Re: [cas-user] Install of CAS 6.4.4.2 includes log4j-jul-2.14.1.jar and log4j-jul-2.17.0.jar
Thanks for your reply, Jeffrey!
I got it all sorted.
I really appreciate this community!
Best Regards,
Rod
On Fri., Jan. 7, 2022, 8:29 p.m. Jeffrey Ramsay,
wrote:
> Try this:
>
> bootWar {
> entryCompression = ZipEntryCompression.STORED
> overlays {
> cas {
> from
> "org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war
> "
> provided = false
> excludes =
> ["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
> }
> }
> }
>
> -Jeff
>
> On Fri, Jan 7, 2022 at 2:01 PM Rod B wrote:
>
>> Hi,
>>
>> In test I downloaded the CAS Overlay for 6.4.4.2 here:
>> https://github.com/apereo/cas-overlay-template/archive/6.4.zip
>>
>> We have a very basic install and I built the cas.war file.
>>
>> When. I look at .../cas/WEB-INF/lib I notice there is to log4j-jul files:
>> log4j-jul-2.14.1.jar
>> log4j-jul-2.17.0.jar
>>
>> I've tried to exclude the old file in the build.gradle file:
>>
>> overlays {
>>
>> cas {
>> from
>> "org.apereo.cas:cas-server-webapp${project.appServer}:${project.'cas.version'}@war
>> provided = false
>> excludes = ["WEB-INF/lib/servlet-api-2*.jar"]
>> excludes = ["WEB-INF/lib/log4j-jul-2.14.1.jar"]
>>
>> }
>>
>> But the file remains.
>>
>> Fortunately it doesn't seem to be causing a problem, but I've experienced
>> issues when there are duplicate jar files of different versions.
>> Specifically log4j2 files.
>>
>> Is this something that can be fixed in the upstream?
>>
>> Also, is log4j2 going to be upgraded to 2.17.1 soon or do we need to use
>> the remediation steps referenced in this thread:
>>
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOQ-AecysHAxD0FHEdBnTTHD3wNTa_d1xXcVVRmuC16A5g%40mail.gmail.com
>>
>>
>> Many thanks!
>>
>> Rod
>>
>> --
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to cas-user+unsubscr...@apereo.org.
>> To view this discussion on the web visit
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/a4676eac-89f5-405e-bbc3-3e8f586725b0n%40apereo.org
>>
>> .
>>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOR%2Bp7uOjX2HPRMgNqebvYb3S%2B8EjN8J33V1yj%3DZVesVPg%40mail.gmail.com
>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAOz46ZRD_Mx2Tcot%3DFRo9O%3DBi-etzw-H9hnGFWLHB6-Lfr5mLw%40mail.gmail.com.
Re: [cas-user] Install of CAS 6.4.4.2 includes log4j-jul-2.14.1.jar and log4j-jul-2.17.0.jar
Try this:
bootWar {
entryCompression = ZipEntryCompression.STORED
overlays {
cas {
from
"org.apereo.cas:cas-server-webapp${project.appServer}:${casServerVersion}@war
"
provided = false
excludes =
["WEB-INF/lib/log4j*2.12.*.jar","WEB-INF/lib/log4j*2.13.*.jar"]
}
}
}
-Jeff
On Fri, Jan 7, 2022 at 2:01 PM Rod B wrote:
> Hi,
>
> In test I downloaded the CAS Overlay for 6.4.4.2 here:
> https://github.com/apereo/cas-overlay-template/archive/6.4.zip
>
> We have a very basic install and I built the cas.war file.
>
> When. I look at .../cas/WEB-INF/lib I notice there is to log4j-jul files:
> log4j-jul-2.14.1.jar
> log4j-jul-2.17.0.jar
>
> I've tried to exclude the old file in the build.gradle file:
>
> overlays {
>
> cas {
> from
> "org.apereo.cas:cas-server-webapp${project.appServer}:${project.'cas.version'}@war
> provided = false
> excludes = ["WEB-INF/lib/servlet-api-2*.jar"]
> excludes = ["WEB-INF/lib/log4j-jul-2.14.1.jar"]
>
> }
>
> But the file remains.
>
> Fortunately it doesn't seem to be causing a problem, but I've experienced
> issues when there are duplicate jar files of different versions.
> Specifically log4j2 files.
>
> Is this something that can be fixed in the upstream?
>
> Also, is log4j2 going to be upgraded to 2.17.1 soon or do we need to use
> the remediation steps referenced in this thread:
>
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOQ-AecysHAxD0FHEdBnTTHD3wNTa_d1xXcVVRmuC16A5g%40mail.gmail.com
>
>
> Many thanks!
>
> Rod
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/a4676eac-89f5-405e-bbc3-3e8f586725b0n%40apereo.org
>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOR%2Bp7uOjX2HPRMgNqebvYb3S%2B8EjN8J33V1yj%3DZVesVPg%40mail.gmail.com.
Re: [cas-user] Install of CAS 6.4.4.2 includes log4j-jul-2.14.1.jar and log4j-jul-2.17.0.jar
I did the patch remediation and the older file is now gone and we're at
log4j version 2.17.1
So, thank you community for all of your help!
Rod
On Fri., Jan. 7, 2022, 11:01 a.m. Rod B, wrote:
> Hi,
>
> In test I downloaded the CAS Overlay for 6.4.4.2 here:
> https://github.com/apereo/cas-overlay-template/archive/6.4.zip
>
> We have a very basic install and I built the cas.war file.
