Thanks, Lars. Very helpful
On Thu, Dec 16, 2021 at 11:18 AM Lars Feistner <[email protected]>
wrote:
> Hi,
>
> just in case anyone out there is still using the 5.3.x version and
> building the overlay with maven.
> I have added these lines to the dependencies section:
> <dependency>
> <groupId>org.apache.logging.log4j</groupId>
> <artifactId>log4j-api</artifactId>
> <version>${log4j.version}</version>
> <scope>runtime</scope>
> </dependency>
> <dependency>
> <groupId>org.apache.logging.log4j</groupId>
> <artifactId>log4j-core</artifactId>
> <version>${log4j.version}</version>
> <scope>runtime</scope>
> </dependency>
> <dependency>
> <groupId>org.apache.logging.log4j</groupId>
> <artifactId>log4j-jcl</artifactId>
> <version>${log4j.version}</version>
> <scope>runtime</scope>
> </dependency>
> <dependency>
> <groupId>org.apache.logging.log4j</groupId>
> <artifactId>log4j-slf4j-impl</artifactId>
> <version>${log4j.version}</version>
> <scope>runtime</scope>
> </dependency>
> <dependency>
> <groupId>org.apache.logging.log4j</groupId>
> <artifactId>log4j-web</artifactId>
> <version>${log4j.version}</version>
> <scope>runtime</scope>
> </dependency>
> and these lines to the excludes section of the maven-war-plugin
> <overlays>
> <overlay>
> <groupId>org.apereo.cas</groupId>
> <artifactId>cas-server-webapp${app.server}</artifactId>
> <excludes>
> <exclude>WEB-INF/lib/log4j-api-2.12.1.jar</exclude>
> <exclude>WEB-INF/lib/log4j-core-2.12.1.jar</exclude>
> <exclude>WEB-INF/lib/log4j-jcl-2.12.1.jar</exclude>
> <exclude>WEB-INF/lib/log4j-slf4j-impl-2.12.1.jar</exclude>
> <exclude>WEB-INF/lib/log4j-web-2.12.1.jar</exclude>
> </excludes>
> </overlay>
> </overlays>
>
> Best regards,
> Lars
>
>
>
> On 15.12.21 21:24, Baba Ndiaye wrote:
>
> Thank you Jeff
>
> Le mercredi 15 décembre 2021 à 19:46:39 UTC, [email protected] a
> écrit :
>
>> I did this based on what was posted earlier in the thread to update 6.2.
>>
>> -- add to build.gradle dependencies section
>>
>> implementation "org.apache.logging.log4j:log4j-api:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-core:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-jcl:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-jul:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-web:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-slf4j18-impl:2.16.0"
>>
>> -- add to the end of build.gradle
>>
>> bootWar {
>> entryCompression = ZipEntryCompression.STORED
>> overlays {
>> cas {
>> from
>> "org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war
>> "
>> provided = false
>> excludes =
>> ["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
>> }
>> }
>> }
>>
>> I would recommend you unpack the new war once it is built and update the
>> excludes list as needed.
>>
>> -Jeff
>> -Jeff
>>
>>
>> On Wed, Dec 15, 2021 at 2:22 PM Baba Ndiaye <[email protected]> wrote:
>>
>>> good evening
>>>
>>> I would like to know if we make an update of log4j 2.16 how to know if CAS
>>> has supported it (use it) and also for the update we only need to add this
>>> lines
>>>
>>>
>>> dependencies { compile "org.apache.logging.log4j:log4j-api:2.15.0"
>>> compile "org.apache.logging.log4j:log4j-core:2.15.0" compile
>>> "org.apache.logging.log4j:log4j-jcl:2.15.0" compile
>>> "org.apache.logging.log4j:log4j-jul:2.15.0" compile
>>> "org.apache.logging.log4j:log4j-web:2.15.0" compile
>>> "org.apache.logging.log4j:log4j-slf4j18-impl:2.15.0"}
>>>
>>>
>>> Le mer. 15 déc. 2021 à 03:43, Jeffrey Ramsay <[email protected]> a
>>> écrit :
>>>
>>>> Robert and Joe,
>>>>
>>>> Your examples were really helpful. I was able to combine the steps and
>>>> patch our systems.
>>>>
>>>> Thanks,
>>>> -Jeff
>>>>
>>>> On Tue, Dec 14, 2021 at 1:58 PM Pablo Vidaurri <[email protected]>
>>>> wrote:
>>>>
>>>>> Note v2.16.0 is now out .... a patch for the patch
>>>>>
>>>>> On Tuesday, December 14, 2021 at 10:02:48 AM UTC-6 apereo_cas_user
>>>>> wrote:
>>>>>
>>>>>> We use cas 6.1.7 overlay template [still in pre-prod] for delegated
>>>>>> authentication.
>>>>>> As a temp solution we replaced log4j 2.12.1 with 2.15.0 manually and
>>>>>> bounced tomcat.
>>>>>> Is there a way we can exclude 2.12.1 from the build . [I can pull in
>>>>>> 2.15.0 by adding in build.gradle but conflict with 2.12.1]. We have
>>>>>> issues
>>>>>> when upgrading to 6.3.7.2
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>> --
>>>>> - Website: https://apereo.github.io/cas
>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>>> - Contributions: https://goo.gl/mh7qDG
>>>>> ---
>>>>> You received this message because you are subscribed to the Google
>>>>> Groups "CAS Community" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>>> an email to [email protected].
>>>>> To view this discussion on the web visit
>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org
>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org?utm_medium=email&utm_source=footer>
>>>>> .
>>>>>
>>>> --
>>>> - Website: https://apereo.github.io/cas
>>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>>> - List Guidelines: https://goo.gl/1VRrw7
>>>> - Contributions: https://goo.gl/mh7qDG
>>>> ---
>>>> You received this message because you are subscribed to the Google
>>>> Groups "CAS Community" group.
>>>> To unsubscribe from this group and stop receiving emails from it, send
>>>> an email to [email protected].
>>>> To view this discussion on the web visit
>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com
>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com?utm_medium=email&utm_source=footer>
>>>> .
>>>>
>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to [email protected].
>>>
>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com
>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com?utm_medium=email&utm_source=footer>
>>> .
>>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/fcad2878-75a4-4bf0-87b2-a11d2fb1a84cn%40apereo.org
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/fcad2878-75a4-4bf0-87b2-a11d2fb1a84cn%40apereo.org?utm_medium=email&utm_source=footer>
> .
>
>
> --
> *Lars Feistner*
> Entwicklungsleitung
> Phone: +49 6221/186749-5
> Mail: [email protected]
> *Institut für Kommunikations- und Prüfungsforschung gGmbH*
> Institute for Communication and Assessment Research
> Wieblinger Weg 92a
> 69123 Heidelberg, Germany
> Web: www.ucan-assess.org
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/8c84c9c8-81d1-2c41-bdf2-a3d13566e7f1%40cares.institute
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/8c84c9c8-81d1-2c41-bdf2-a3d13566e7f1%40cares.institute?utm_medium=email&utm_source=footer>
> .
>
--
"Confusion is a word we have invented for an order which is not
understood." ~Henry Miller
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vEE%3Dafh%3DLcoHvQnaQM5-qv7nV-Hvx%3DtV_8dwJ5U7PxE4w%40mail.gmail.com.