Thank you, Ray I was able to see that my service was not being loaded, only the OAuth autogenerated service was.
My service json file was missing the .json extension, doh! 🤦♂️ that was it, it’s now working, thanks again! > Em 20 de out de 2021, à(s) 16:16, Ray Bon <[email protected]> escreveu: > > Ok, try this generalized version of the logger: > > <AsyncLogger name="org.apereo.cas.adaptor" level="debug" /> > > To be sure your service is loaded and is what you expect. > > Ray > > On Wed, 2021-10-20 at 14:30 -0300, Alcides Moraes wrote: >> Notice: This message was sent from outside the University of Victoria email >> system. Please be cautious with links and sensitive information. >> >> Hello Ray, thanks for the help. >> >> I use GitServiceRegistry so your logger is not outputting anything for me. >> I’ve turned on this: >> <AsyncLogger name="org.apereo.cas.services" level="trace" >> includeLocation="true”/> >> >> But I only get these messages >> DEBUG [org.apereo.cas.services.GitServiceRegistry] (scheduling-1) >> Successfully pulled changes from the remote repository >> INFO [org.apereo.cas.services.AbstractServicesManager] (scheduling-1) >> Loaded [1] service(s) from [GitServiceRegistry]. >> >> >>> Em 19 de out de 2021, à(s) 21:16, Ray Bon <[email protected] >>> <mailto:[email protected]>> escreveu: >>> >>> Alcides, >>> >>> Try this logger to see what services are being loaded >>> >>> <!-- DEBUG service definitions --> >>> <AsyncLogger >>> name="org.apereo.cas.adaptors.ldap.services.DefaultLdapRegisteredServiceMapper" >>> level="debug" /> >>> >>> Ray >>> >>> On Tue, 2021-10-19 at 15:10 -0700, Alcides Moraes wrote: >>>> Notice: This message was sent from outside the University of Victoria >>>> email system. Please be cautious with links and sensitive information. >>>> >>>> Hello list, >>>> >>>> I hope someone can help me, I'm trying to use CAS 6.3 as an OIDC identity >>>> provider to a Keycloak server version 12.0.4, however I only get the >>>> "Service Not Authorized" page from CAS. >>>> Both servers are already up and authenticating just fine. >>>> >>>> I've configured the Keycloak service in CAS with very minimalist json >>>> configuration, as follows: >>>> >>>> { >>>> "@class": "org.apereo.cas.services.OidcRegisteredService", >>>> "clientId": "keycloak-sdr-oidc", >>>> "clientSecret": "<secret>", >>>> "serviceId": "<keycloak-url>/broker/cas-server-lab-oidc/endpoint", >>>> "name": "Keycloak", >>>> "id": 1008 >>>> } >>>> >>>> I've configured CAS as an IDP using Keycloak GUI, passing the >>>> /oidc/.well-known URL which is working, and Keycloak autoconfigures >>>> itself, I just needed to input the clientSecret key. The serviceId >>>> configured above is the redirect uri Keycloak gives. >>>> >>>> Authenticating with Keycloak and clicking on the CAS provider button, I >>>> get the following URL: >>>> <cas-url>/oidc/authorize?scope=openid&state=0qSqbtCYF_DWyzLXRyiZldn2uP64J6esXeiP6UlVfNw.guRTVBHiRKw.sample-client&response_type=code&client_id=keycloak-sdr-oidc&redirect_uri=<keycloak-redirect-uri-encoded>&nonce=372Y_32lOgVg5IQDmna_mA >>>> >>>> This gives me only the Service Not Authorized CAS page. >>>> >>>> CAS log shows this: >>>> org.apereo.cas.support.oauth.validator.authorization.OAuth20AuthorizationCodeResponseTypeAuthorizationRequestValidator >>>> <>[WARN <>] Registered service [null] is not found or is not authorized >>>> for access. >>>> org.apereo.cas.support.oauth.web.endpoints.OAuth20AuthorizeEndpointController >>>> <> [ERROR <>] Authorize request verification failed. Authorization >>>> request is missing required parameters, or the request is not >>>> authenticated and contains no authenticated profile/principal. >>>> >>>> I'm pretty sure my service is being loaded, I get these log msgs (I use >>>> git service registry) >>>> org.apereo.cas.services.GitServiceRegistry <> [DEBUG <>] Successfully >>>> pulled changes from the remote repository >>>> org.apereo.cas.services.AbstractServicesManager <> [INFO <>] Loaded [2] >>>> service(s) from [GitServiceRegistry]. >>>> >>>> Any hints would be appreciated, thanks in advance. >>>> >>>> >>> -- >>> >>> Ray Bon >>> Programmer Analyst >>> Development Services, University Systems >>> 2507218831 | CLE 019 | [email protected] <mailto:[email protected]> >>> >>> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional >>> territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ >>> peoples whose historical relationships with the land continue to this day. >>> >>> -- >>> - Website: https://apereo.github.io/cas <https://apereo.github.io/cas> >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> <https://gitter.im/apereo/cas> >>> - List Guidelines: https://goo.gl/1VRrw7 <https://goo.gl/1VRrw7> >>> - Contributions: https://goo.gl/mh7qDG <https://goo.gl/mh7qDG> >>> --- >>> You received this message because you are subscribed to a topic in the >>> Google Groups "CAS Community" group. >>> To unsubscribe from this topic, visit >>> https://groups.google.com/a/apereo.org/d/topic/cas-user/bitV1fK0_do/unsubscribe >>> >>> <https://groups.google.com/a/apereo.org/d/topic/cas-user/bitV1fK0_do/unsubscribe>. >>> To unsubscribe from this group and all its topics, send an email to >>> [email protected] <mailto:[email protected]>. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/95e3adda5b70c6b582d1c20276f0d79d489d05ae.camel%40uvic.ca >>> >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/95e3adda5b70c6b582d1c20276f0d79d489d05ae.camel%40uvic.ca?utm_medium=email&utm_source=footer>. >> >> > -- > Ray Bon > Programmer Analyst > Development Services, University Systems > 2507218831 | CLE 019 | [email protected] <mailto:[email protected]> > > I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional > territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ > peoples whose historical relationships with the land continue to this day. > > -- > - Website: https://apereo.github.io/cas <https://apereo.github.io/cas> > - Gitter Chatroom: https://gitter.im/apereo/cas <https://gitter.im/apereo/cas> > - List Guidelines: https://goo.gl/1VRrw7 <https://goo.gl/1VRrw7> > - Contributions: https://goo.gl/mh7qDG <https://goo.gl/mh7qDG> > --- > You received this message because you are subscribed to a topic in the Google > Groups "CAS Community" group. > To unsubscribe from this topic, visit > https://groups.google.com/a/apereo.org/d/topic/cas-user/bitV1fK0_do/unsubscribe > > <https://groups.google.com/a/apereo.org/d/topic/cas-user/bitV1fK0_do/unsubscribe>. > To unsubscribe from this group and all its topics, send an email to > [email protected] <mailto:[email protected]>. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/09dc6a44cef6cd2001c1edbf5222e33696967587.camel%40uvic.ca > > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/09dc6a44cef6cd2001c1edbf5222e33696967587.camel%40uvic.ca?utm_medium=email&utm_source=footer>. -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/656B795C-F6FE-45A3-A407-D9118C03E353%40gmail.com.
