Hi Meysam - Here is the JDK version we are running in our DEV env
CAS Version: 7.0.4 CAS Branch: 7.0.x CAS Commit Id: d41ac9d5e157605fc43d97a77582c2062e864874 CAS Build Date/Time: 2024-04-26T07:43:16.528866Z Spring Boot Version: 3.2.1 Spring Version: 6.1.2 Java Home: /usr/lib/jvm/zulu21-ca-amd64 Java Vendor: Azul Systems, Inc. Java Version: 21.0.3 Servlet Version: 6.0.0 JVM Free Memory: 144 MB JVM Maximum Memory: 2 GB JVM Total Memory: 278 MB OS Architecture: amd64 OS Name: Linux OS Version: 5.14.0-427.16.1.el9_4.x86_64 OS Date/Time: 2024-06-11T16:39:14.993620776 OS Temp Directory: /tmp ------------------------------------------------------------ Apache Tomcat Version: Apache Tomcat/10.1.23 Hazelcast Version: 5.3.6.9903dc9.20231109 ------------------------------------------------------------ This should match the version provided in the Dockerfile. On Saturday, April 13, 2024 at 4:08:20 AM UTC-4 Meysam Shirazi wrote: > Hi Josh > Check the JDK version. > > On Friday, April 12, 2024 at 12:41:49 AM UTC+3:30 Josh wrote: > >> Hi all - >> >> We're in the process of migrating from CAS 6.6.x to CAS 7.0.x. We have >> several hundred services in our production environment working fine, >> however when starting CAS 7.0.3 in our test environment it seems to bail >> out hard loading some specific services and the application shuts down. >> >> Here is the error we are receiving: >> >> 2024-04-11 15:44:06,843 ERROR >> [org.apereo.cas.util.concurrent.CasReentrantLock] - <Cannot invoke >> "Object.hashCode()" because "key" is null >> ConcurrentHashMap.java:get:936 >> AbstractMapBasedAttributeIndex.java:addAll:81 >> CollectionQueryEngine.java:perform:1376 >> > >> 2024-04-11 15:44:06,882 ERROR >> [org.springframework.boot.SpringApplication] - <Application run failed> >> >> The commonality seems to be having a HashMap (also indicated by the >> error) in the service. >> >> Here is one example, which is working just fine in CAS 6.6 (we've likely >> had this config in place since at least the CAS 5.x days, maybe earlier). I >> reviewed the documentation ( >> https://apereo.github.io/cas/7.0.x/services/Service-Access-Strategy-ABAC.html) >> >> to make sure nothing changed but I am just not seeing it. >> >> accessStrategy : { >> @class : >> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >> enabled : true >> ssoEnabled : true >> caseInsensitive: true >> requireAllAttributes: false >> unauthorizedRedirectUrl : https://support.XXX.XXX >> requiredAttributes : { >> @class : java.util.HashMap >> memberOf : [ "java.util.HashSet", [ "CN=Bomgar_Admins,OU=Role >> Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >> } >> } >> >> I am also attaching the full service definition below: >> >> { >> @class : org.apereo.cas.support.saml.services.SamlRegisteredService >> serviceId : https://bomgar.XXX.XXX/appliance >> name : bomgar.XXX.XXX >> id : 50092 >> evaluationOrder : 100 >> metadataLocation : /etc/cas/saml/metadata/BomgarAppliance-metadata.xml >> accessStrategy : { >> @class : >> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >> enabled : true >> ssoEnabled : true >> caseInsensitive: true >> requireAllAttributes: false >> unauthorizedRedirectUrl : https://support.XXX.XXX >> requiredAttributes : { >> @class : java.util.HashMap >> memberOf : [ "java.util.HashSet", [ "CN=Bomgar_Admins,OU=Role >> Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >> } >> } >> attributeReleasePolicy : { >> @class : >> org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy >> allowedAttributes : [ >> java.util.ArrayList >> [ >> displayName >> mail >> memberOf >> ] >> ] >> } >> requiredNameIdFormat: >> urn:oasis:names:tc:SAML:2.0:nameid-format:persistent >> usernameAttributeProvider : { >> @class : >> org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider >> usernameAttribute : sAMAccountName >> } >> } >> >> Any assistance would be greatly appreciated. >> >> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/81db2c47-bcea-4824-baca-23498720bd9en%40apereo.org.
