[cas-user] AUP in LDAP

[Paul Mitchell]

Hi,

I'm having an issue with getting AUP working in CAS 5.2.4.  Actually, it 
works fine except when the user accepts the policy an error occurs.  If I 
manually change the attribute then the user can sign in with no issue.

The error happens when LdapUtils attempts to modify the attribute.

2018-05-02 20:45:47,284 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:47,284 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:47,285 WARN 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:51,164 DEBUG 
[org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository] - 
2018-05-02 20:45:51,181 ERROR 
[org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository] - 

java.lang.ClassCastException: java.util.ArrayList cannot be cast to 
java.util.Set
at 
org.apereo.cas.util.LdapUtils.lambda$executeModifyOperation$0(LdapUtils.java:366)
 
~[cas-server-support-ldap-core-5.2.4.jar!/:5.2.4]
at 
java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:193) 
~[?:1.8.0_151]
at 
java.util.HashMap$EntrySpliterator.forEachRemaining(HashMap.java:1696) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471) 
~[?:1.8.0_151]
at 
java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) 
~[?:1.8.0_151]
at 
java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:499) 
~[?:1.8.0_151]
at 
org.apereo.cas.util.LdapUtils.executeModifyOperation(LdapUtils.java:367) 
~[cas-server-support-ldap-core-5.2.4.jar!/:5.2.4]
at 
org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository.submit(LdapAcceptableUsagePolicyRepository.java:52)
 
~[cas-server-support-aup-ldap-5.2.4.jar!/:5.2.4]




After manually changing it.
2018-05-02 20:54:39,272 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:54:39,273 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 

Regards,
Paul.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/0278eb7e-830c-4cb9-99de-945a0007e7cd%40apereo.org.

[cas-user] AUP in LDAP

[Paul Mitchell]

Hi,

I'm having an issue with getting AUP working in CAS 5.2.4.  Actually, it 
works fine except when the user accepts the policy an error occurs.  If I 
manually change the attribute then the user can sign in with no issue.

The error happens when LdapUtils attempts to modify the attribute.

2018-05-02 20:45:47,284 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:47,284 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:47,285 WARN 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:51,164 DEBUG 
[org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository] - 
2018-05-02 20:45:51,181 ERROR 
[org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository] - 

java.lang.ClassCastException: java.util.ArrayList cannot be cast to 
java.util.Set
at 
org.apereo.cas.util.LdapUtils.lambda$executeModifyOperation$0(LdapUtils.java:366)
 
~[cas-server-support-ldap-core-5.2.4.jar!/:5.2.4]
at 
java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:193) 
~[?:1.8.0_151]
at 
java.util.HashMap$EntrySpliterator.forEachRemaining(HashMap.java:1696) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471) 
~[?:1.8.0_151]
at 
java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) 
~[?:1.8.0_151]
at 
java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:499) 
~[?:1.8.0_151]
at 
org.apereo.cas.util.LdapUtils.executeModifyOperation(LdapUtils.java:367) 
~[cas-server-support-ldap-core-5.2.4.jar!/:5.2.4]
at 
org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository.submit(LdapAcceptableUsagePolicyRepository.java:52)
 
~[cas-server-support-aup-ldap-5.2.4.jar!/:5.2.4]




After manually changing it.
2018-05-02 20:54:39,272 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:54:39,273 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 

Regards,
Paul.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/bc2ec37a-b1c7-47ae-b174-bbaa93a75ff5%40apereo.org.

[cas-user] AUP in LDAP

[Paul Mitchell]

Hi,

I'm having an issue with getting AUP working in CAS 5.2.4.  Actually, it 
works fine except when the user accepts the policy an error occurs.  If I 
manually change the attribute then the user can sign in with no issue.

The error happens when LdapUtils attempts to modify the attribute.

2018-05-02 20:45:47,284 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:47,284 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:47,285 WARN 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:45:51,164 DEBUG 
[org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository] - 
2018-05-02 20:45:51,181 ERROR 
[org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository] - 

java.lang.ClassCastException: java.util.ArrayList cannot be cast to 
java.util.Set
at 
org.apereo.cas.util.LdapUtils.lambda$executeModifyOperation$0(LdapUtils.java:366)
 
~[cas-server-support-ldap-core-5.2.4.jar!/:5.2.4]
at 
java.util.stream.ReferencePipeline$3$1.accept(ReferencePipeline.java:193) 
~[?:1.8.0_151]
at 
java.util.HashMap$EntrySpliterator.forEachRemaining(HashMap.java:1696) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471) 
~[?:1.8.0_151]
at 
java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:708) 
~[?:1.8.0_151]
at 
java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) 
~[?:1.8.0_151]
at 
java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:499) 
~[?:1.8.0_151]
at 
org.apereo.cas.util.LdapUtils.executeModifyOperation(LdapUtils.java:367) 
~[cas-server-support-ldap-core-5.2.4.jar!/:5.2.4]
at 
org.apereo.cas.aup.LdapAcceptableUsagePolicyRepository.submit(LdapAcceptableUsagePolicyRepository.java:52)
 
~[cas-server-support-aup-ldap-5.2.4.jar!/:5.2.4]




After manually changing it.
2018-05-02 20:54:39,272 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 
2018-05-02 20:54:39,273 DEBUG 
[org.apereo.cas.aup.AbstractPrincipalAttributeAcceptableUsagePolicyRepository] 
- 

Regards,
Paul.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/3d30eb31-183a-4124-b62e-c0bafe4e1bd2%40apereo.org.

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

Thanks David.  I do have cacerts with a self signed cert for Apache
tomcat.  I do have latest Java ...this is a fresh install of redhat 7 and
fully patched.

I am going to try a couple of things

Jen

On Wed, May 2, 2018, 15:15 David Curry  wrote:

