I'm testing out 6.2 RC5 and am getting an error with Duo: 

DEBUG [org.apereo.cas.web.FlowExecutionExceptionResolver] - <Ignoring the 
received exception 
[org.springframework.webflow.execution.ActionExecutionException: Exception 
thrown executing 
org.apereo.cas.adaptors.duo.web.flow.action.DuoSecurityPrepareWebLoginFormAction@5afaae7e
 
in state 'viewLoginFormDuo' of flow 'mfa-duo' -- action execution 
attributes were 'map['resolvedAuthenticationEvents' -> list[mfa-duo]]'] due 
to a type mismatch with handler 
[[FlowHandlerMapping.DefaultFlowHandler@5f5b9239]]>

I'm using pretty much the same Duo configuration from 6.0.x (which is 
working), but switched from camelCase to dashes as listed in the latest 
development documentation.  I got the same error with camel case too.

#####  DUO ####################################
cas.authn.mfa.duo[0].duo-secret-key=${CAS_DUO_SKEY}
cas.authn.mfa.duo[0].rank=0
cas.authn.mfa.duo[0].duo-application-key=${CAS_DUO_AKEY}
cas.authn.mfa.duo[0].duo-integration-key=${CAS_DUO_IKEY}
cas.authn.mfa.duo[0].duo-api-host=${CAS_DUO_HOST}
cas.authn.mfa.duo[0].trusted-device-enabled=false
cas.authn.mfa.duo[0].id=mfa-duo
cas.authn.mfa.duo[0].name=SCAD DUO
cas.authn.mfa.duo[0].order=1
# but this one stays camelCase
cas.authn.mfa.groovyScript=file:/etc/cas/ScadMfa.groovy

And I can actually see a response from Duo early in the log that indicates 
it retrieved my account info.

Also, I am using the default theme with no changes.

Any help would be appreciated. 

Thank you,
Mike


-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/dba1319a-cb46-477a-9d8e-0e8a33d51800o%40apereo.org.

Reply via email to