory: 399 MB
JVM Maximum Memory: 2 GB
JVM Total Memory: 510 MB
JCE Installed: Yes
OS Architecture: amd64
OS Name: Windows 10
OS Version: 10.0
OS Date/Time: 2019-11-13T15:28:45.146403500
OS Temp Directory: C:\Users\Aleksandr.Brukvin\AppData\Local\Temp\
------------------------------------------------------------
Apache Tomcat Version: Apache Tomcat/9.0.27
------------------------------------------------------------
2019-11-13 15:28:45,187 INFO
[org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator] -
<Configuration files found at [\etc\cas\config] are [[file
[C:\etc\cas\config\cas.properties]]] under profile(s) [[standalone]]>
2019-11-13 15:28:45,308 INFO [org.apereo.cas.web.CasWebApplication] - <The
following profiles are active: standalone>
2019-11-13 15:28:45,515 DEBUG [org.apereo.cas.web.CasWebApplicationContext] -
<Refreshing org.apereo.cas.web.CasWebApplicationContext@aa5455e>
2019-11-13 15:28:48,997 DEBUG
[org.apereo.cas.tomcat.CasTomcatServletWebServerFactory] - <Code archive:
C:\Users\Aleksandr.Brukvin\Desktop\cas-overlay-template-6.1\build\libs\cas.war>
2019-11-13 15:28:48,997 DEBUG
[org.apereo.cas.tomcat.CasTomcatServletWebServerFactory] - <Document root:
C:\Users\Aleksandr.Brukvin\Desktop\cas-overlay-template-6.1\build\libs\cas.war>
2019-11-13 15:28:57,354 DEBUG [org.apereo.cas.support.saml.OpenSamlConfigBean]
- <Initialized OpenSaml successfully.>
2019-11-13 15:28:59,972 DEBUG
[org.apereo.cas.support.pac4j.config.support.authentication.Pac4jAuthenticationEventExecutionPlanConfiguration]
- <The following clients are built: [[]]>
2019-11-13 15:28:59,972 WARN
[org.apereo.cas.support.pac4j.config.support.authentication.Pac4jAuthenticationEventExecutionPlanConfiguration]
- <No delegated authentication clients are defined and/or configured>
2019-11-13 15:29:00,046 DEBUG [org.apereo.cas.config.CasCoreConfiguration] -
<Applying configuration for Accept Any Authentication Policy>
2019-11-13 15:29:00,235 DEBUG
[org.apereo.cas.config.CasCoreTicketsSchedulingConfiguration] - <Ticket
registry cleaner is enabled.>
2019-11-13 15:29:00,241 DEBUG
[org.apereo.cas.config.CasCoreTicketsSchedulingConfiguration] - <Ticket
registry cleaner is enabled.>
2019-11-13 15:29:00,391 DEBUG
[org.apereo.cas.config.CasPersonDirectoryConfiguration] - <No attribute
repository sources are available/defined to merge together.>
2019-11-13 15:29:00,616 DEBUG
[org.apereo.cas.logout.DefaultLogoutExecutionPlan] - <Registering logout
handler [DistributedJ2ESessionStore]>
2019-11-13 15:29:01,518 INFO
[org.springframework.boot.autoconfigure.security.servlet.UserDetailsServiceAutoConfiguration]
- <
Using generated security password: 57ce6595-45b9-4122-9418-742ee6cfa76c
>
2019-11-13 15:29:01,786 INFO
[org.springframework.security.web.access.channel.ChannelProcessingFilter] -
<Validated configuration attributes>
2019-11-13 15:29:01,815 INFO
[org.springframework.security.web.DefaultSecurityFilterChain] - <Creating
filter chain: any request,
[org.springframework.security.web.access.channel.ChannelProcessingFilter@38848217,
org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter@326706d,
org.springframework.security.web.context.SecurityContextPersistenceFilter@fb5d334,
org.springframework.security.web.savedrequest.RequestCacheAwareFilter@2d459bda,
org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter@2676d96a,
org.springframework.security.web.authentication.AnonymousAuthenticationFilter@76fc5687,
org.springframework.security.web.session.SessionManagementFilter@42dd7d82,
org.springframework.security.web.access.ExceptionTranslationFilter@5a583720,
org.springframework.security.web.access.intercept.FilterSecurityInterceptor@6ae6d078]>
2019-11-13 15:29:03,790 DEBUG
[org.apereo.cas.config.CasCoreAuthenticationPrincipalConfiguration] -
<Attribute repository sources are not available for person-directory principal
resolution>
2019-11-13 15:29:03,850 WARN
[org.apereo.cas.config.CasCoreServicesConfiguration] - <Runtime memory is used
as the persistence storage for retrieving and persisting service definitions.
