Hi,
just in case anyone out there is still using the 5.3.x version and
building the overlay with maven.
I have added these lines to the dependencies section:
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
<version>${log4j.version}</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-core</artifactId>
<version>${log4j.version}</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-jcl</artifactId>
<version>${log4j.version}</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-slf4j-impl</artifactId>
<version>${log4j.version}</version>
<scope>runtime</scope>
</dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-web</artifactId>
<version>${log4j.version}</version>
<scope>runtime</scope>
</dependency>
and these lines to the excludes section of the maven-war-plugin
<overlays>
<overlay>
<groupId>org.apereo.cas</groupId>
<artifactId>cas-server-webapp${app.server}</artifactId>
<excludes>
<exclude>WEB-INF/lib/log4j-api-2.12.1.jar</exclude>
<exclude>WEB-INF/lib/log4j-core-2.12.1.jar</exclude>
<exclude>WEB-INF/lib/log4j-jcl-2.12.1.jar</exclude>
<exclude>WEB-INF/lib/log4j-slf4j-impl-2.12.1.jar</exclude>
<exclude>WEB-INF/lib/log4j-web-2.12.1.jar</exclude>
</excludes>
</overlay>
</overlays>
Best regards,
Lars
On 15.12.21 21:24, Baba Ndiaye wrote:
Thank you Jeff
Le mercredi 15 décembre 2021 à 19:46:39 UTC, [email protected] a
écrit :
I did this based on what was posted earlier in the thread
to update 6.2.
-- add to build.gradle dependencies section
implementation "org.apache.logging.log4j:log4j-api:2.16.0"
implementation "org.apache.logging.log4j:log4j-core:2.16.0"
implementation "org.apache.logging.log4j:log4j-jcl:2.16.0"
implementation "org.apache.logging.log4j:log4j-jul:2.16.0"
implementation "org.apache.logging.log4j:log4j-web:2.16.0"
implementation
"org.apache.logging.log4j:log4j-slf4j18-impl:2.16.0"
-- add to the end of build.gradle
bootWar {
entryCompression = ZipEntryCompression.STORED
overlays {
cas {
from
"org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war"
provided = false
excludes =
["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
}
}
}
I would recommend you unpack the new war once it is built and
update the excludes list as needed.
-Jeff
-Jeff
On Wed, Dec 15, 2021 at 2:22 PM Baba Ndiaye <[email protected]>
wrote:
good evening
I would like to know if we make an update of log4j 2.16 how to
know if CAS has supported it (use it) and also for the update
we only need to add this lines
dependencies { compile
"org.apache.logging.log4j:log4j-api:2.15.0" compile
"org.apache.logging.log4j:log4j-core:2.15.0" compile
"org.apache.logging.log4j:log4j-jcl:2.15.0" compile
"org.apache.logging.log4j:log4j-jul:2.15.0" compile
"org.apache.logging.log4j:log4j-web:2.15.0" compile
"org.apache.logging.log4j:log4j-slf4j18-impl:2.15.0" }
Le mer. 15 déc. 2021 à 03:43, Jeffrey Ramsay
<[email protected]> a écrit :
Robert and Joe,
Your examples were really helpful. I was able to combine
the steps and patch our systems.
Thanks,
-Jeff
On Tue, Dec 14, 2021 at 1:58 PM Pablo Vidaurri
<[email protected]> wrote:
Note v2.16.0 is now out .... a patch for the patch
On Tuesday, December 14, 2021 at 10:02:48 AM UTC-6
apereo_cas_user wrote:
We use cas 6.1.7 overlay template [still in
pre-prod] for delegated authentication.
As a temp solution we replaced log4j 2.12.1 with
2.15.0 manually and bounced tomcat.
Is there a way we can exclude 2.12.1 from the
build . [I can pull in 2.15.0 by adding in
build.gradle but conflict with 2.12.1]. We have
issues when upgrading to 6.3.7.2
Thanks
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed
to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving
emails from it, send an email to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org?utm_medium=email&utm_source=footer>.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to
the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails
from it, send an email to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com?utm_medium=email&utm_source=footer>.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the
Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from
it, send an email to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com?utm_medium=email&utm_source=footer>.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send
an email to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/fcad2878-75a4-4bf0-87b2-a11d2fb1a84cn%40apereo.org
<https://groups.google.com/a/apereo.org/d/msgid/cas-user/fcad2878-75a4-4bf0-87b2-a11d2fb1a84cn%40apereo.org?utm_medium=email&utm_source=footer>.
--
*Lars Feistner*
Entwicklungsleitung
Phone: +49 6221/186749-5
Mail: [email protected]
*Institut für Kommunikations- und Prüfungsforschung gGmbH*
Institute for Communication and Assessment Research
Wieblinger Weg 92a
69123 Heidelberg, Germany
Web: www.ucan-assess.org <https://www.ucan-assess.org>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/8c84c9c8-81d1-2c41-bdf2-a3d13566e7f1%40cares.institute.
