Re: [cas-user] CAS 6.4.4 won't deploy

2021-12-15 Thread Ray Bon 
Sven,

Some of the properties have changed names. Check release notes or manually 
compare them.
Also, I think cas now ignores unknown properties (maybe this is configurable).

Ray

On Wed, 2021-12-15 at 16:15 +0100, Sven Specker wrote:

Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.


--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory 
the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose 
historical relationships with the land continue to this day.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/94c93f033d26f17ddd2353a14156962f62afb2e8.camel%40uvic.ca.

Re: [cas-user] CAS JDK version question

2021-12-15 Thread Ray Bon 
Carl,

I believe 11 is a long term support version. It is what we use.
I have not tried more recent versions.

Ray

On Wed, 2021-12-15 at 16:59 -0500, Carl Waldbieser wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.

In the docs for CS 6.4 installation 
(https://apereo.github.io/cas/6.4.x/planning/Installation-Requirements.html) it 
reads:

CAS at its heart is a Java-based web application. Prior to deployment, you will 
need to have JDK 11 installed.

Is JDK 11 an exact requirement?  Or are later versions of the JDK also 
acceptable?  I don't follow Java development too closely, but I did see that 
JDK 17 is in general availability, so it just got me wondering.

Thanks,
Carl Waldbieser
ITS
Lafayette College


--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory 
the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose 
historical relationships with the land continue to this day.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b8c59203af89ea88110d7e6750a7f1534abed42d.camel%40uvic.ca.

Re: [cas-user] CAS 6.2 to 6.3.7.2 upgrade

2021-12-15 Thread Ray Bon 
Baba,

You want 6.3.7.3.
Make sure you clean before you build.
./gradlew clean build

Ray

On Wed, 2021-12-15 at 21:51 +, Baba Ndiaye wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.

Eventually i'm using JSON for service registry but i have this
unzip -l /var/lib/tomcat9/webapps/cas.war   

   s.war | grep log4j
35359  2021-12-15 21:05   WEB-INF/lib/log4j-web-2.16.0.jar
21248  2021-12-15 21:05   WEB-INF/lib/log4j-slf4j18-impl-2.16.0.jar
  1789565  2021-12-15 21:05   WEB-INF/lib/log4j-core-2.16.0.jar
12847  2021-12-15 21:05   WEB-INF/lib/log4j-jcl-2.16.0.jar
30977  2021-12-15 21:05   WEB-INF/lib/log4j-jul-2.16.0.jar
   301892  2021-12-15 21:05   WEB-INF/lib/log4j-api-2.16.0.jar
26461  2021-12-15 22:08   WEB-INF/lib/log4j-jul-2.14.1.jar
12694  2021-12-15 22:08   WEB-INF/lib/log4j-jcl-2.14.1.jar
20688  2021-12-15 22:08   WEB-INF/lib/log4j-slf4j18-impl-2.14.1.jar
   300365  2021-12-15 22:08   WEB-INF/lib/log4j-api-2.14.1.jar
35337  2021-12-15 22:08   WEB-INF/lib/log4j-web-2.14.1.jar
 4774  2021-12-15 22:08   WEB-INF/lib/spring-boot-starter-log4j2-2.5.4.jar
  1745700  2021-12-15 22:08   WEB-INF/lib/log4j-core-2.14.1.jar
   180352  2021-12-15 22:08   WEB-INF/lib/log4j-layout-template-json-2.14.1.jar

WEB-INF/lib/log4j-core-2.14.1.jar  and  
WEB-INF/lib/log4j-layout-template-json-2.14.1.jar are always log4j 2.14.1 any 
issue please


Le mer. 15 déc. 2021 à 21:33, Colin Ryan 
mailto:col...@caveo.ca>> a écrit :
As a longer view on Log4J mitigation we are doing test upgrades from
6.2.x to 6.3...

We are using Mongo for service registry, ticketregistry and GAuth registry.

When testing the GAuth functions we are getting an exception from the
following mongo related error.


2021-12-15 21:15:06,696 DEBUG
[org.apereo.cas.web.FlowExecutionExceptionResolver] - 
list[mfa-gauth]]'] due to a type mismatch with handler
[[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
2021-12-15 21:15:06,696 DEBUG
[org.apereo.cas.web.FlowExecutionExceptionResolver] - 
list[mfa-gauth]]'] due to a type mismatch with handler
[[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
2021-12-15 21:15:06,701 ERROR
[org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/cas].[dispatcherServlet]]
- 
list[mfa-gauth]]'] with root cause>
java.lang.IllegalArgumentException: Collation not supported by wire
version: 4
 at
com.mongodb.internal.operation.OperationHelper.validateCollation(OperationHelper.java:132)
~[mongodb-driver-core-4.1.1.jar!/:?]
 at
com.mongodb.internal.operation.OperationHelper.validateReadConcernAndCollation(OperationHelper.java:326)
~[mongodb-driver-core-4.1.1.jar!/:?]



We are using Mongo 3.4.14-4


Thoughts


Sincerely


Colin


--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f67b8f4-81c0-51e8-7593-f8f2f8477ca4%40caveo.ca.


--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory 
the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose 
historical relationships with the land continue to this day.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/c29b76eca10af8732c3ca6c6c10a79675fcb085b.camel%40uvic.ca.

