As an additional debugging point, I tested this on 7.1.0-SNAPSHOT and it loads all services as expected, so it looks like this is 7.0.x specific.
On Tuesday, June 11, 2024 at 12:49:33 PM UTC-4 Josh wrote: > Hi Meysam - > > Here is the JDK version we are running in our DEV env > > CAS Version: 7.0.4 > CAS Branch: 7.0.x > CAS Commit Id: d41ac9d5e157605fc43d97a77582c2062e864874 > CAS Build Date/Time: 2024-04-26T07:43:16.528866Z > Spring Boot Version: 3.2.1 > Spring Version: 6.1.2 > Java Home: /usr/lib/jvm/zulu21-ca-amd64 > Java Vendor: Azul Systems, Inc. > Java Version: 21.0.3 > Servlet Version: 6.0.0 > JVM Free Memory: 144 MB > JVM Maximum Memory: 2 GB > JVM Total Memory: 278 MB > OS Architecture: amd64 > OS Name: Linux > OS Version: 5.14.0-427.16.1.el9_4.x86_64 > OS Date/Time: 2024-06-11T16:39:14.993620776 > OS Temp Directory: /tmp > ------------------------------------------------------------ > Apache Tomcat Version: Apache Tomcat/10.1.23 > Hazelcast Version: 5.3.6.9903dc9.20231109 > ------------------------------------------------------------ > > This should match the version provided in the Dockerfile. > > On Saturday, April 13, 2024 at 4:08:20 AM UTC-4 Meysam Shirazi wrote: > >> Hi Josh >> Check the JDK version. >> >> On Friday, April 12, 2024 at 12:41:49 AM UTC+3:30 Josh wrote: >> >>> Hi all - >>> >>> We're in the process of migrating from CAS 6.6.x to CAS 7.0.x. We have >>> several hundred services in our production environment working fine, >>> however when starting CAS 7.0.3 in our test environment it seems to bail >>> out hard loading some specific services and the application shuts down. >>> >>> Here is the error we are receiving: >>> >>> 2024-04-11 15:44:06,843 ERROR >>> [org.apereo.cas.util.concurrent.CasReentrantLock] - <Cannot invoke >>> "Object.hashCode()" because "key" is null >>> ConcurrentHashMap.java:get:936 >>> AbstractMapBasedAttributeIndex.java:addAll:81 >>> CollectionQueryEngine.java:perform:1376 >>> > >>> 2024-04-11 15:44:06,882 ERROR >>> [org.springframework.boot.SpringApplication] - <Application run failed> >>> >>> The commonality seems to be having a HashMap (also indicated by the >>> error) in the service. >>> >>> Here is one example, which is working just fine in CAS 6.6 (we've likely >>> had this config in place since at least the CAS 5.x days, maybe earlier). I >>> reviewed the documentation ( >>> https://apereo.github.io/cas/7.0.x/services/Service-Access-Strategy-ABAC.html) >>> >>> to make sure nothing changed but I am just not seeing it. >>> >>> accessStrategy : { >>> @class : >>> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >>> enabled : true >>> ssoEnabled : true >>> caseInsensitive: true >>> requireAllAttributes: false >>> unauthorizedRedirectUrl : https://support.XXX.XXX >>> requiredAttributes : { >>> @class : java.util.HashMap >>> memberOf : [ "java.util.HashSet", [ >>> "CN=Bomgar_Admins,OU=Role Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >>> } >>> } >>> >>> I am also attaching the full service definition below: >>> >>> { >>> @class : org.apereo.cas.support.saml.services.SamlRegisteredService >>> serviceId : https://bomgar.XXX.XXX/appliance >>> name : bomgar.XXX.XXX >>> id : 50092 >>> evaluationOrder : 100 >>> metadataLocation : >>> /etc/cas/saml/metadata/BomgarAppliance-metadata.xml >>> accessStrategy : { >>> @class : >>> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >>> enabled : true >>> ssoEnabled : true >>> caseInsensitive: true >>> requireAllAttributes: false >>> unauthorizedRedirectUrl : https://support.XXX.XXX >>> requiredAttributes : { >>> @class : java.util.HashMap >>> memberOf : [ "java.util.HashSet", [ >>> "CN=Bomgar_Admins,OU=Role Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >>> } >>> } >>> attributeReleasePolicy : { >>> @class : >>> org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy >>> allowedAttributes : [ >>> java.util.ArrayList >>> [ >>> displayName >>> mail >>> memberOf >>> ] >>> ] >>> } >>> requiredNameIdFormat: >>> urn:oasis:names:tc:SAML:2.0:nameid-format:persistent >>> usernameAttributeProvider : { >>> @class : >>> org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider >>> usernameAttribute : sAMAccountName >>> } >>> } >>> >>> Any assistance would be greatly appreciated. >>> >>> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/c19f1b5a-93b0-4187-b56b-d5581de3cff2n%40apereo.org.