> Downloading the zip file (even on RedHat is normal).
>
> But you're getting an error from Java. The error has something to do with
> it being unable to find the keystore that it wants -- probably the
> certificate authority root certificates it uses to validate SSL
> certificates (like the one from the Maven repo).
>
> Are you running Java 8?
>
> Do you maybe have more than one version of Java installed and Java 8 is
> not the default (see the "alternatives" command)?
>
> Do you maybe have JAVA_HOME (or something else) in your environment?
>
> Have you run "yum update all" recently (if not, maybe you should)?
>
> --Dave
>
>
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
> On Wed, May 2, 2018 at 2:51 PM, Riley Wills  wrote:
>
>> You may examine your environment variables for a MAVEN_OPTS variable (see
>> https://stackoverflow.com/a/40650800/345687).
>>
>>
>> On Wednesday, May 2, 2018 at 1:45:08 PM UTC-5, Jennifer LaVoie wrote:
>>>
>>> Ok I did try that
>>>
>>> i was able to delete no problem
>>>
>>> but when I re run I get the same error
>>>
>>> Downloading
>>> https://repository.apache.org/content/repositories/releases/org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip
>>>
>>> Exception in thread "main" javax.net.ssl.SSLException:
>>> java.lang.RuntimeException: Unexpected error:
>>> java.security.InvalidAlgorithmParameterException: the trustAnchors
>>> parameter must be non-empty
>>> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
>>> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
>>> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916)
>>> at
>>> sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1899)
>>> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1420)
>>> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
>>> at
>>> sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
>>> at
>>> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
>>> at
>>> sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1564)
>>> at
>>> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1492)
>>> at
>>> sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:263)
>>> at
>>> org.apache.maven.wrapper.DefaultDownloader.downloadInternal(DefaultDownloader.java:84)
>>> at
>>> org.apache.maven.wrapper.DefaultDownloader.download(DefaultDownloader.java:68)
>>> at org.apache.maven.wrapper.Installer.createDist(Installer.java:69)
>>> at
>>> org.apache.maven.wrapper.WrapperExecutor.execute(WrapperExecutor.java:149)
>>> at
>>> org.apache.maven.wrapper.MavenWrapperMain.main(MavenWrapperMain.java:48)
>>> Caused by: java.lang.RuntimeException: Unexpected error:
>>> java.security.InvalidAlgorithmParameterException: the trustAnchors
>>> parameter must be non-empty
>>> at sun.security.validator.PKIXValidator.(PKIXValidator.java:91)
>>> at sun.security.validator.Validator.getInstance(Validator.java:179)
>>> at
>>> sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:312)
>>> at
>>> sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:171)
>>> at
>>> sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:184)
>>> at
>>> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
>>> at
>>> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
>>> at
>>> sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
>>> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
>>> at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
>>> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
>>> at
>>> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
>>> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
>>> ... 11 more
>>> Caused by: java.security.InvalidAlgorithmParameterException: the
>>> trustAnchors parameter must be non-empty
>>> at
>>> java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200)
>>> at java.security.cert.PKIXParameters.(PKIXParameters.java:120)
>>> at
>>> java.security.cert.PKIXBuilderParameters.(PKIXBuilderParameters.java:104)
>>> at sun.security.validator.PKIXValidator.(PKIXValidator.java:89)
>>> ... 23 more
>>> It looks like it 

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

They are dreadful

On Wed, May 2, 2018, 14:46 Riley Wills  wrote:

> Be careful. Those type of meetings are contagious.
>
> On Wednesday, May 2, 2018 at 1:29:58 PM UTC-5, Jennifer LaVoie wrote:
>>
>> Thanks.  Will try that after this dumb meeting I am stuck in
>>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/71ee1b14-5540-4305-a3b7-26b5994e5982%40apereo.org
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bwv1vG5VDb8EM4Upe4rw1SuQ1WVbDL-2fP6OOs%3Dhc%3DC%3DXZ%3Dxg%40mail.gmail.com.

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[David Curry]

Downloading the zip file (even on RedHat is normal).

But you're getting an error from Java. The error has something to do with
it being unable to find the keystore that it wants -- probably the
certificate authority root certificates it uses to validate SSL
certificates (like the one from the Maven repo).

Are you running Java 8?

Do you maybe have more than one version of Java installed and Java 8 is not
the default (see the "alternatives" command)?

Do you maybe have JAVA_HOME (or something else) in your environment?

Have you run "yum update all" recently (if not, maybe you should)?

--Dave




--

DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

[image: The New School]

On Wed, May 2, 2018 at 2:51 PM, Riley Wills  wrote:

> You may examine your environment variables for a MAVEN_OPTS variable (see
> https://stackoverflow.com/a/40650800/345687).
>
>
> On Wednesday, May 2, 2018 at 1:45:08 PM UTC-5, Jennifer LaVoie wrote:
>>
>> Ok I did try that
>>
>> i was able to delete no problem
>>
>> but when I re run I get the same error
>>
>> Downloading https://repository.apache.org/content/repositories/releases/
>> org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip
>>
>> Exception in thread "main" javax.net.ssl.SSLException:
>> java.lang.RuntimeException: Unexpected error: 
>> java.security.InvalidAlgorithmParameterException:
>> the trustAnchors parameter must be non-empty
>> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
>> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
>> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916)
>> at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl
>> .java:1899)
>> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1420)
>> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
>> at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsCli
>> ent.java:559)
>> at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnectio
>> n.connect(AbstractDelegateHttpsURLConnection.java:185)
>> at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(
>> HttpURLConnection.java:1564)
>> at sun.net.www.protocol.http.HttpURLConnection.getInputStream(H
>> ttpURLConnection.java:1492)
>> at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputSt
>> ream(HttpsURLConnectionImpl.java:263)
>> at org.apache.maven.wrapper.DefaultDownloader.downloadInternal(
>> DefaultDownloader.java:84)
>> at org.apache.maven.wrapper.DefaultDownloader.download(DefaultD
>> ownloader.java:68)
>> at org.apache.maven.wrapper.Installer.createDist(Installer.java:69)
>> at org.apache.maven.wrapper.WrapperExecutor.execute(WrapperExec
>> utor.java:149)
>> at org.apache.maven.wrapper.MavenWrapperMain.main(MavenWrapperM
>> ain.java:48)
>> Caused by: java.lang.RuntimeException: Unexpected error:
>> java.security.InvalidAlgorithmParameterException: the trustAnchors
>> parameter must be non-empty
>> at sun.security.validator.PKIXValidator.(PKIXValidator.java:91)
>> at sun.security.validator.Validator.getInstance(Validator.java:179)
>> at sun.security.ssl.X509TrustManagerImpl.getValidator(X509Trust
>> ManagerImpl.java:312)
>> at sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509T
>> rustManagerImpl.java:171)
>> at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509Trust
>> ManagerImpl.java:184)
>> at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X50
>> 9TrustManagerImpl.java:124)
>> at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHa
>> ndshaker.java:1496)
>> at sun.security.ssl.ClientHandshaker.processMessage(ClientHands
>> haker.java:216)
>> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
>> at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
>> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
>> at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSo
>> cketImpl.java:1385)
>> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
>> ... 11 more
>> Caused by: java.security.InvalidAlgorithmParameterException: the
>> trustAnchors parameter must be non-empty
>> at java.security.cert.PKIXParameters.setTrustAnchors(PKIXParame
>> ters.java:200)
>> at java.security.cert.PKIXParameters.(PKIXParameters.java:120)
>> at java.security.cert.PKIXBuilderParameters.(PKIXBuilderP
>> arameters.java:104)
>> at sun.security.validator.PKIXValidator.(PKIXValidator.java:89)
>> ... 23 more
>> It looks like it it trying to DL a zip file?
>>
>> Downloading https://repository.apache.org/content/repositories/releases/
>> org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip
>>
>>
>> But this is a Redhat box...
>>
>>
>> On Wednesday, May 2, 2018 at 2:16:04 PM UTC-4, David Curry wrote:
>>>
>>> Perhaps something got corrupted. You could try removing the Maven cache:
>>>
>>> rm -rf 

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Riley Wills]

You may examine your environment variables for a MAVEN_OPTS variable 
(see https://stackoverflow.com/a/40650800/345687).