[cas-user] log4j-jul-2.13.3.jar still included in v6.3.7.3 with cas-server-support-throttle-bucket4 and cas-server-support-reports

2021-12-15 Thread Satnam Singh Sarai 


I am using v6.3.7.3, when I enable following two dependency in the WAR 
overlay, I see one older version log4j file log4j-jul-2.13.3.jar in 
web-inf/lib.  Rest of the files are 2.16.0 version.  If I remove those two 
dependency from war overlay file, then I don't see log4j-jul-2.13.3.jar 
file.  Are those two dependency need to be upgraded to log4j 2.16.0 version?

 



org.apereo.cas

cas-server-support-throttle-bucket4j

${cas.version}



 



org.apereo.cas

cas-server-support-reports

${cas.version} 

 

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/bccfbab3-bd58-428f-9a2f-1318200bab13n%40apereo.org.

Re: [cas-user] Re: log4j vulnerability remediation

2021-12-15 Thread Baba Ndiaye 
Eventually i'm using JSON for service registry but i have this
unzip -l /var/lib/tomcat9/webapps/cas.war | grep log4j
35359  2021-12-15 21:05   WEB-INF/lib/log4j-web-2.16.0.jar
21248  2021-12-15 21:05   WEB-INF/lib/log4j-slf4j18-impl-2.16.0.jar
  1789565  2021-12-15 21:05   WEB-INF/lib/log4j-core-2.16.0.jar
12847  2021-12-15 21:05   WEB-INF/lib/log4j-jcl-2.16.0.jar
30977  2021-12-15 21:05   WEB-INF/lib/log4j-jul-2.16.0.jar
   301892  2021-12-15 21:05   WEB-INF/lib/log4j-api-2.16.0.jar
26461  2021-12-15 22:08   WEB-INF/lib/log4j-jul-2.14.1.jar
12694  2021-12-15 22:08   WEB-INF/lib/log4j-jcl-2.14.1.jar
20688  2021-12-15 22:08   WEB-INF/lib/log4j-slf4j18-impl-2.14.1.jar
   300365  2021-12-15 22:08   WEB-INF/lib/log4j-api-2.14.1.jar
35337  2021-12-15 22:08   WEB-INF/lib/log4j-web-2.14.1.jar
 4774  2021-12-15 22:08
WEB-INF/lib/spring-boot-starter-log4j2-2.5.4.jar
  1745700  2021-12-15 22:08   WEB-INF/lib/log4j-core-2.14.1.jar
   180352  2021-12-15 22:08
WEB-INF/lib/log4j-layout-template-json-2.14.1.jar

WEB-INF/lib/log4j-core-2.14.1.jar  and
WEB-INF/lib/log4j-layout-template-json-2.14.1.jar are always log4j 2.14.1
any issue please

Le mer. 15 déc. 2021 à 20:24, Baba Ndiaye  a écrit :

> Thank you Jeff
>
> Le mercredi 15 décembre 2021 à 19:46:39 UTC, jeffrey...@gmail.com a
> écrit :
>
>> I did this based on what was posted earlier in the thread to update 6.2.
>>
>> -- add to build.gradle dependencies section
>>
>> implementation "org.apache.logging.log4j:log4j-api:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-core:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-jcl:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-jul:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-web:2.16.0"
>> implementation "org.apache.logging.log4j:log4j-slf4j18-impl:2.16.0"
>>
>> -- add to the end of build.gradle
>>
>> bootWar {
>> entryCompression = ZipEntryCompression.STORED
>> overlays {
>> cas {
>> from
>> "org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war
>> "
>> provided = false
>> excludes =
>> ["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
>> }
>> }
>> }
>>
>> I would recommend you unpack the new war once it is built and update the
>> excludes list as needed.
>>
>> -Jeff
>> -Jeff
>>
>>
>> On Wed, Dec 15, 2021 at 2:22 PM Baba Ndiaye  wrote:
>>
>>> good evening
>>>
>>> I would like to know if we make an update of log4j 2.16 how to know if CAS 
>>> has supported it (use it) and also for the update we only need to add this 
>>> lines
>>>
>>>
>>> dependencies {
>>> compile "org.apache.logging.log4j:log4j-api:2.15.0"
>>> compile "org.apache.logging.log4j:log4j-core:2.15.0"
>>> compile "org.apache.logging.log4j:log4j-jcl:2.15.0"
>>> compile "org.apache.logging.log4j:log4j-jul:2.15.0"
>>> compile "org.apache.logging.log4j:log4j-web:2.15.0"
>>> compile "org.apache.logging.log4j:log4j-slf4j18-impl:2.15.0"
>>> }
>>>
>>>
>>> Le mer. 15 déc. 2021 à 03:43, Jeffrey Ramsay  a
>>> écrit :
>>>
 Robert and Joe,

 Your examples were really helpful. I was able to combine the steps and
 patch our systems.

