works for me cas 6.1.x
# you must read documentation if you want authenticated with spring, was
never able to make it work and cas-management works on IP only. I needed
only health check and discoveryProfile, the rest was not comfortable using
with IP restrictions only.
# the ".sensitive" parameters were 5.x. Do not believe they apply any
longer.
# Feel free to share if you got the below working successfully with other
authentication besides: IP_ADDRESS
#in cas.properties
# assuming only limited services of interest.
management.endpoint.health.enabled=true
management.endpoint.status.enabled=true
management.endpoint.discoveryProfile.enabled=true
...
# regex based IP_A|IP_B|IP_C
# regex examples no cidr support but you can simulate it, others also might
work: 172.*| 192.168.*| 192.168.1[4-9]{1}.*|192.168.223.1
cas.monitor.endpoints.endpoint.health.access[0]=IP_ADDRESS
cas.monitor.endpoints.endpoint.health.requiredIpAddresses[0]=IP_A|IP_B|IP_C
cas.monitor.endpoints.endpoint.status.access[0]=IP_ADDRESS
cas.monitor.endpoints.endpoint.status.requiredIpAddresses[0]=IP_A|IP_B|IP_C
cas.monitor.endpoints.endpoint.dashboard.access[0]=IP_ADDRESS
cas.monitor.endpoints.endpoint.dashboard.requiredIpAddresses[0]=IP_A|IP_B|IP_C
cas.monitor.endpoints.endpoint.discoveryProfile.access[0]=IP_ADDRESS
cas.monitor.endpoints.endpoint.discoveryProfile.requiredIpAddresses[0]=IP_A|IP_B|IP_C
# IMPORTANT DANGEROUS DO NOT ENABLE. ZERO Authentication if ANONYMOUS
#### cas.monitor.endpoints.endpoint.defaults.access=ANONYMOUS
...
management.endpoints.enabled-by-default=true
management.endpoints.web.base-path=/actuator
# discoveryProfile used by cas-management, WORKS only by IP address access.
Restrict it.
# include/exclude you have to look a the documentation for whatever is best
for you
### Enable only what you need, thus you enable the entry, then you need to
specify the above block(s) as well.
## Possible values:
info,health,status,configurationMetadata,springWebflow,auditLog,registeredServices,ssoSessions,statistics,resolveAttributes,
##
yubikeyAccountRepository,loggingConfig,configprops,env,loggers,threaddump,metrics,mappings,features,discoveryProfile
and others probably missed.
management.endpoints.web.exposure.include=info,health,status,configurationMetadata,discoveryProfile
# block everything put a * on it.
management.endpoints.web.exposure.exclude=
to get to it adjust for port as well
# see what else you can see
https://ABC[.]DEF[.]com/cas/actuator/
https://ABC[.]DEF[.]com/cas/actuator/health -- aka status of prior versions
https://ABC[.]DEF[.]com/cas/actuator/discoveryProfile -- cas-management
uses this and returns XML format.
https://ABC[.]DEF[.]com/cas/actuator/status
Good Luck.
On Tuesday, July 21, 2020 at 1:45:41 PM UTC-4 [email protected] wrote:
> We can't get the status/discovery endpoint to work following this:
>
>
> https://apereo.github.io/cas/5.3.x/installation/Configuration-Properties.html#cas-endpoints
>
> We keep getting this error message:
>
> Property: cas.monitor.endpoints.discovery.enabled
> Value: true
> Origin: "cas.monitor.endpoints.discovery.enabled" from property source
> "bootstrapProperti
> es"
> Reason: The elements
> [cas.monitor.endpoints.discovery.enabled,cas.monitor.endpoints.disco
> very.sensitive,cas.monitor.endpoints.status.enabled,cas.monitor.endpoints.status.sensitive]
>
> w
> ere left unbound.
> Property: cas.monitor.endpoints.discovery.sensitive
> Value: false
> Origin: "cas.monitor.endpoints.discovery.sensitive" from property
> source "bootstrapProperties"
> Reason: The elements
> [cas.monitor.endpoints.discovery.enabled,cas.monitor.endpoints.discovery.sensitive,cas.monitor.endpoints.status.enabled,cas.monitor.endpoints.status.sensitive]
>
> were left unbound.
> Property: cas.monitor.endpoints.status.enabled
> Value: true
> Origin: "cas.monitor.endpoints.status.enabled" from property source
> "bootstrapProperties"
> Reason: The elements
> [cas.monitor.endpoints.discovery.enabled,cas.monitor.endpoints.discovery.sensitive,cas.monitor.endpoints.status.enabled,cas.monitor.endpoints.status.sensitive]
>
> were left unbound.
>
> Any suggestions?
>
> -Bryan
>
> University of Utah
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/87f5f8a3-cf5d-4180-8665-857f8e82f188n%40apereo.org.