On Wednesday, May 2, 2018 at 1:45:08 PM UTC-5, Jennifer LaVoie wrote:
>
> Ok I did try that
>
> i was able to delete no problem
>
> but when I re run I get the same error
>
> Downloading 
> https://repository.apache.org/content/repositories/releases/org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip
>
> Exception in thread "main" javax.net.ssl.SSLException: 
> java.lang.RuntimeException: Unexpected error: 
> java.security.InvalidAlgorithmParameterException: the trustAnchors 
> parameter must be non-empty
> at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
> at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916)
> at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1899)
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1420)
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
> at 
> sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
> at 
> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
> at 
> sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1564)
> at 
> sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1492)
> at 
> sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:263)
> at 
> org.apache.maven.wrapper.DefaultDownloader.downloadInternal(DefaultDownloader.java:84)
> at 
> org.apache.maven.wrapper.DefaultDownloader.download(DefaultDownloader.java:68)
> at org.apache.maven.wrapper.Installer.createDist(Installer.java:69)
> at 
> org.apache.maven.wrapper.WrapperExecutor.execute(WrapperExecutor.java:149)
> at org.apache.maven.wrapper.MavenWrapperMain.main(MavenWrapperMain.java:48)
> Caused by: java.lang.RuntimeException: Unexpected error: 
> java.security.InvalidAlgorithmParameterException: the trustAnchors 
> parameter must be non-empty
> at sun.security.validator.PKIXValidator.(PKIXValidator.java:91)
> at sun.security.validator.Validator.getInstance(Validator.java:179)
> at 
> sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:312)
> at 
> sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:171)
> at 
> sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:184)
> at 
> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
> at 
> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
> at 
> sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
> at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
> at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
> at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
> at 
> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
> at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
> ... 11 more
> Caused by: java.security.InvalidAlgorithmParameterException: the 
> trustAnchors parameter must be non-empty
> at 
> java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200)
> at java.security.cert.PKIXParameters.(PKIXParameters.java:120)
> at 
> java.security.cert.PKIXBuilderParameters.(PKIXBuilderParameters.java:104)
> at sun.security.validator.PKIXValidator.(PKIXValidator.java:89)
> ... 23 more
> It looks like it it trying to DL a zip file?
>
> Downloading 
> https://repository.apache.org/content/repositories/releases/org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip
>
>
> But this is a Redhat box...
>
>
> On Wednesday, May 2, 2018 at 2:16:04 PM UTC-4, David Curry wrote:
>>
>> Perhaps something got corrupted. You could try removing the Maven cache:
>>
>> rm -rf $HOME/.m2
>>
>> and then re-run "./mvnw clean package" and let it re-download everything.
>>
>> --Dave
>>
>>
>> --
>>
>> DAVID A. CURRY, CISSP
>> *DIRECTOR OF INFORMATION SECURITY*
>> INFORMATION TECHNOLOGY
>>
>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>>
>> [image: The New School]
>>
>> On Wed, May 2, 2018 at 2:09 PM, Jennifer LaVoie  
>> wrote:
>>
>>> Hi Dave
>>>
>>> thanks for your insight.  I am not sure what is happening...my maven is 
>>> 3.5.2 and it worked a few days ago to install cas...This is very 
>>> frustrating...I really appreciate this community
>>>
>>> On Wednesday, May 2, 2018 at 12:49:27 PM UTC-4, David Curry wrote:

 Hi Jennifer,

 When you first run "mvnw" it tries to download and install Maven for 
 you. This seems to be a problem with that process; it's failing to 
 download 
 one of the Maven plug-ins.

 I can think of a couple of 

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Riley Wills]

Be careful. Those type of meetings are contagious.

On Wednesday, May 2, 2018 at 1:29:58 PM UTC-5, Jennifer LaVoie wrote:
>
> Thanks.  Will try that after this dumb meeting I am stuck in
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/71ee1b14-5540-4305-a3b7-26b5994e5982%40apereo.org.

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

Ok I did try that

i was able to delete no problem

but when I re run I get the same error

Downloading 
https://repository.apache.org/content/repositories/releases/org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip

Exception in thread "main" javax.net.ssl.SSLException: 
java.lang.RuntimeException: Unexpected error: 
java.security.InvalidAlgorithmParameterException: the trustAnchors 
parameter must be non-empty
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1959)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916)
at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1899)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1420)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
at 
sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at 
sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1564)
at 
sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1492)
at 
sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:263)
at 
org.apache.maven.wrapper.DefaultDownloader.downloadInternal(DefaultDownloader.java:84)
at 
org.apache.maven.wrapper.DefaultDownloader.download(DefaultDownloader.java:68)
at org.apache.maven.wrapper.Installer.createDist(Installer.java:69)
at 
org.apache.maven.wrapper.WrapperExecutor.execute(WrapperExecutor.java:149)
at org.apache.maven.wrapper.MavenWrapperMain.main(MavenWrapperMain.java:48)
Caused by: java.lang.RuntimeException: Unexpected error: 
java.security.InvalidAlgorithmParameterException: the trustAnchors 
parameter must be non-empty
at sun.security.validator.PKIXValidator.(PKIXValidator.java:91)
at sun.security.validator.Validator.getInstance(Validator.java:179)
at 
sun.security.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:312)
at 
sun.security.ssl.X509TrustManagerImpl.checkTrustedInit(X509TrustManagerImpl.java:171)
at 
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:184)
at 
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
at 
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
at 
sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
... 11 more
Caused by: java.security.InvalidAlgorithmParameterException: the 
trustAnchors parameter must be non-empty
at 
java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200)
at java.security.cert.PKIXParameters.(PKIXParameters.java:120)
at 
java.security.cert.PKIXBuilderParameters.(PKIXBuilderParameters.java:104)
at sun.security.validator.PKIXValidator.(PKIXValidator.java:89)
... 23 more
It looks like it it trying to DL a zip file?

Downloading 
https://repository.apache.org/content/repositories/releases/org/apache/maven/apache-maven/3.5.2/apache-maven-3.5.2-bin.zip


But this is a Redhat box...