 Thanks,
 -Jeff

 On Tue, Dec 14, 2021 at 1:58 PM Pablo Vidaurri 
 wrote:

> Note v2.16.0 is now out  a patch for the patch
>
> On Tuesday, December 14, 2021 at 10:02:48 AM UTC-6 apereo_cas_user
> wrote:
>
>> We use cas 6.1.7  overlay template [still in pre-prod] for delegated
>> authentication.
>> As a temp solution we replaced log4j  2.12.1 with 2.15.0 manually and
>> bounced tomcat.
>> Is there a way we can exclude 2.12.1 from the build . [I can pull in
>> 2.15.0 by adding in build.gradle but conflict with 2.12.1].  We have 
>> issues
>> when upgrading to 6.3.7.2
>>
>> Thanks
>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google
> Groups "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to cas-user+u...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org
> 
> .
>
 --
 - Website: https://apereo.github.io/cas
 - Gitter Chatroom: https://gitter.im/apereo/cas
 - List Guidelines: https://goo.gl/1VRrw7
 - Contributions: https://goo.gl/mh7qDG
 ---
 You received this message because you are subscribed to the Google
 Groups

[cas-user] CAS JDK version question

2021-12-15 Thread Carl Waldbieser 
In the docs for CS 6.4 installation (
https://apereo.github.io/cas/6.4.x/planning/Installation-Requirements.html)
it reads:

CAS at its heart is a Java-based web application. Prior to deployment, you
will need to have JDK  11
 installed.

Is JDK 11 an exact requirement?  Or are later versions of the JDK also
acceptable?  I don't follow Java development too closely, but I did see
that JDK 17 is in general availability, so it just got me wondering.

Thanks,
Carl Waldbieser
ITS
Lafayette College

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALt4NbMfuF2o_0tP9vCNg22dijc3YyAnsERf5-vv8-pz9gH9kQ%40mail.gmail.com.

Re: [cas-user] CAS 6.2 to 6.3.7.2 upgrade

2021-12-15 Thread Baba Ndiaye 
Eventually i'm using JSON for service registry but i have this
unzip -l /var/lib/tomcat9/webapps/cas.war

s.war | grep log4j
35359  2021-12-15 21:05   WEB-INF/lib/log4j-web-2.16.0.jar
21248  2021-12-15 21:05   WEB-INF/lib/log4j-slf4j18-impl-2.16.0.jar
  1789565  2021-12-15 21:05   WEB-INF/lib/log4j-core-2.16.0.jar
12847  2021-12-15 21:05   WEB-INF/lib/log4j-jcl-2.16.0.jar
30977  2021-12-15 21:05   WEB-INF/lib/log4j-jul-2.16.0.jar
   301892  2021-12-15 21:05   WEB-INF/lib/log4j-api-2.16.0.jar
26461  2021-12-15 22:08   WEB-INF/lib/log4j-jul-2.14.1.jar
12694  2021-12-15 22:08   WEB-INF/lib/log4j-jcl-2.14.1.jar
20688  2021-12-15 22:08   WEB-INF/lib/log4j-slf4j18-impl-2.14.1.jar
   300365  2021-12-15 22:08   WEB-INF/lib/log4j-api-2.14.1.jar
35337  2021-12-15 22:08   WEB-INF/lib/log4j-web-2.14.1.jar
 4774  2021-12-15 22:08
WEB-INF/lib/spring-boot-starter-log4j2-2.5.4.jar
  1745700  2021-12-15 22:08   WEB-INF/lib/log4j-core-2.14.1.jar
   180352  2021-12-15 22:08
WEB-INF/lib/log4j-layout-template-json-2.14.1.jar

WEB-INF/lib/log4j-core-2.14.1.jar  and
WEB-INF/lib/log4j-layout-template-json-2.14.1.jar are always log4j 2.14.1
any issue please


Le mer. 15 déc. 2021 à 21:33, Colin Ryan  a écrit :

> As a longer view on Log4J mitigation we are doing test upgrades from
> 6.2.x to 6.3...
>
> We are using Mongo for service registry, ticketregistry and GAuth registry.
>
> When testing the GAuth functions we are getting an exception from the
> following mongo related error.
>
>
> 2021-12-15 21:15:06,696 DEBUG
> [org.apereo.cas.web.FlowExecutionExceptionResolver] -  received exception
> [org.springframework.webflow.execution.ActionExecutionException:
> Exception thrown executing
>
> org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b
> in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action
> execution attributes were 'map['resolvedAuthenticationEvents' ->
> list[mfa-gauth]]'] due to a type mismatch with handler
> [[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
> 2021-12-15 21:15:06,696 DEBUG
> [org.apereo.cas.web.FlowExecutionExceptionResolver] -  received exception
> [org.springframework.webflow.execution.ActionExecutionException:
> Exception thrown executing
>
> org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b
> in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action
> execution attributes were 'map['resolvedAuthenticationEvents' ->
> list[mfa-gauth]]'] due to a type mismatch with handler
> [[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
> 2021-12-15 21:15:06,701 ERROR
> [org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/cas].[dispatcherServlet]]
>
> -  path [/cas] threw exception [Request processing failed; nested exception
> is org.springframework.webflow.execution.ActionExecutionException:
> Exception thrown executing
>
> org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b
> in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action
> execution attributes were 'map['resolvedAuthenticationEvents' ->
> list[mfa-gauth]]'] with root cause>
> java.lang.IllegalArgumentException: Collation not supported by wire
> version: 4
>  at
> com.mongodb.internal.operation.OperationHelper.validateCollation(OperationHelper.java:132)
>
> ~[mongodb-driver-core-4.1.1.jar!/:?]
>  at
> com.mongodb.internal.operation.OperationHelper.validateReadConcernAndCollation(OperationHelper.java:326)
>
> ~[mongodb-driver-core-4.1.1.jar!/:?]
>
>
>
> We are using Mongo 3.4.14-4
>
>
> Thoughts
>
>
> Sincerely
>
>
> Colin
>
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f67b8f4-81c0-51e8-7593-f8f2f8477ca4%40caveo.ca
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRuWR6b-txzhdrScdNkBNEPjABS7vQqZXH3zeudxMrxpuA%40mail.gmail.com.