>
> When. I look at .../cas/WEB-INF/lib I notice there is to log4j-jul files:
> log4j-jul-2.14.1.jar
> log4j-jul-2.17.0.jar
>
> I've tried to exclude the old file in the build.gradle file:
>
> overlays {
>
> cas {
> from
> "org.apereo.cas:cas-server-webapp${project.appServer}:${project.'cas.version'}@war
> provided = false
> excludes = ["WEB-INF/lib/servlet-api-2*.jar"]
> excludes = ["WEB-INF/lib/log4j-jul-2.14.1.jar"]
>
> }
>
> But the file remains.
>
> Fortunately it doesn't seem to be causing a problem, but I've experienced
> issues when there are duplicate jar files of different versions.
> Specifically log4j2 files.
>
> Is this something that can be fixed in the upstream?
>
> Also, is log4j2 going to be upgraded to 2.17.1 soon or do we need to use
> the remediation steps referenced in this thread:
>
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOQ-AecysHAxD0FHEdBnTTHD3wNTa_d1xXcVVRmuC16A5g%40mail.gmail.com
>
>
> Many thanks!
>
> Rod
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/a4676eac-89f5-405e-bbc3-3e8f586725b0n%40apereo.org
>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAOz46ZSRNNVJ6o3RRTnAXE3mV9Rkwdkh9D8npWNU3dT6HPMn0A%40mail.gmail.com.
Re: [cas-user] Install of CAS 6.4.4.2 includes log4j-jul-2.14.1.jar and log4j-jul-2.17.0.jar
If it's any value to someone using CAS overlay 6.4.4.2 this is how the
changes all look:
gradle.properties:
log4j2.version=2.17.1
build.gradle:
dependencies {
...
// Log4j2 version 2.17.1 patch
implementation
"org.apache.logging.log4j:log4j-api:${project.'log4j2.version'}"
implementation
"org.apache.logging.log4j:log4j-core:${project.'log4j2.version'}"
implementation
"org.apache.logging.log4j:log4j-jcl:${project.'log4j2.version'}"
implementation
"org.apache.logging.log4j:log4j-jul:${project.'log4j2.version'}"
implementation
"org.apache.logging.log4j:log4j-layout-template-json:${project.'log4j2.version'}"
implementation
"org.apache.logging.log4j:log4j-slf4j18-impl:${project.'log4j2.version'}"
implementation
"org.apache.logging.log4j:log4j-web:${project.'log4j2.version'}"
...
}
...
overlays {
cas {
...
excludes = ["WEB-INF/lib/log4j-*-2.17.0.jar"]
...
}
}
Cheers,
Rod
On Fri, Jan 7, 2022 at 11:01 AM Rod B wrote:
> Hi,
>
> In test I downloaded the CAS Overlay for 6.4.4.2 here:
> https://github.com/apereo/cas-overlay-template/archive/6.4.zip
>
> We have a very basic install and I built the cas.war file.
>
> When. I look at .../cas/WEB-INF/lib I notice there is to log4j-jul files:
> log4j-jul-2.14.1.jar
> log4j-jul-2.17.0.jar
>
> I've tried to exclude the old file in the build.gradle file:
>
> overlays {
>
> cas {
> from
> "org.apereo.cas:cas-server-webapp${project.appServer}:${project.'cas.version'}@war
> provided = false
> excludes = ["WEB-INF/lib/servlet-api-2*.jar"]
> excludes = ["WEB-INF/lib/log4j-jul-2.14.1.jar"]
>
> }
>
> But the file remains.
>
> Fortunately it doesn't seem to be causing a problem, but I've experienced
> issues when there are duplicate jar files of different versions.
> Specifically log4j2 files.
>
> Is this something that can be fixed in the upstream?
>
> Also, is log4j2 going to be upgraded to 2.17.1 soon or do we need to use
> the remediation steps referenced in this thread:
>
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOQ-AecysHAxD0FHEdBnTTHD3wNTa_d1xXcVVRmuC16A5g%40mail.gmail.com
>
>
> Many thanks!
>
> Rod
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/a4676eac-89f5-405e-bbc3-3e8f586725b0n%40apereo.org
>
> .
>
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAOz46ZQprk3rqLB0Sxhq7CApQ7%3DGM7q7-xJO9oDJ26Rd0gPDDg%40mail.gmail.com.
[cas-user] Install of CAS 6.4.4.2 includes log4j-jul-2.14.1.jar and log4j-jul-2.17.0.jar
Hi,
In test I downloaded the CAS Overlay for 6.4.4.2 here:
https://github.com/apereo/cas-overlay-template/archive/6.4.zip
We have a very basic install and I built the cas.war file.
When. I look at .../cas/WEB-INF/lib I notice there is to log4j-jul files:
log4j-jul-2.14.1.jar
log4j-jul-2.17.0.jar
I've tried to exclude the old file in the build.gradle file:
overlays {
cas {
from
"org.apereo.cas:cas-server-webapp${project.appServer}:${project.'cas.version'}@war
provided = false
excludes = ["WEB-INF/lib/servlet-api-2*.jar"]
excludes = ["WEB-INF/lib/log4j-jul-2.14.1.jar"]
}
But the file remains.
Fortunately it doesn't seem to be causing a problem, but I've experienced
issues when there are duplicate jar files of different versions.
Specifically log4j2 files.
Is this something that can be fixed in the upstream?
Also, is log4j2 going to be upgraded to 2.17.1 soon or do we need to use
the remediation steps referenced in this thread:
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOQ-AecysHAxD0FHEdBnTTHD3wNTa_d1xXcVVRmuC16A5g%40mail.gmail.com
Many thanks!
Rod
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/a4676eac-89f5-405e-bbc3-3e8f586725b0n%40apereo.org.