Changes that are made to service definitions during runtime WILL be LOST when
the CAS server is restarted. Ideally for production, you should choose a
storage option (JSON, JDBC, MongoDb, etc) to track service definitions.>
2019-11-13 15:29:03,882 WARN
[org.apereo.cas.config.CasCoreTicketsConfiguration] - <Runtime memory is used
as the persistence storage for retrieving and managing tickets. Tickets that
are issued during runtime will be LOST when the web server is restarted. This
MAY impact SSO functionality.>
2019-11-13 15:29:03,886 INFO [org.apereo.cas.util.CoreTicketUtils] - <Ticket
registry encryption/signing is turned off. This MAY NOT be safe in a clustered
production environment. Consider using other choices to handle encryption,
signing and verification of ticket registry tickets, and verify the chosen
ticket registry does support this behavior.>
2019-11-13 15:29:03,946 DEBUG
[org.apereo.cas.pm.config.PasswordManagementConfiguration] - <Password
management is disabled. To enable the password management functionality, add
'cas.authn.pm.enabled=true' to the CAS configuration and then configure storage
options for account updates>
2019-11-13 15:29:04,077 WARN
[org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for
encryption is not defined for [Ticket-granting Cookie]; CAS will attempt to
auto-generate the encryption key>
2019-11-13 15:29:04,091 WARN
[org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Generated encryption
key [MZkD2Qac-atT34EBAwJ3iJoIM_UVRpSsSCbmpQKKmko] of size [256] for
[Ticket-granting Cookie]. The generated key MUST be added to CAS settings under
setting [cas.tgc.crypto.encryption.key].>
2019-11-13 15:29:04,093 WARN
[org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for signing
is not defined for [Ticket-granting Cookie]. CAS will attempt to auto-generate
the signing key>
2019-11-13 15:29:04,093 WARN
[org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Generated signing key
[9WCLnRozXantFx7ZR0gqjfZsQodZAhFZnbiPFa3sdPr6Ci5f16SRNbEVOsMceiWx4jcV5BHP1LggMOjlrYgkbg]
of size [512] for [Ticket-granting Cookie]. The generated key MUST be added to
CAS settings under setting [cas.tgc.crypto.signing.key].>
2019-11-13 15:29:04,253 WARN
[org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Secret key for signing
is not defined under [cas.webflow.crypto.signing.key]. CAS will attempt to
auto-generate the signing key>
2019-11-13 15:29:04,253 WARN
[org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated signing key
[iM-C6MNr7zCbhQG9L6aAsgu0OiXKTX_zUBVCF4c2zO0HU1YzWe4jPqA-_YnhDgtk0vpkas3KL32ISCWLdkXeRg]
of size [512]. The generated key MUST be added to CAS settings under setting
[cas.webflow.crypto.signing.key].>
2019-11-13 15:29:04,253 WARN
[org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Secret key for
encryption is not defined under [cas.webflow.crypto.encryption.key]. CAS will
attempt to auto-generate the encryption key>
2019-11-13 15:29:04,255 WARN
[org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated encryption
key [RwYZI0IYMbk0QzFoqmF3ag] of size [16]. The generated key MUST be added to
CAS settings under setting [cas.webflow.crypto.encryption.key].>
2019-11-13 15:29:06,052 INFO [org.apereo.cas.web.CasWebApplication] - <Started
CasWebApplication in 26.456 seconds (JVM running for 29.328)>
2019-11-13 15:29:06,057 INFO [org.apereo.cas.web.CasWebApplication] - <>
2019-11-13 15:29:06,057 INFO [org.apereo.cas.web.CasWebApplication] - <
____ _____ _ ______ __
| _ \| ____| / \ | _ \ \ / /
| |_) | _| / _ \ | | | \ V /
| _ <| |___ / ___ \| |_| || |
|_| \_\_____/_/ \_\____/ |_|
>
2019-11-13 15:29:06,057 INFO [org.apereo.cas.web.CasWebApplication] - <>
2019-11-13 15:29:06,057 INFO [org.apereo.cas.web.CasWebApplication] - <Ready to
process requests @ [2019-11-13T13:29:06.057Z]>
2019-11-13 15:29:06,073 INFO [org.apereo.cas.services.AbstractServicesManager]
- <Loaded [0] service(s) from [InMemoryServiceRegistry].>
2019-11-13 15:29:34,509 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:29:34,509 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:31:34,510 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:31:34,510 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:33:10,777 WARN
[org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <No delegated
authentication providers could be determined based on the provided
configuration. Either no clients are configured, or the current access strategy
rules prohibit CAS from using authentication providers for this request.>
2019-11-13 15:33:10,802 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: [event=success,timestamp=Wed Nov 13 15:33:10 EET
2019,source=RankedMultifactorAuthenticationProviderWebflowEventResolver]
ACTION: AUTHENTICATION_EVENT_TRIGGERED