[cas-user] CAS 6.2 to 6.3.7.2 upgrade

2021-12-15 Thread Colin Ryan 
As a longer view on Log4J mitigation we are doing test upgrades from 
6.2.x to 6.3...


We are using Mongo for service registry, ticketregistry and GAuth registry.

When testing the GAuth functions we are getting an exception from the 
following mongo related error.



2021-12-15 21:15:06,696 DEBUG 
[org.apereo.cas.web.FlowExecutionExceptionResolver] - received exception 
[org.springframework.webflow.execution.ActionExecutionException: 
Exception thrown executing 
org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b 
in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action 
execution attributes were 'map['resolvedAuthenticationEvents' -> 
list[mfa-gauth]]'] due to a type mismatch with handler 
[[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
2021-12-15 21:15:06,696 DEBUG 
[org.apereo.cas.web.FlowExecutionExceptionResolver] - received exception 
[org.springframework.webflow.execution.ActionExecutionException: 
Exception thrown executing 
org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b 
in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action 
execution attributes were 'map['resolvedAuthenticationEvents' -> 
list[mfa-gauth]]'] due to a type mismatch with handler 
[[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
2021-12-15 21:15:06,701 ERROR 
[org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/cas].[dispatcherServlet]] 
- path [/cas] threw exception [Request processing failed; nested exception 
is org.springframework.webflow.execution.ActionExecutionException: 
Exception thrown executing 
org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b 
in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action 
execution attributes were 'map['resolvedAuthenticationEvents' -> 
list[mfa-gauth]]'] with root cause>
java.lang.IllegalArgumentException: Collation not supported by wire 
version: 4
    at 
com.mongodb.internal.operation.OperationHelper.validateCollation(OperationHelper.java:132) 
~[mongodb-driver-core-4.1.1.jar!/:?]
    at 
com.mongodb.internal.operation.OperationHelper.validateReadConcernAndCollation(OperationHelper.java:326) 
~[mongodb-driver-core-4.1.1.jar!/:?]




We are using Mongo 3.4.14-4


Thoughts


Sincerely


Colin


--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f67b8f4-81c0-51e8-7593-f8f2f8477ca4%40caveo.ca.

Re: [cas-user] Re: log4j vulnerability remediation

2021-12-15 Thread Baba Ndiaye 
Thank you Jeff

Le mercredi 15 décembre 2021 à 19:46:39 UTC, jeffrey...@gmail.com a écrit :

> I did this based on what was posted earlier in the thread to update 6.2.
>
> -- add to build.gradle dependencies section
>
> implementation "org.apache.logging.log4j:log4j-api:2.16.0"
> implementation "org.apache.logging.log4j:log4j-core:2.16.0"
> implementation "org.apache.logging.log4j:log4j-jcl:2.16.0"
> implementation "org.apache.logging.log4j:log4j-jul:2.16.0"
> implementation "org.apache.logging.log4j:log4j-web:2.16.0"
> implementation "org.apache.logging.log4j:log4j-slf4j18-impl:2.16.0"
>
> -- add to the end of build.gradle
>
> bootWar {
> entryCompression = ZipEntryCompression.STORED
> overlays {
> cas {
> from 
> "org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war"
> provided = false
> excludes = 
> ["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
> }
> }
> }
>
> I would recommend you unpack the new war once it is built and update the 
> excludes list as needed.
>
> -Jeff
> -Jeff
>
>
> On Wed, Dec 15, 2021 at 2:22 PM Baba Ndiaye  wrote:
>
>> good evening 
>>
>> I would like to know if we make an update of log4j 2.16 how to know if CAS 
>> has supported it (use it) and also for the update we only need to add this 
>> lines 
>>
>>
>> dependencies {
>> compile "org.apache.logging.log4j:log4j-api:2.15.0"
>> compile "org.apache.logging.log4j:log4j-core:2.15.0"
>> compile "org.apache.logging.log4j:log4j-jcl:2.15.0"
>> compile "org.apache.logging.log4j:log4j-jul:2.15.0"
>> compile "org.apache.logging.log4j:log4j-web:2.15.0"
>> compile "org.apache.logging.log4j:log4j-slf4j18-impl:2.15.0"
>> }
>>
>>
>> Le mer. 15 déc. 2021 à 03:43, Jeffrey Ramsay  a 
>> écrit :
>>
>>> Robert and Joe,
>>>
>>> Your examples were really helpful. I was able to combine the steps and 
>>> patch our systems.
>>>
>>> Thanks,
>>> -Jeff
>>>
>>> On Tue, Dec 14, 2021 at 1:58 PM Pablo Vidaurri  
>>> wrote:
>>>
 Note v2.16.0 is now out  a patch for the patch