On Wednesday, May 2, 2018 at 2:16:04 PM UTC-4, David Curry wrote:
>
> Perhaps something got corrupted. You could try removing the Maven cache:
>
> rm -rf $HOME/.m2
>
> and then re-run "./mvnw clean package" and let it re-download everything.
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu 
>
> [image: The New School]
>
> On Wed, May 2, 2018 at 2:09 PM, Jennifer LaVoie  > wrote:
>
>> Hi Dave
>>
>> thanks for your insight.  I am not sure what is happening...my maven is 
>> 3.5.2 and it worked a few days ago to install cas...This is very 
>> frustrating...I really appreciate this community
>>
>> On Wednesday, May 2, 2018 at 12:49:27 PM UTC-4, David Curry wrote:
>>>
>>> Hi Jennifer,
>>>
>>> When you first run "mvnw" it tries to download and install Maven for 
>>> you. This seems to be a problem with that process; it's failing to download 
>>> one of the Maven plug-ins.
>>>
>>> I can think of a couple of reasons for this... one would be that it was 
>>> just a transient thing with the Maven repo and it should work for you after 
>>> waiting a little while, and another would be either you have an old, 
>>> out-of-date version of Maven already installed, or are somehow using an 
>>> old, out-of-date version of Java?
>>>
>>> --Dave
>>>
>>>
>>> --
>>>
>>> DAVID A. CURRY, CISSP
>>> *DIRECTOR 

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

Thanks.  Will try that after this dumb meeting I am stuck in

On Wed, May 2, 2018, 14:16 David Curry  wrote:

> Perhaps something got corrupted. You could try removing the Maven cache:
>
> rm -rf $HOME/.m2
>
> and then re-run "./mvnw clean package" and let it re-download everything.
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>
> [image: The New School]
>
> On Wed, May 2, 2018 at 2:09 PM, Jennifer LaVoie 
> wrote:
>
>> Hi Dave
>>
>> thanks for your insight.  I am not sure what is happening...my maven is
>> 3.5.2 and it worked a few days ago to install cas...This is very
>> frustrating...I really appreciate this community
>>
>> On Wednesday, May 2, 2018 at 12:49:27 PM UTC-4, David Curry wrote:
>>>
>>> Hi Jennifer,
>>>
>>> When you first run "mvnw" it tries to download and install Maven for
>>> you. This seems to be a problem with that process; it's failing to download
>>> one of the Maven plug-ins.
>>>
>>> I can think of a couple of reasons for this... one would be that it was
>>> just a transient thing with the Maven repo and it should work for you after
>>> waiting a little while, and another would be either you have an old,
>>> out-of-date version of Maven already installed, or are somehow using an
>>> old, out-of-date version of Java?
>>>
>>> --Dave
>>>
>>>
>>> --
>>>
>>> DAVID A. CURRY, CISSP
>>> *DIRECTOR OF INFORMATION SECURITY*
>>> INFORMATION TECHNOLOGY
>>>
>>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>>> 
>>> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>>>
>>> [image: The New School]
>>>
>>> On Wed, May 2, 2018 at 9:44 AM, Jennifer LaVoie 
>>> wrote:
>>>
 I am following this amazing document


 https://dacurry-tns.github.io/deploying-apereo-cas/introduction_overview.html
 (thank you so much for this)

 But I am hitting  a snag here


 https://dacurry-tns.github.io/deploying-apereo-cas/building_server_ldap_authentication_overview.html

 I have added the correct lines to the pom.xml, but when I run mvnm
 clean package, I get the following error


 [INFO] Scanning for projects...
 [INFO]
 [INFO]
 
 [INFO] Building cas-overlay 1.0
 [INFO]
 
 Downloading from central:
 https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-2.5.pom
 [INFO]
 
 [INFO] BUILD FAILURE
 [INFO]
 
 [INFO] Total time: 0.820 s
 [INFO] Finished at: 2018-05-02T09:40:12-04:00
 [INFO] Final Memory: 9M/208M
 [INFO]
 
 [ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one
 of its dependencies could not be resolved: Failed to read artifact
 descriptor for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could
 not transfer artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5
 from/to central (https://repo.maven.apache.org/maven2):
 java.lang.RuntimeException: Unexpected error:
 java.security.InvalidAlgorithmParameterException: the trustAnchors
 parameter must be non-empty -> [Help 1]
 [ERROR]
 [ERROR] To see the full stack trace of the errors, re-run Maven with
 the -e switch.
 [ERROR] Re-run Maven using the -X switch to enable full debug logging.
 [ERROR]
 [ERROR] For more information about the errors and possible solutions,
 please read the following articles:
 [ERROR] [Help 1]
 http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException


 I do have a self signed cert in my jre/lib/security/cacerts, so I am
 not sure I understand the error.

 Any help or advice would be appreciated

 Jen

 --
 - Website: https://apereo.github.io/cas
 - Gitter Chatroom: https://gitter.im/apereo/cas
 - List Guidelines: https://goo.gl/1VRrw7
 - Contributions: https://goo.gl/mh7qDG
 ---
 You received this message because you are subscribed to the Google
 Groups "CAS Community" group.
 To unsubscribe from this group and stop receiving emails from it, send
 an email to cas-user+u...@apereo.org.
 To view this discussion on the web visit
 https://groups.google.com/a/apereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-472d25dae8ce%40apereo.org
 

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[David Curry]

Perhaps something got corrupted. You could try removing the Maven cache:

rm -rf $HOME/.m2

and then re-run "./mvnw clean package" and let it re-download everything.

--Dave


--

DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

[image: The New School]

On Wed, May 2, 2018 at 2:09 PM, Jennifer LaVoie 
wrote:

> Hi Dave
>
> thanks for your insight.  I am not sure what is happening...my maven is
> 3.5.2 and it worked a few days ago to install cas...This is very
> frustrating...I really appreciate this community
>
> On Wednesday, May 2, 2018 at 12:49:27 PM UTC-4, David Curry wrote:
>>
>> Hi Jennifer,
>>
>> When you first run "mvnw" it tries to download and install Maven for you.
>> This seems to be a problem with that process; it's failing to download one
>> of the Maven plug-ins.
>>
>> I can think of a couple of reasons for this... one would be that it was
>> just a transient thing with the Maven repo and it should work for you after
>> waiting a little while, and another would be either you have an old,
>> out-of-date version of Maven already installed, or are somehow using an
>> old, out-of-date version of Java?
>>
>> --Dave
>>
>>
>> --
>>
>> DAVID A. CURRY, CISSP
>> *DIRECTOR OF INFORMATION SECURITY*
>> INFORMATION TECHNOLOGY
>>
>> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
>> 
>> +1 212 229-5300 x4728 • david.cu...@newschool.edu
>>
>> [image: The New School]
>>
>> On Wed, May 2, 2018 at 9:44 AM, Jennifer LaVoie 
>> wrote:
>>
>>> I am following this amazing document
>>>
>>> https://dacurry-tns.github.io/deploying-apereo-cas/introduct
>>> ion_overview.html (thank you so much for this)
>>>
>>> But I am hitting  a snag here
>>>
>>> https://dacurry-tns.github.io/deploying-apereo-cas/building_
>>> server_ldap_authentication_overview.html
>>>
>>> I have added the correct lines to the pom.xml, but when I run mvnm clean
>>> package, I get the following error
>>>
>>>
>>> [INFO] Scanning for projects...
>>> [INFO]
>>> [INFO] 
>>> 
>>> [INFO] Building cas-overlay 1.0
>>> [INFO] 
>>> 
>>> Downloading from central: https://repo.maven.apache.org/
>>> maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/
>>> maven-clean-plugin-2.5.pom
>>> [INFO] 
>>> 
>>> [INFO] BUILD FAILURE
>>> [INFO] 
>>> 
>>> [INFO] Total time: 0.820 s
>>> [INFO] Finished at: 2018-05-02T09:40:12-04:00
>>> [INFO] Final Memory: 9M/208M
>>> [INFO] 
>>> 
>>> [ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one
>>> of its dependencies could not be resolved: Failed to read artifact
>>> descriptor for org.apache.maven.plugins:maven-clean-plugin:jar:2.5:
>>> Could not transfer artifact 
>>> org.apache.maven.plugins:maven-clean-plugin:pom:2.5
>>> from/to central (https://repo.maven.apache.org/maven2):
>>> java.lang.RuntimeException: Unexpected error: 
>>> java.security.InvalidAlgorithmParameterException:
>>> the trustAnchors parameter must be non-empty -> [Help 1]
>>> [ERROR]
>>> [ERROR] To see the full stack trace of the errors, re-run Maven with the
>>> -e switch.
>>> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
>>> [ERROR]
>>> [ERROR] For more information about the errors and possible solutions,
>>> please read the following articles:
>>> [ERROR] [Help 1] http://cwiki.apache.org/conflu
>>> ence/display/MAVEN/PluginResolutionException
>>>
>>>
>>> I do have a self signed cert in my jre/lib/security/cacerts, so I am not
>>> sure I understand the error.
>>>
>>> Any help or advice would be appreciated
>>>
>>> Jen
>>>
>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to cas-user+u...@apereo.org.
>>> To view this discussion on the web visit https://groups.google.com/a/ap
>>> ereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-472d25dae8
>>> ce%40apereo.org
>>> 
>>> .
>>>
>>
>> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG

