Wondering if there was any update on this? The issue is still present in 7.0.6 but not present in 7.1.0-SNAPSHOT.
On Tuesday, June 11, 2024 at 1:11:01 PM UTC-4 Josh wrote: > As an additional debugging point, I tested this on 7.1.0-SNAPSHOT and it > loads all services as expected, so it looks like this is 7.0.x specific. > > On Tuesday, June 11, 2024 at 12:49:33 PM UTC-4 Josh wrote: > >> Hi Meysam - >> >> Here is the JDK version we are running in our DEV env >> >> CAS Version: 7.0.4 >> CAS Branch: 7.0.x >> CAS Commit Id: d41ac9d5e157605fc43d97a77582c2062e864874 >> CAS Build Date/Time: 2024-04-26T07:43:16.528866Z >> Spring Boot Version: 3.2.1 >> Spring Version: 6.1.2 >> Java Home: /usr/lib/jvm/zulu21-ca-amd64 >> Java Vendor: Azul Systems, Inc. >> Java Version: 21.0.3 >> Servlet Version: 6.0.0 >> JVM Free Memory: 144 MB >> JVM Maximum Memory: 2 GB >> JVM Total Memory: 278 MB >> OS Architecture: amd64 >> OS Name: Linux >> OS Version: 5.14.0-427.16.1.el9_4.x86_64 >> OS Date/Time: 2024-06-11T16:39:14.993620776 >> OS Temp Directory: /tmp >> ------------------------------------------------------------ >> Apache Tomcat Version: Apache Tomcat/10.1.23 >> Hazelcast Version: 5.3.6.9903dc9.20231109 >> ------------------------------------------------------------ >> >> This should match the version provided in the Dockerfile. >> >> On Saturday, April 13, 2024 at 4:08:20 AM UTC-4 Meysam Shirazi wrote: >> >>> Hi Josh >>> Check the JDK version. >>> >>> On Friday, April 12, 2024 at 12:41:49 AM UTC+3:30 Josh wrote: >>> >>>> Hi all - >>>> >>>> We're in the process of migrating from CAS 6.6.x to CAS 7.0.x. We have >>>> several hundred services in our production environment working fine, >>>> however when starting CAS 7.0.3 in our test environment it seems to bail >>>> out hard loading some specific services and the application shuts down. >>>> >>>> Here is the error we are receiving: >>>> >>>> 2024-04-11 15:44:06,843 ERROR >>>> [org.apereo.cas.util.concurrent.CasReentrantLock] - <Cannot invoke >>>> "Object.hashCode()" because "key" is null >>>> ConcurrentHashMap.java:get:936 >>>> AbstractMapBasedAttributeIndex.java:addAll:81 >>>> CollectionQueryEngine.java:perform:1376 >>>> > >>>> 2024-04-11 15:44:06,882 ERROR >>>> [org.springframework.boot.SpringApplication] - <Application run failed> >>>> >>>> The commonality seems to be having a HashMap (also indicated by the >>>> error) in the service. >>>> >>>> Here is one example, which is working just fine in CAS 6.6 (we've >>>> likely had this config in place since at least the CAS 5.x days, maybe >>>> earlier). I reviewed the documentation ( >>>> https://apereo.github.io/cas/7.0.x/services/Service-Access-Strategy-ABAC.html) >>>> >>>> to make sure nothing changed but I am just not seeing it. >>>> >>>> accessStrategy : { >>>> @class : >>>> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >>>> enabled : true >>>> ssoEnabled : true >>>> caseInsensitive: true >>>> requireAllAttributes: false >>>> unauthorizedRedirectUrl : https://support.XXX.XXX >>>> requiredAttributes : { >>>> @class : java.util.HashMap >>>> memberOf : [ "java.util.HashSet", [ >>>> "CN=Bomgar_Admins,OU=Role Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >>>> } >>>> } >>>> >>>> I am also attaching the full service definition below: >>>> >>>> { >>>> @class : org.apereo.cas.support.saml.services.SamlRegisteredService >>>> serviceId : https://bomgar.XXX.XXX/appliance >>>> name : bomgar.XXX.XXX >>>> id : 50092 >>>> evaluationOrder : 100 >>>> metadataLocation : >>>> /etc/cas/saml/metadata/BomgarAppliance-metadata.xml >>>> accessStrategy : { >>>> @class : >>>> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >>>> enabled : true >>>> ssoEnabled : true >>>> caseInsensitive: true >>>> requireAllAttributes: false >>>> unauthorizedRedirectUrl : https://support.XXX.XXX >>>> requiredAttributes : { >>>> @class : java.util.HashMap >>>> memberOf : [ "java.util.HashSet", [ >>>> "CN=Bomgar_Admins,OU=Role Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >>>> } >>>> } >>>> attributeReleasePolicy : { >>>> @class : >>>> org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy >>>> allowedAttributes : [ >>>> java.util.ArrayList >>>> [ >>>> displayName >>>> mail >>>> memberOf >>>> ] >>>> ] >>>> } >>>> requiredNameIdFormat: >>>> urn:oasis:names:tc:SAML:2.0:nameid-format:persistent >>>> usernameAttributeProvider : { >>>> @class : >>>> org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider >>>> usernameAttribute : sAMAccountName >>>> } >>>> } >>>> >>>> Any assistance would be greatly appreciated. >>>> >>>> -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/cfb348cd-7990-4fe2-9348-f17c0ac00358n%40apereo.org.