 On Tuesday, December 14, 2021 at 10:02:48 AM UTC-6 apereo_cas_user 
 wrote:

> We use cas 6.1.7  overlay template [still in pre-prod] for delegated 
> authentication.
> As a temp solution we replaced log4j  2.12.1 with 2.15.0 manually and 
> bounced tomcat.
> Is there a way we can exclude 2.12.1 from the build . [I can pull in 
> 2.15.0 by adding in build.gradle but conflict with 2.12.1].  We have 
> issues 
> when upgrading to 6.3.7.2 
>
> Thanks
>
> -- 
 - Website: https://apereo.github.io/cas
 - Gitter Chatroom: https://gitter.im/apereo/cas
 - List Guidelines: https://goo.gl/1VRrw7
 - Contributions: https://goo.gl/mh7qDG
 --- 
 You received this message because you are subscribed to the Google 
 Groups "CAS Community" group.
 To unsubscribe from this group and stop receiving emails from it, send 
 an email to cas-user+u...@apereo.org.
 To view this discussion on the web visit 
 https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org
  
 
 .

>>> -- 
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> --- 
>>> You received this message because you are subscribed to the Google 
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send 
>>> an email to cas-user+u...@apereo.org.
>>> To view this discussion on the web visit 
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com
>>>  
>>> 
>>> .
>>>
>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-user+u...@apereo.org.
>>
> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com
>>  
>> 
>> .
>>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter

Re: [cas-user] Re: log4j vulnerability remediation

2021-12-15 Thread Jeffrey Ramsay 
I did this based on what was posted earlier in the thread to update 6.2.

-- add to build.gradle dependencies section

implementation "org.apache.logging.log4j:log4j-api:2.16.0"
implementation "org.apache.logging.log4j:log4j-core:2.16.0"
implementation "org.apache.logging.log4j:log4j-jcl:2.16.0"
implementation "org.apache.logging.log4j:log4j-jul:2.16.0"
implementation "org.apache.logging.log4j:log4j-web:2.16.0"
implementation "org.apache.logging.log4j:log4j-slf4j18-impl:2.16.0"

-- add to the end of build.gradle

bootWar {
entryCompression = ZipEntryCompression.STORED
overlays {
cas {
from
"org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war
"
provided = false
excludes =
["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
}
}
}

I would recommend you unpack the new war once it is built and update the
excludes list as needed.

-Jeff
-Jeff


On Wed, Dec 15, 2021 at 2:22 PM Baba Ndiaye  wrote:

> good evening
>
> I would like to know if we make an update of log4j 2.16 how to know if CAS 
> has supported it (use it) and also for the update we only need to add this 
> lines
>
>
> dependencies {
> compile "org.apache.logging.log4j:log4j-api:2.15.0"
> compile "org.apache.logging.log4j:log4j-core:2.15.0"
> compile "org.apache.logging.log4j:log4j-jcl:2.15.0"
> compile "org.apache.logging.log4j:log4j-jul:2.15.0"
> compile "org.apache.logging.log4j:log4j-web:2.15.0"
> compile "org.apache.logging.log4j:log4j-slf4j18-impl:2.15.0"
> }
>
>
> Le mer. 15 déc. 2021 à 03:43, Jeffrey Ramsay  a
> écrit :
>
>> Robert and Joe,
>>
>> Your examples were really helpful. I was able to combine the steps and
>> patch our systems.
>>
>> Thanks,
>> -Jeff
>>
>> On Tue, Dec 14, 2021 at 1:58 PM Pablo Vidaurri 
>> wrote:
>>
>>> Note v2.16.0 is now out  a patch for the patch
>>>
>>> On Tuesday, December 14, 2021 at 10:02:48 AM UTC-6 apereo_cas_user wrote:
>>>
 We use cas 6.1.7  overlay template [still in pre-prod] for delegated
 authentication.
 As a temp solution we replaced log4j  2.12.1 with 2.15.0 manually and
 bounced tomcat.
 Is there a way we can exclude 2.12.1 from the build . [I can pull in
 2.15.0 by adding in build.gradle but conflict with 2.12.1].  We have issues
 when upgrading to 6.3.7.2

 Thanks

 --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to cas-user+unsubscr...@apereo.org.
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org
>>> 
>>> .
>>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+unsubscr...@apereo.org.
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com
>> 
>> .
>>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it,

Re: [cas-user] Re: log4j vulnerability remediation

2021-12-15 Thread Baba Ndiaye 
good evening

I would like to know if we make an update of log4j 2.16 how to know if
CAS has supported it (use it) and also for the update we only need to
add this lines


dependencies {
compile "org.apache.logging.log4j:log4j-api:2.15.0"
compile "org.apache.logging.log4j:log4j-core:2.15.0"
compile "org.apache.logging.log4j:log4j-jcl:2.15.0"
compile "org.apache.logging.log4j:log4j-jul:2.15.0"
compile "org.apache.logging.log4j:log4j-web:2.15.0"
compile "org.apache.logging.log4j:log4j-slf4j18-impl:2.15.0"
}


