Hi Geo,

That stack trace says that deployerConfigContext defines a bean that is an 
instance of the CacheCredentialsMetaDataPopulator class that has a reference to 
a bean named "credentialsCache", but there's no bean named "credentialsCache" 
defined.

So, you need to define such a cache bean. :)


The bit where you say you downloaded the clearpass-impl.jar and put it into lib 
sounds like a pretty difficult way to go.  You meant to be declaring dependency 
on ClearPass in your pom.xml so that it would automatically pull in the 
required files when you build your local CAS build, right?

Because you're not actually supposed to have to manually define the 
credentialsCache bean. It's defined in clearpass-configuration.xml .  Which is 
supposed to automatically be included in your combined built local CAS .war by 
virtue of the Maven overlay process.

https://github.com/Unicon/clearpass/blob/master/clearpass-webapp/src/main/webapp/WEB-INF/spring-configuration/clearpass-configuration.xml

You could piece together your own CAS war from the clear pass files and jars 
and so forth.  That might be more or less painful than re-doing your local CAS 
build strategy to do Maven Overlay.  I'd suggest going the maven overlay 
approach.



Yes, you can use ClearPass and SAML, but not  at the same time, since relying 
parties using CAS's SAML support can't get a PGT, so they can't get a PT, so 
they can't authenticate to Clearpass.  This is one reason there's desire to get 
to an improved CAS2 style protocol response that releases attributes yet 
continues to support proxy CAS.

No, there's no security risk when using ClearPass, aside from all the security 
risk of using ClearPass.  ClearPass is a system for caching and selectively 
releasing end user passwords.  Only do that soberly, deliberately, and with 
care.  :)

If you haven't seen my Clearpass talk, it might be worth the hour. I talk a bit 
about security considerations in ClearPass, about how it uses SSL and proxy CAS 
to achieve what security considerations.

http://vimeo.com/11630521

Kind regards,

Andrew



On Feb 7, 2012, at 7:03 AM, Geo PC wrote:

> Hi
> 
> We have CAS server in which it is configured to have SAML assertions to pass 
> and is working fine. To integrate PWM with CAS we need to have ClearPass. For 
> enabling ClearPass as per the link 
> https://wiki.jasig.org/display/CASUM/ClearPass on the existing 
> deployerConfigContext.xml added AuthenticationMetaDataPopulator and 
> downloaded clearpass-impl-1.0.7.GA.jar and placed in lib directory. Now cas 
> is not loading and getting a http 404 error.
> 
> From error log it shows:
> -------------------------
> org.springframework.beans.factory.BeanCreationException: Error creating bean 
> with name 'centralAuthenticationService' defined in ServletContext resource 
> [/WEB-INF/spring-configuration/applicationContext.xml]: Cannot resolve 
> reference to bean 'authenticationManager' while setting bean property 
> 'authenticationManager'; nested exception is 
> org.springframework.beans.factory.BeanCreationException: Error creating bean 
> with name 'authenticationManager' defined in ServletContext resource 
> [/WEB-INF/deployerConfigContext.xml]: Cannot create inner bean 
> 'org.jasig.cas3.extensions.clearpass.CacheCredentialsMetaDataPopulator#1544e44'
>  of type 
> [org.jasig.cas3.extensions.clearpass.CacheCredentialsMetaDataPopulator] while 
> setting bean property 'authenticationMetaDataPopulators' with key [0]; nested 
> exception is org.springframework.beans.factory.BeanCreationException: Error 
> creating bean with name 
> 'org.jasig.cas3.extensions.clearpass.CacheCredentialsMetaDataPopulator#1544e44'
>  defined in ServletContext resource [/WEB-INF/deployerConfigContext.xml]: 
> Cannot resolve reference to bean 'credentialsCache' while setting constructor 
> argument; nested exception is 
> org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean 
> named 'credentialsCache' is defined
> ---------------------------
> 
> 
> Can you please help me on this. Also please let me know is it possible to 
> have both ClearPass and SAML, also is there any security risk while using 
> ClearPass . Please have a help
> 
> Thanks
> Geo
> -- 
> You are currently subscribed to [email protected] as: [email protected]
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user


-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to