I'm using the Unicon maven overlay with CAS 3.5.2 - I'm planning on upgrading to 4 in a month or so, but at the moment we're launching our new login system, so I'm just tweaking the current build.
After setting debug levels, Localhost error log showed the following on second load: Jan 29, 2015 2:03:36 PM org.apache.catalina.core.StandardWrapperValve invoke SEVERE: Servlet.service() for servlet [cas] in context with path [/cas] threw exception [Request processing failed; nested exception is org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing [AnnotatedAction@20d15464 targetAction = [EvaluateAction@efb8211 expression = authenticationSupport.getAuthenticatedPrincipalFrom(requestScope.ticketGrantingTicketId), resultExpression = requestScope.principal], attributes = map[[empty]]] in state 'viewGenericLoginSuccess' of flow 'login' -- action execution attributes were 'map[[empty]]'] with root cause java.lang.NullPointerException: Null key is not allowed! I'm assuming the expression evaluates to null because there is no need to invoke granting a ticket after a user has already logged in(?). Is it possible then to evaluate the principal id from existing tickets? On Thu, Jan 29, 2015 at 11:57 AM, Misagh Moayyed <[email protected]> wrote: > What CAS server version are you using? And was there anything in your > “localhost” tomcat log file? > > > > This probably fails because your “requestScope.principal” ends up being > null on subsequent attempts. If you enable the webflow logs to DEBUG you > should be able to observe what that expression is doing. > > > > *From:* Mike Seiler [mailto:[email protected]] > *Sent:* Thursday, January 29, 2015 12:40 PM > *To:* [email protected] > *Subject:* Re: [cas-user] CAS Unavailable Error with casGenericSuccess.jsp > > > > The cas log only states that I was successfully authenticated, and the > catalina log doesn't have anything beyond startup logs. > > > > CAS Log: > > 2015-01-29 11:01:12,654 INFO > [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit > trail record BEGIN > > ============================================================= > > WHO: [username: michaelseiler] > > WHAT: supplied credentials: [username: michaelseiler] > > ACTION: AUTHENTICATION_SUCCESS > > APPLICATION: CAS > > WHEN: Thu Jan 29 11:01:12 PST 2015 > > CLIENT IP ADDRESS: 192.168.72.69 > > SERVER IP ADDRESS: 192.168.72.137 > > ============================================================= > > > > 2015-01-29 11:01:12,683 INFO > [com.github.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - Audit > trail record BEGIN > > ============================================================= > > WHO: [username: michaelseiler] > > WHAT: > TGT-1-06FMI1BkceCkoXkzktnuA9cEBc3T29bB4t4vuBdoyiHaDEoYfW-login.fuller.edu > > ACTION: TICKET_GRANTING_TICKET_CREATED > > APPLICATION: CAS > > WHEN: Thu Jan 29 11:01:12 PST 2015 > > CLIENT IP ADDRESS: 192.168.72.69 > > SERVER IP ADDRESS: 192.168.72.137 > > ============================================================= > > > > I used the following to retrieve the User's Principal in the view: > > > https://github.com/Unicon/cas-addons/wiki/Authenticated-Principal-in-Generic-Success-Login-View > > > > As I'm looking at it again, I'm assuming that after the initial login > (on-entry), the flow changes, and I would need to specify another end-state > for returning visitors? > > > > <end-state id="viewGenericLoginSuccess" view="casLoginGenericSuccessView"> > > <on-entry> > > <evaluate > expression="authenticationSupport.getAuthenticatedPrincipalFrom(requestScope.ticketGrantingTicketId)" > > result="requestScope.principal"/> > > </on-entry> > > </end-state> > > > > On Thu, Jan 29, 2015 at 11:17 AM, Misagh Moayyed <[email protected]> > wrote: > > What do the CAS server logs tell you? Some of those tasks you have added > probably assume an input to operate on that may not be there. Hard to say > without logs. > > > > *From:* Mike Seiler [mailto:[email protected]] > *Sent:* Thursday, January 29, 2015 12:04 PM > *To:* [email protected] > *Subject:* [cas-user] CAS Unavailable Error with casGenericSuccess.jsp > > > > Hello, > > > > We've modified the casGenericSuccess.jsp page to provide a small number of > common tasks for people once they've logged in. This works fine on the > first login - they see the little link farm with their username. But if > someone comes back to the page, they get a generic error stating "CAS is > Unvailable." Since they are logged in with an appropriate ticket, > shouldn't they get the login success page again? > > > > Is there an easy fix for this that I am overlooking? > > > > Thanks, > > > > Mike > > > > -- > > *Michael Seiler* > > -------------------------------------------------- > > Systems Integration Engineer > > Fuller Theological Seminary > > Phone: (970) 306-6105 > > [email protected] > > > > *Please NOTE:* > I respond to email at 8 AM, 1PM, and at 4:30PM. If you need more > immediate help, please contact TSS (626.584.5675) and they can route the > issue to the appropriate person. If this is a business process life or > death emergency, you may call me at the above number. > > > > -- > > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- > > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > > > > > -- > > *Michael Seiler* > > -------------------------------------------------- > > Systems Integration Engineer > > Fuller Theological Seminary > > Phone: (970) 306-6105 > > [email protected] > > > > *Please NOTE:* > I respond to email at 8 AM, 1PM, and at 4:30PM. If you need more > immediate help, please contact TSS (626.584.5675) and they can route the > issue to the appropriate person. If this is a business process life or > death emergency, you may call me at the above number. > > > > -- > > You are currently subscribed to [email protected] as: > [email protected] > > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- *Michael Seiler* -------------------------------------------------- Systems Integration Engineer Fuller Theological Seminary Phone: (970) 306-6105 [email protected] *Please NOTE:* I respond to email at 8 AM, 1PM, and at 4:30PM. If you need more immediate help, please contact TSS (626.584.5675) and they can route the issue to the appropriate person. If this is a business process life or death emergency, you may call me at the above number. -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