Le mer. 15 déc. 2021 à 03:43, Jeffrey Ramsay  a
écrit :

> Robert and Joe,
>
> Your examples were really helpful. I was able to combine the steps and
> patch our systems.
>
> Thanks,
> -Jeff
>
> On Tue, Dec 14, 2021 at 1:58 PM Pablo Vidaurri 
> wrote:
>
>> Note v2.16.0 is now out  a patch for the patch
>>
>> On Tuesday, December 14, 2021 at 10:02:48 AM UTC-6 apereo_cas_user wrote:
>>
>>> We use cas 6.1.7  overlay template [still in pre-prod] for delegated
>>> authentication.
>>> As a temp solution we replaced log4j  2.12.1 with 2.15.0 manually and
>>> bounced tomcat.
>>> Is there a way we can exclude 2.12.1 from the build . [I can pull in
>>> 2.15.0 by adding in build.gradle but conflict with 2.12.1].  We have issues
>>> when upgrading to 6.3.7.2
>>>
>>> Thanks
>>>
>>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+unsubscr...@apereo.org.
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/379632b4-2e9b-40b1-824d-1eebbdee4f83n%40apereo.org
>> 
>> .
>>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOTzLyDsd-6wUFAJVjOYJkh5Jod95QTAkDH1zi5G8rY7AA%40mail.gmail.com
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFu1ZRtQxm252-6fc7zpj0k23Nd8WPXqf76AKXbNEhmrGuSN7w%40mail.gmail.com.

Re: [cas-user] CAS 6.3.7.2 And Twilio SMS (mfa-simple provider)

2021-12-15 Thread Ray Bon 
Guillaume,

This looks like a library conflict. There have been a few recent posts on this 
list on how to exclude the older version of log4j.

Ray

On Wed, 2021-12-15 at 00:17 -0800, Guillaume EGRON wrote:
Notice: This message was sent from outside the University of Victoria email 
system. Please be cautious with links and sensitive information.

Hello

Since CAS 6.3.7.2, adding the dependency cas-server-support-sms-twilio still 
brings log4j-api 2.14.0 and log4j-core 2.14.0 into the app libs.

When I deploy my cas.war into an external Tomcat 9.0.43, through IntelliJ IDEA, 
cas can't start with error

Caused by: java.lang.NoSuchMethodError: 
org.apache.logging.log4j.spi.LoggerContextFactory.isClassLoaderDependent()Z
at 
org.apache.logging.slf4j.Log4jLoggerFactory.getContext(Log4jLoggerFactory.java:56)
at 
org.apache.logging.log4j.spi.AbstractLoggerAdapter.getLogger(AbstractLoggerAdapter.java:48)
Artifact Cas:war exploded: Error during artifact deployment. See server log for 
details.
at 
org.apache.logging.slf4j.Log4jLoggerFactory.getLogger(Log4jLoggerFactory.java:33)
at org.slf4j.LoggerFactory.getLogger(LoggerFactory.java:354)
at 
org.apache.commons.logging.impl.SLF4JLogFactory.getInstance(SLF4JLogFactory.java:155)
at 
org.apache.commons.logging.impl.SLF4JLogFactory.getInstance(SLF4JLogFactory.java:132)
at 
org.apache.commons.logging.LogFactory.getLog(LogFactory.java:655)
at 
org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:94)
at 
org.apereo.cas.web.CasWebApplicationServletInitializer.onStartup(CasWebApplicationServletInitializer.java:24)
at 
org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:172)
at 
org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5166)
at 
org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)

--

Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | r...@uvic.ca

I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory 
the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose 
historical relationships with the land continue to this day.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/3996c37bf6a715f34337adee2f2adf7f2dd6e6ba.camel%40uvic.ca.

Re: [cas-user] CAS 6.4.4 won't deploy, clarification

2021-12-15 Thread Sven Specker 

On 12/15/21 16:15, Sven Specker wrote:



I realize that CAS 6.4 (for some reason) wants a redis "cluster" but I 
got it standalone on the machine, since it is a testserver. It does not 
complain about missing config-entries, so I thought all is well. It even 
realizes that


DEBUG [org.apereo.cas.redis.core.RedisObjectFactory] - standalone configuration on host [127.0.0.1] and port [6379]




Of course, I did not see the "next" button in the documentation, my bad.

So basically, nothing in the config-requirements has changed (hence no 
error about missing things), yet I get that error, which causes this 
problem to be even more obscure.




--
__
*** Sven Specker -- University of Frankfurt Computing Center   ***
*** UNIX System Administration (Auth/IDM) 
* spec...@rz.uni-frankfurt.de [Phone (+49)-69-798-15188] *
**
__  
Johann Wolfgang Goethe Universitaet
   - Hochschulrechenzentrum -
 Theodor W. Adorno-Platz 1 (PA-1P16)

   D-60323 Frankfurt/Main
__
__ TeX-users do it in {groups}

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/03c338cc-c35f-a127-ceb8-02d9a69533ac%40rz.uni-frankfurt.de.


smime.p7s
Description: S/MIME Cryptographic Signature

[cas-user] Re: CAS 6.3.7.3 Log4j always signing Assertion when built with saml-idp

2021-12-15 Thread Matthew Gordon 
It was metadata related. It appears like it honors the metadata's 
preferences over the service config.