Re: [cas-user] PGP Verify Timeout issue CAS Management 5.1.9

[Jeffrey Ramsay]

Same for me.

On Wed, May 2, 2018 at 10:39 AM, 'Mallory, Erik' via CAS Community <
cas-user@apereo.org> wrote:

> Attempting to build CAS 5.1.9 CAS Management yields the following error.
> This is also true for 5.1.8 .I circumvented it by commenting out the pgp
> verify stanza in the pom. I’d like a better solution if possible.
>
> KeyId: 0x3B2C12292E76FEE3 UserIds: [Jerome LELEU ]
>
> [INFO] 
> 
>
> [INFO] BUILD FAILURE
>
> [INFO] 
> 
>
> [INFO] Total time: 04:41 min
>
> [INFO] Finished at: 2018-05-02T09:31:55-05:00
>
> [INFO] Final Memory: 45M/312M
>
> [INFO] 
> 
>
> [ERROR] Failed to execute goal com.github.s4u.plugins:
> pgpverify-maven-plugin:1.1.0:check (default) on project cas-overlay:
> Connection timed out (Connection timed out) -> [Help 1]
>
> [ERROR]
>
> [ERROR] To see the full stack trace of the errors, re-run Maven with the
> -e switch.
>
> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
>
> [ERROR]
>
> [ERROR] For more information about the errors and possible solutions,
> please read the following articles:
>
> [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/
> MojoFailureException
>
>
>
> Thanks,
>
>
>
> Erik Mallory
>
> Server Analyst
>
> Wichita State University
>
>
>
>
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit https://groups.google.com/a/
> apereo.org/d/msgid/cas-user/12B1766A-4471-4A8C-A0B7-
> 0707590D77E6%40wichita.edu
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BTBYOQEzO6D5HyVLr2nvCp4WkM2ELaV4qyv9-_B8SpwoxQAaA%40mail.gmail.com.

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

Hi Dave

thanks for your insight.  I am not sure what is happening...my maven is 
3.5.2 and it worked a few days ago to install cas...This is very 
frustrating...I really appreciate this community

On Wednesday, May 2, 2018 at 12:49:27 PM UTC-4, David Curry wrote:
>
> Hi Jennifer,
>
> When you first run "mvnw" it tries to download and install Maven for you. 
> This seems to be a problem with that process; it's failing to download one 
> of the Maven plug-ins.
>
> I can think of a couple of reasons for this... one would be that it was 
> just a transient thing with the Maven repo and it should work for you after 
> waiting a little while, and another would be either you have an old, 
> out-of-date version of Maven already installed, or are somehow using an 
> old, out-of-date version of Java?
>
> --Dave
>
>
> --
>
> DAVID A. CURRY, CISSP
> *DIRECTOR OF INFORMATION SECURITY*
> INFORMATION TECHNOLOGY
>
> 71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
> +1 212 229-5300 x4728 • david.cu...@newschool.edu 
>
> [image: The New School]
>
> On Wed, May 2, 2018 at 9:44 AM, Jennifer LaVoie  > wrote:
>
>> I am following this amazing document
>>
>>
>> https://dacurry-tns.github.io/deploying-apereo-cas/introduction_overview.html
>>  
>> (thank you so much for this)
>>
>> But I am hitting  a snag here
>>
>>
>> https://dacurry-tns.github.io/deploying-apereo-cas/building_server_ldap_authentication_overview.html
>>
>> I have added the correct lines to the pom.xml, but when I run mvnm clean 
>> package, I get the following error
>>
>>
>> [INFO] Scanning for projects...
>> [INFO] 
>> [INFO] 
>> 
>> [INFO] Building cas-overlay 1.0
>> [INFO] 
>> 
>> Downloading from central: 
>> https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-2.5.pom
>> [INFO] 
>> 
>> [INFO] BUILD FAILURE
>> [INFO] 
>> 
>> [INFO] Total time: 0.820 s
>> [INFO] Finished at: 2018-05-02T09:40:12-04:00
>> [INFO] Final Memory: 9M/208M
>> [INFO] 
>> 
>> [ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of 
>> its dependencies could not be resolved: Failed to read artifact descriptor 
>> for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer 
>> artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to 
>> central (https://repo.maven.apache.org/maven2): 
>> java.lang.RuntimeException: Unexpected error: 
>> java.security.InvalidAlgorithmParameterException: the trustAnchors 
>> parameter must be non-empty -> [Help 1]
>> [ERROR] 
>> [ERROR] To see the full stack trace of the errors, re-run Maven with the 
>> -e switch.
>> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
>> [ERROR] 
>> [ERROR] For more information about the errors and possible solutions, 
>> please read the following articles:
>> [ERROR] [Help 1] 
>> http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException
>>
>>
>> I do have a self signed cert in my jre/lib/security/cacerts, so I am not 
>> sure I understand the error.
>>
>> Any help or advice would be appreciated
>>
>> Jen
>>
>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-user+u...@apereo.org .
>> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-472d25dae8ce%40apereo.org
>>  
>> 
>> .
>>
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/ae0ee746-b039-4848-8e45-5dd867624c18%40apereo.org.

[cas-user] EXTENDED! Open Apereo 2018: One more week for early bird rates!