APPLICATION: CAS
WHEN: Wed Nov 13 15:33:10 EET 2019
CLIENT IP ADDRESS: 10.1.169.197
SERVER IP ADDRESS: 10.1.169.197
=============================================================
>
2019-11-13 15:33:12,837 DEBUG
[org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file
found for [classpath:custom_messages_ru_RU] - neither plain properties nor XML>
2019-11-13 15:33:12,839 DEBUG
[org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file
found for [classpath:messages_ru_RU] - neither plain properties nor XML>
2019-11-13 15:33:12,842 DEBUG
[org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file
found for [classpath:custom_messages_ru] - neither plain properties nor XML>
2019-11-13 15:33:12,844 DEBUG
[org.apereo.cas.web.view.CasReloadableMessageBundle] - <No properties file
found for [classpath:custom_messages] - neither plain properties nor XML>
2019-11-13 15:33:12,849 DEBUG
[org.apereo.cas.web.view.CasReloadableMessageBundle] - <Loading properties
[messages_ru.properties] with encoding 'UTF-8'>
2019-11-13 15:33:12,855 DEBUG
[org.apereo.cas.web.view.CasReloadableMessageBundle] - <Loading properties
[messages.properties] with encoding 'UTF-8'>
2019-11-13 15:33:26,765 WARN
[org.apereo.cas.web.flow.DelegatedClientAuthenticationAction] - <No delegated
authentication providers could be determined based on the provided
configuration. Either no clients are configured, or the current access strategy
rules prohibit CAS from using authentication providers for this request.>
2019-11-13 15:33:26,766 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: [event=success,timestamp=Wed Nov 13 15:33:26 EET
2019,source=RankedMultifactorAuthenticationProviderWebflowEventResolver]
ACTION: AUTHENTICATION_EVENT_TRIGGERED
APPLICATION: CAS
WHEN: Wed Nov 13 15:33:26 EET 2019
CLIENT IP ADDRESS: 10.1.169.197
2019-11-13 15:43:34,512 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:43:34,512 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:45:34,513 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:45:34,513 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:47:34,513 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:47:34,513 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:49:34,513 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:49:34,513 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:51:34,514 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:51:34,514 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:53:34,515 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:53:34,516 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:55:34,516 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:55:34,516 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:57:34,517 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:57:34,517 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 15:59:34,520 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 15:59:34,520 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:01:34,523 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:01:34,523 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:03:34,524 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:03:34,524 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:05:34,525 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:05:34,525 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:07:34,527 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:07:34,528 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:09:34,529 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:09:34,529 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:11:34,531 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:11:34,531 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:13:34,533 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:13:34,533 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:15:34,534 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:15:34,534 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:17:34,537 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:17:34,537 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:19:34,539 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:19:34,539 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:21:34,541 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:21:34,541 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:23:34,542 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:23:34,542 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
2019-11-13 16:25:34,544 INFO
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <[0] expired
tickets removed.>
2019-11-13 16:25:34,544 DEBUG
[org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished
ticket cleanup.>