Changed:


To:


Thank you,
Matt

On Wednesday, December 15, 2021 at 9:32:12 AM UTC-5 Matthew Gordon wrote:

> After applying the latest 6.3 version to mitigate the log4j issue, all 
> assertions seem to be signed despite "signAssertions": false, in the 
> service config.
>
> Any suggestions?
>
> Thank you,
> Matt
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/94475af9-39ac-4e07-8f7a-3bcd464ad610n%40apereo.org.

[cas-user] CAS 6.4.4 won't deploy

2021-12-15 Thread Sven Specker 

Hi!

I have a strange problem.

While trying to upgrade one of my CAS-Servers from 6.1.x to 6.4.4 i run 
into this


 WARN 
[org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext] 
-  initialization - cancelling refresh attempt: 
org.springframework.beans.factory.BeanCreationException: Error creating 
bean with name 'redisReferenceResolver': Cannot resolve
 reference to bean 'redisTemplate' while setting constructor argument; 
nested exception is 
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean 
named 'redisTemplate' available>


The build of the WAR-File is ok and it deploys fine (configs, services, 
LDAP integration) until it runs into this.


I realize that CAS 6.4 (for some reason) wants a redis "cluster" but I 
got it standalone on the machine, since it is a testserver. It does not 
complain about missing config-entries, so I thought all is well. It even 
realizes that


DEBUG [org.apereo.cas.redis.core.RedisObjectFactory] - standalone configuration on host [127.0.0.1] and port [6379]


Any ideas what I can do to get this running? I tried to use the search 
to get a hint but apart from some unrelated chatter on Spring (god I 
hate Spring...) I did not find anything on the CAS side that helped me.


Best regards,

Sven Specker

--
__
*** Sven Specker -- University of Frankfurt Computing Center   ***
*** UNIX System Administration (Auth/IDM) 
* spec...@rz.uni-frankfurt.de [Phone (+49)-69-798-15188] *
**
__  
Johann Wolfgang Goethe Universitaet
   - Hochschulrechenzentrum -
 Theodor W. Adorno-Platz 1 (PA-1P16)

   D-60323 Frankfurt/Main
__
__ TeX-users do it in {groups}

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/e02aa9e7-51ab-e52f-af0a-e6ea59e0f39c%40rz.uni-frankfurt.de.


smime.p7s
Description: S/MIME Cryptographic Signature

[cas-user] CAS 6.3.7.3 Log4j always signing Assertion when built with saml-idp

2021-12-15 Thread Matthew Gordon 
After applying the latest 6.3 version to mitigate the log4j issue, all 
assertions seem to be signed despite "signAssertions": false, in the 
service config.

Any suggestions?

Thank you,
Matt

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/29b4304b-af31-4a9b-b7f0-2874bfa9b6a9n%40apereo.org.

Re: [EXTERNAL SENDER] [cas-user] Overlay template 6.4 build failed

2021-12-15 Thread William Vincent 
Hello
i have docker-compose and i use cas-overlay-template/tree/6.3 .
this error happens when I use 'docker-compose build'.
I will not install openjdk because I am in a container .
I try with 6.4 but it's same result :/
thanks for your help

docker-compose build
redis uses an image, skipping
Building cas
Step 1/20 : FROM adoptopenjdk/openjdk11:alpine-slim AS overlay
 ---> 68d79b94d8b9
Step 2/20 : RUN mkdir -p cas-overlay
 ---> Using cache
 ---> 2fbf67e30ccc
Step 3/20 : COPY ./src cas-overlay/src/
 ---> 492ae4217531
Step 4/20 : COPY ./gradle/ cas-overlay/gradle/
 ---> d44ca8ef2c0e
Step 5/20 : COPY ./gradlew ./settings.gradle ./build.gradle 
./gradle.properties /cas-overlay/
 ---> 6c0d5aaa1d06
Step 6/20 : RUN mkdir -p ~/.gradle && echo "org.gradle.daemon=false" >> 
~/.gradle/gradle.properties && echo "org.gradle.configureondemand=true" 
>> ~/.gradle/gradle.properties && cd cas-overlay && chmod 750 
./gradlew && ./gradlew --version;
 ---> Running in 17e37e5f3ced
Downloading https://services.gradle.org/distributions/gradle-7.3.1-bin.zip
...10%...20%...30%...40%...50%...60%...70%...80%...90%...100%

Welcome to Gradle 7.3.1!