[Alan Regan]

OPEN APEREO 2018

"The Open Source Conference for Education"

June 3-7, 2018 - Montréal, Quebec

http://conference.apereo.org

Register for Open Apereo 2018 and book your hotel room now! Early discounts 
have been extended by one week only.

ACT FAST!  Early bird rates expire on *Tuesday, May 8!*

   - 
   
   Conference Registration: http://bit.ly/apereo18reg
   - 
   
   Reserve Your Room: http://bit.ly/apereo18hotel 
   

Why attend Open Apereo 2018?

Connect with your international colleagues in the Apereo community. Hear 
the latest project developments, explore opportunities, and collaborate on 
solutions together.  Join the conversation in birds of a feather 
discussions, share your insights in a lightning talk, and have fun in 
dine-arounds and other social activities in beautiful Montréal.

Keynote Sessions

   - 
   
   "Artificial Intelligence, Machine Learning, and Deep Learning" by 
   Laurent Charlin,  Assistant Professor, Department of Decision Sciences, HEC 
   Montréal
   - 
   
   "NGDLE Plenary” Practical work towards a Next Generation Digital 
   Learning Environment from around the Apereo Community
   - 
   
   "Women in Open Source: A Decade of Change" by Deborah Bryant, Senior 
   Director Open Source and Standards, Red Hat
   

Single-day, pre-conference, and student rates are available. Full 
conference registration includes the full schedule plus 2 receptions, 3 
breakfasts, 2 lunches, and refreshment breaks.

With so much to learn and do -- don't wait!  Register today!

http://bit.ly/apereo18reg

We look forward to seeing you at Open Apereo 2018.

Sincerely,


Ian Dolphin, Executive Director, Apereo Foundation
Alan Regan, Open Apereo 2018 Conference Committee Chair
Jennifer Cummings, Open Apereo 2018 Conference Coordinator
http://conference.apereo.org 

For general inquiries about this year’s conference, please contact:
apereocoordina...@concentra-cms.com 


OPEN APEREO 2018
http://conference.apereo.org
Apereo OAE | Bedework | CAS | Karuta | Sakai | UniTime | uPortal | Xerte
EDexchange | ELMS: LN | EQUELLA | Image Quiz | Notifications Backbone | 
OnTask | POET | Shuhari | Tsugi | uPortal-home

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/d193656b-8bc1-4292-962e-a01e53fcf433%40apereo.org.

Re: [cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[David Curry]

Hi Jennifer,

When you first run "mvnw" it tries to download and install Maven for you.
This seems to be a problem with that process; it's failing to download one
of the Maven plug-ins.

I can think of a couple of reasons for this... one would be that it was
just a transient thing with the Maven repo and it should work for you after
waiting a little while, and another would be either you have an old,
out-of-date version of Maven already installed, or are somehow using an
old, out-of-date version of Java?

--Dave


--

DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david.cu...@newschool.edu

[image: The New School]

On Wed, May 2, 2018 at 9:44 AM, Jennifer LaVoie 
wrote:

> I am following this amazing document
>
> https://dacurry-tns.github.io/deploying-apereo-cas/
> introduction_overview.html (thank you so much for this)
>
> But I am hitting  a snag here
>
> https://dacurry-tns.github.io/deploying-apereo-cas/building_
> server_ldap_authentication_overview.html
>
> I have added the correct lines to the pom.xml, but when I run mvnm clean
> package, I get the following error
>
>
> [INFO] Scanning for projects...
> [INFO]
> [INFO] 
> 
> [INFO] Building cas-overlay 1.0
> [INFO] 
> 
> Downloading from central: https://repo.maven.apache.org/
> maven2/org/apache/maven/plugins/maven-clean-plugin/2.
> 5/maven-clean-plugin-2.5.pom
> [INFO] 
> 
> [INFO] BUILD FAILURE
> [INFO] 
> 
> [INFO] Total time: 0.820 s
> [INFO] Finished at: 2018-05-02T09:40:12-04:00
> [INFO] Final Memory: 9M/208M
> [INFO] 
> 
> [ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of
> its dependencies could not be resolved: Failed to read artifact descriptor
> for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not
> transfer artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5
> from/to central (https://repo.maven.apache.org/maven2):
> java.lang.RuntimeException: Unexpected error: java.security.
> InvalidAlgorithmParameterException: the trustAnchors parameter must be
> non-empty -> [Help 1]
> [ERROR]
> [ERROR] To see the full stack trace of the errors, re-run Maven with the
> -e switch.
> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
> [ERROR]
> [ERROR] For more information about the errors and possible solutions,
> please read the following articles:
> [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/
> PluginResolutionException
>
>
> I do have a self signed cert in my jre/lib/security/cacerts, so I am not
> sure I understand the error.
>
> Any help or advice would be appreciated
>
> Jen
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit https://groups.google.com/a/
> apereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-
> 472d25dae8ce%40apereo.org
> 
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAOMona5hwREyTs729Cix70wHcHbn%2BPnLCc3NnQ5Mw0zMg%40mail.gmail.com.

[cas-user] Re: Grant Type password Not Working

[John D Giotta]

In my build.gradle in I'm adding the extra dependencies:

compile 
"org.apereo.cas:cas-server-support-oauth-webflow:${project.'cas.version'}"
compile 
"org.apereo.cas:cas-server-support-json-service-registry:${project.'cas.version'}"


Then in the /etc/cas/services directory I have an oauth-10001.json:

{
 "@class" : "org.apereo.cas.support.oauth.services.OAuthRegisteredService",
 "clientId": "oauthclient",
 "clientSecret": "secret",
 "generateRefreshToken" : true,
 "jsonFormat" : true,
 "supported_grants" : ["password", "refresh_token"],
 "name" : "OAuthTest",
 "id" : 1001,
 "evaluationOrder" : 1
}

When I make the following curl request I get the log output from above:

curl -X POST \
  https://localhost:8443/cas/oauth2.0/accessToken \
  -H 'Cache-Control: no-cache' \
  -H 'content-type: multipart/form-data; 
boundary=WebKitFormBoundary7MA4YWxkTrZu0gW' \
  -F grant_type=password \
  -F client_id=oauthclient \
  -F username=john \
  -F password=password


-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/0bce68c2-cdfd-4fef-bc0e-4a6136c82965%40apereo.org.

[cas-user] Re: Documentation on bringing a CAS server online

[Jennifer LaVoie]

I am using this one

https://dacurry-tns.github.io/deploying-apereo-cas/introduction_overview.html



On Wednesday, May 2, 2018 at 10:47:04 AM UTC-4, Christopher Myers wrote:
>
> I'm not quite sure the best way of going about this, so I thought I'd 
> start out here.
>
>
> There is a ton of documentation about the different options that are 
> available for CAS, but I've yet to find a step-by-step "here's how to bring 
> a new CAS server online" document, and trying to infer what all you need to 
> do and in what steps just from the config file examples on the 
> documentation site is rather painful and time-consuming to be honest. Since 
> I document the daylights out of stuff like this as I go through it, I 
> thought that I'd share what I did in case it helps others.
>
>
> Is there any way that something like this could be published to the 
> documentation site as some sort of getting started guide?
>
>
> Chris
>
>
>
>
> This document isn't universal, but it should help provide a good 
> kicking-off point. It assumes that you already have a Tomcat server built 
> on a Linux server, running with the default port 8080, front-ended by some 
> sort of device/software that does SSL offloading and URL rewriting. (Eg., 
> while the Tomcat server address would be http://casvm.school.edu:8080/cas 
> ,
>  
> the end-user and other applications would see https://login.school.edu/cas 
> 
> )
>
>
> It also operates under the assumption that you're going to be pointed to a 
> regular LDAP server (in my example, we use an eDirectory server, but it 
> should be comparable to generic LDAP.)
>
>
> The configuration below provides support for  SAML attribute handling, the 
> JSON registry service, login attempt throttling, and has configuration for 
> the CAS password management service (It is disabled in the configuration 
> (cas.authn.pm.enabled=false) because we aren't able to take advantage of it 
> at this point, but the configuration is still included below.)
>
>
> I will also provide documentation on bringing online the GUI management 
> web application.
>
>
> Downloading, configuring, building, and deploying the CAS application 
> itself:
>
>
> https://github.com/apereo/cas-overlay-template
> https://apereo.github.io/2017/03/28/cas5-gettingstarted-overlay/
>
> Build the directory structure and clone the project:
>
>> CASVM:/ # cd /opt/
>>
>> CASVM:/opt # mkdir apereo
>>
>> CASVM:/opt # cd apereo/
>>
>> CASVM:/opt/apereo # mkdir cas
>>
>> CASVM:/opt/apereo # cd cas/
>>
>> CASVM:/opt/apereo/cas # git clone 
>> https://github.com/apereo/cas-overlay-template.git 
>> 
>>
>> CASVM:/opt/apereo/cas # cd cas-overlay-template
>>
>> CASVM:/opt/apereo/cas/cas-overlay-template # mkdir -p src/main/resources
>>
>>
> Add the following to the "dependencies" element of the pom.xml file in 
> /opt/apereo/cas/cas-overlay-template ::
>
>> 
>>
>>   org.apereo.cas
>>
>>   cas-server-support-ldap
>>
>>   ${cas.version}
>>
>> 
>>
>> 
>>
>>   org.apereo.cas
>>
>>   cas-server-support-ldap-core
>>
>>   ${cas.version}
>>
>> 
>>
>> 
>>
>>   org.apereo.cas
>>
>>   cas-server-support-saml
>>
>>   ${cas.version}
>>
>> 
>>
>> 
>>
>>   org.apereo.cas
>>
>>   cas-server-support-json-service-registry
>>
>>   ${cas.version}
>>
>> 
>>
>> 
>>
>>   org.apereo.cas
>>
>>   cas-server-support-pm-ldap
>>
>>   ${cas.version}
>>
>> 
>>
>>
> Modify the build.sh file to add the "deploy" target as well as modify the 
> "clean" target. Example file attached.
>
>
> Create folders and set permissions:
>
> Set the permissions on that /etc/cas/config folder:
>
>> CASVM:/ # mkdir -p /etc/cas/config
>>
>> CASVM:/ # mkdir -p /etc/cas/logs
>>
>> CASVM:/ # mkdir -p /etc/cas/services
>>
>>
>> CASVM:/ # chown -r tomcat:root /etc/cas/config
>>
>> CASVM:/ # chown -r tomcat:root /etc/cas/logs
>>
>> CASVM:/ # chown -r tomcat:root /etc/cas/services
>>
>>
>> CASVM:/ # cd /etc/cas
>>
>>
>> CASVM:/etc/cas # chmod u+s config
>>
>> CASVM:/etc/cas # chmod u+s logs
>>
>> CASVM:/etc/cas # chmod u+s services
>>
>>
> Build the project for the first time:
>
>> CASVM:/opt/apereo/cas/cas-overlay-template # chmod +x build.sh 
>>
>> CASVM:/opt/apereo/cas/cas-overlay-template # ./build.sh package
>>
>> ..
>>
>> Creating configuration directory under /etc/cas
>>
>> Copying configuration files from etc/cas to /etc/cas
>>
>> 'etc/cas/config/application.yml' -> '/etc/cas/config/application.yml'
>>
>> 'etc/cas/config/cas.properties' -> '/etc/cas/config/cas.properties'
>>
>> 'etc/cas/config/log4j2.xml' -> '/etc/cas/config/log4j2.xml'
>>
>
>
>
> Set the following configuration in 
> /opt/apereo/cas/cas-overlay-template/etc/cas/config/cas.properties:
>
>> #General configuration
>>
>> 

[cas-user] Documentation on bringing a CAS server online

[Christopher Myers]

I'm not quite sure the best way of going about this, so I thought I'd start 
out here.


There is a ton of documentation about the different options that are 
available for CAS, but I've yet to find a step-by-step "here's how to bring 
a new CAS server online" document, and trying to infer what all you need to 
do and in what steps just from the config file examples on the 
documentation site is rather painful and time-consuming to be honest. Since 
I document the daylights out of stuff like this as I go through it, I 
thought that I'd share what I did in case it helps others.


Is there any way that something like this could be published to the 
documentation site as some sort of getting started guide?


Chris




This document isn't universal, but it should help provide a good 
kicking-off point. It assumes that you already have a Tomcat server built 
on a Linux server, running with the default port 8080, front-ended by some 
sort of device/software that does SSL offloading and URL rewriting. (Eg., 
while the Tomcat server address would be http://casvm.school.edu:8080/cas 
,
 
the end-user and other applications would see https://login.school.edu/cas 

)


It also operates under the assumption that you're going to be pointed to a 
regular LDAP server (in my example, we use an eDirectory server, but it 
should be comparable to generic LDAP.)


The configuration below provides support for  SAML attribute handling, the 
JSON registry service, login attempt throttling, and has configuration for 
the CAS password management service (It is disabled in the configuration 
(cas.authn.pm.enabled=false) because we aren't able to take advantage of it 
at this point, but the configuration is still included below.)


I will also provide documentation on bringing online the GUI management web 
application.