Here are the highlights of this release:
 - Easily declare new test suites in Java projects
 - Support for Java 17
 - Support for Scala 3

For more details see https://docs.gradle.org/7.3.1/release-notes.html



Gradle 7.3.1


Build time:   2021-12-01 15:42:20 UTC
Revision: 2c62cec93e0b15a7d2cd68746f3348796d6d42bd

Kotlin:   1.5.31
Groovy:   3.0.9
Ant:  Apache Ant(TM) version 1.10.11 compiled on July 10 2021
JVM:  11.0.8 (AdoptOpenJDK 11.0.8+10)
OS:   Linux 4.18.0-348.2.1.el8_5.x86_64 amd64

Removing intermediate container 17e37e5f3ced
 ---> f0df1a5519e8
Step 7/20 : RUN cd cas-overlay && ./gradlew clean build --parallel 
--no-daemon;
 ---> Running in 89755da20e71
To honour the JVM settings for this build a single-use Daemon process will 
be forked. See 
https://docs.gradle.org/7.3.1/userguide/gradle_daemon.html#sec:disabling_the_daemon.
Daemon will be stopped at the end of the build 
Configuration on demand is an incubating feature.
> Task :clean
> Task :extractCasBootWarOverlay
> Task :bootBuildInfo
> Task :generateMainEffectiveLombokConfig1
> Task :checkLombokConfig
> Task :compileJava FAILED

Deprecated Gradle features were used in this build, making it incompatible 
with Gradle 8.0.

You can use '--warning-mode all' to show the individual deprecation 
warnings and determine if they come from your own scripts or plugins.

See 
https://docs.gradle.org/7.3.1/userguide/command_line_interface.html#sec:command_line_warnings
6 actionable tasks: 6 executed

FAILURE: Build failed with an exception.

* What went wrong:
Execution failed for task ':compileJava'.
> error: release version 11 not supported

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights.

* Get more help at https://help.gradle.org

BUILD FAILED in 53s
ERROR: Service 'cas' failed to build : The command '/bin/sh -c cd 
cas-overlay && ./gradlew clean build --parallel --no-daemon;' returned 
a non-zero code: 1


Le mardi 19 octobre 2021 à 15:59:13 UTC+2, ro...@mun.ca a écrit :

> You need the openjdk development packages.
>
>  
>
> For instance on RHEL7:
>
>  
>
> > yum install java-11-openjdk-devel
>
>  
>
> *From:* cas-...@apereo.org  *On Behalf Of *Marc 
> Maurice
> *Sent:* Tuesday, October 19, 2021 11:25 AM
> *To:* CAS Community 
> *Subject:* [EXTERNAL SENDER] [cas-user] Overlay template 6.4 build failed
>
>  
>
> Hello,
>
>  
>
> I'm trying to upgrade from cas 6.2 to 6.4.
>
> As explained in the doc I want to start with a clean 6.4 overlay then 
> reapply all my patches.
>
>  
>
> I cloned a fresh 6.4 overlay branch from the github project.
>
> Openjdk 11 installed:
>
>  
>
> [root@15871ceb6a09 myclone]# java -version
>
> openjdk version "11.0.12" 2021-07-20 LTS
>
> OpenJDK Runtime Environment 18.9 (build 11.0.12+7-LTS)
>
> OpenJDK 64-Bit Server VM 18.9 (build 11.0.12+7-LTS, mixed mode, sharing)
>
>  
>
> I'm getting the following error. Tried to run gradle in debug mode, and 
> googling the error with no success.
>
> gradle is not giving me any clue why it doesn't like my java version...
>
>  
>
> [root@15871ceb6a09 myclone]# ./gradlew clean build
>
> > Task :compileJava FAILED
>
>  
>
> FAILURE: Build failed with an exception.
>
>  
>
> * What went wrong:
>
> Execution failed for task ':compileJava'.
>
> > error: release version 11 not supported
>
>  
>
> * Try:
>
> Run with --stacktrace option to get the stack trace. Run with --info or 
> --debug option to get more log output. Run with --scan to get full insights.
>
>  
>
> * Get more help at

[cas-user] CAS 6.3.7.2 And Twilio SMS (mfa-simple provider)

2021-12-15 Thread Guillaume EGRON 
Hello

Since CAS 6.3.7.2, adding the dependency cas-server-support-sms-twilio 
still brings log4j-api 2.14.0 and log4j-core 2.14.0 into the app libs.

When I deploy my cas.war into an external Tomcat 9.0.43, through IntelliJ 
IDEA, cas can't start with error

Caused by: java.lang.NoSuchMethodError: 
org.apache.logging.log4j.spi.LoggerContextFactory.isClassLoaderDependent()Z
at 
org.apache.logging.slf4j.Log4jLoggerFactory.getContext(Log4jLoggerFactory.java:56)
at 
org.apache.logging.log4j.spi.AbstractLoggerAdapter.getLogger(AbstractLoggerAdapter.java:48)
Artifact Cas:war exploded: Error during artifact deployment. See server log 
for details.
at 
org.apache.logging.slf4j.Log4jLoggerFactory.getLogger(Log4jLoggerFactory.java:33)
at org.slf4j.LoggerFactory.getLogger(LoggerFactory.java:354)
at 
org.apache.commons.logging.impl.SLF4JLogFactory.getInstance(SLF4JLogFactory.java:155)
at 
org.apache.commons.logging.impl.SLF4JLogFactory.getInstance(SLF4JLogFactory.java:132)
at 
org.apache.commons.logging.LogFactory.getLog(LogFactory.java:655)
at 
org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:94)
at 
org.apereo.cas.web.CasWebApplicationServletInitializer.onStartup(CasWebApplicationServletInitializer.java:24)
at 
org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:172)
at 
org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5166)
at 
org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/37eae8f0-dfad-4e37-b338-86ba05b65fb6n%40apereo.org.