Downloading, configuring, building, and deploying the CAS application 
itself:


https://github.com/apereo/cas-overlay-template
https://apereo.github.io/2017/03/28/cas5-gettingstarted-overlay/

Build the directory structure and clone the project:

> CASVM:/ # cd /opt/
>
> CASVM:/opt # mkdir apereo
>
> CASVM:/opt # cd apereo/
>
> CASVM:/opt/apereo # mkdir cas
>
> CASVM:/opt/apereo # cd cas/
>
> CASVM:/opt/apereo/cas # git clone 
> https://github.com/apereo/cas-overlay-template.git 
> 
>
> CASVM:/opt/apereo/cas # cd cas-overlay-template
>
> CASVM:/opt/apereo/cas/cas-overlay-template # mkdir -p src/main/resources
>
>
Add the following to the "dependencies" element of the pom.xml file in 
/opt/apereo/cas/cas-overlay-template ::

> 
>
>   org.apereo.cas
>
>   cas-server-support-ldap
>
>   ${cas.version}
>
> 
>
> 
>
>   org.apereo.cas
>
>   cas-server-support-ldap-core
>
>   ${cas.version}
>
> 
>
> 
>
>   org.apereo.cas
>
>   cas-server-support-saml
>
>   ${cas.version}
>
> 
>
> 
>
>   org.apereo.cas
>
>   cas-server-support-json-service-registry
>
>   ${cas.version}
>
> 
>
> 
>
>   org.apereo.cas
>
>   cas-server-support-pm-ldap
>
>   ${cas.version}
>
> 
>
>
Modify the build.sh file to add the "deploy" target as well as modify the 
"clean" target. Example file attached.


Create folders and set permissions:

Set the permissions on that /etc/cas/config folder:

> CASVM:/ # mkdir -p /etc/cas/config
>
> CASVM:/ # mkdir -p /etc/cas/logs
>
> CASVM:/ # mkdir -p /etc/cas/services
>
>
> CASVM:/ # chown -r tomcat:root /etc/cas/config
>
> CASVM:/ # chown -r tomcat:root /etc/cas/logs
>
> CASVM:/ # chown -r tomcat:root /etc/cas/services
>
>
> CASVM:/ # cd /etc/cas
>
>
> CASVM:/etc/cas # chmod u+s config
>
> CASVM:/etc/cas # chmod u+s logs
>
> CASVM:/etc/cas # chmod u+s services
>
>
Build the project for the first time:

> CASVM:/opt/apereo/cas/cas-overlay-template # chmod +x build.sh 
>
> CASVM:/opt/apereo/cas/cas-overlay-template # ./build.sh package
>
> ..
>
> Creating configuration directory under /etc/cas
>
> Copying configuration files from etc/cas to /etc/cas
>
> 'etc/cas/config/application.yml' -> '/etc/cas/config/application.yml'
>
> 'etc/cas/config/cas.properties' -> '/etc/cas/config/cas.properties'
>
> 'etc/cas/config/log4j2.xml' -> '/etc/cas/config/log4j2.xml'
>



Set the following configuration in 
/opt/apereo/cas/cas-overlay-template/etc/cas/config/cas.properties:

> #General configuration
>
> cas.server.name: https://login.school.edu 
> 
>
> cas.server.prefix: https://login.school.edu/cas 
> 
>
>
>
>
> #CAS Management
>
> 

[cas-user] PGP Verify Timeout issue CAS Management 5.1.9

['Mallory, Erik' via CAS Community]

Attempting to build CAS 5.1.9 CAS Management yields the following error. This 
is also true for 5.1.8 .I circumvented it by commenting out the pgp verify 
stanza in the pom. I’d like a better solution if possible.
KeyId: 0x3B2C12292E76FEE3 UserIds: [Jerome LELEU ]
[INFO] 
[INFO] BUILD FAILURE
[INFO] 
[INFO] Total time: 04:41 min
[INFO] Finished at: 2018-05-02T09:31:55-05:00
[INFO] Final Memory: 45M/312M
[INFO] 
[ERROR] Failed to execute goal 
com.github.s4u.plugins:pgpverify-maven-plugin:1.1.0:check (default) on project 
cas-overlay: Connection timed out (Connection timed out) -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e 
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please 
read the following articles:
[ERROR] [Help 1] 
http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException

Thanks,

Erik Mallory
Server Analyst
Wichita State University


-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/12B1766A-4471-4A8C-A0B7-0707590D77E6%40wichita.edu.

[cas-user] Grant Type password Not Working

[John D Giotta]

When I attempt to perform a POST request to accessToken?grant_type=password 
the server does not recognize the service:


2018-05-02 10:09:31,679 WARN 
[org.apereo.cas.services.RegisteredServiceAccessStrategyUtils] - 



I'm not sure how to get the endpoint to properly responding.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/736491ed-3453-459d-b0a4-75cae70d9b67%40apereo.org.

[cas-user] Re: error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

Here is the section I added to my pom.xml

 
org.apereo.cas
cas-server-support-ldap
${cas.version}



On Wednesday, May 2, 2018 at 9:44:54 AM UTC-4, Jennifer LaVoie wrote:
>
> I am following this amazing document
>
>
> https://dacurry-tns.github.io/deploying-apereo-cas/introduction_overview.html 
> (thank you so much for this)
>
> But I am hitting  a snag here
>
>
> https://dacurry-tns.github.io/deploying-apereo-cas/building_server_ldap_authentication_overview.html
>
> I have added the correct lines to the pom.xml, but when I run mvnm clean 
> package, I get the following error
>
>
> [INFO] Scanning for projects...
> [INFO] 
> [INFO] 
> 
> [INFO] Building cas-overlay 1.0
> [INFO] 
> 
> Downloading from central: 
> https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-2.5.pom
> [INFO] 
> 
> [INFO] BUILD FAILURE
> [INFO] 
> 
> [INFO] Total time: 0.820 s
> [INFO] Finished at: 2018-05-02T09:40:12-04:00
> [INFO] Final Memory: 9M/208M
> [INFO] 
> 
> [ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of 
> its dependencies could not be resolved: Failed to read artifact descriptor 
> for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer 
> artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to 
> central (https://repo.maven.apache.org/maven2): 
> java.lang.RuntimeException: Unexpected error: 
> java.security.InvalidAlgorithmParameterException: the trustAnchors 
> parameter must be non-empty -> [Help 1]
> [ERROR] 
> [ERROR] To see the full stack trace of the errors, re-run Maven with the 
> -e switch.
> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
> [ERROR] 
> [ERROR] For more information about the errors and possible solutions, 
> please read the following articles:
> [ERROR] [Help 1] 
> http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException
>
>
> I do have a self signed cert in my jre/lib/security/cacerts, so I am not 
> sure I understand the error.
>
> Any help or advice would be appreciated
>
> Jen
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/9ba45297-1809-417c-8327-ff294075a51d%40apereo.org.

Re: [cas-user] duo-client not downloading

[Misagh Moayyed]

Switch to 5.1.9, or contact Duo: 
https://github.com/duosecurity/duo_java/issues/2 

--Misagh 

> From: "'Mallory, Erik' via CAS Community" 
> To: cas-user@apereo.org
> Sent: Wednesday, May 2, 2018 6:40:06 AM
> Subject: [cas-user] duo-client not downloading

> To whom it may concern,

> I successfully built and configured cas 5.1.8 with duo-mfa in our development
> environment. When I went to build it for our test environment I received the
> following error.

> Downloading:
> https://jitpack.io/com/github/duosecurity/duo_client_java/-930cd4e0a5-1/duo_client_java--930cd4e0a5-1.jar

> [INFO] 
> 

> [INFO] BUILD FAILURE

> [INFO] 
> 

> [INFO] Total time: 22.202 s

> [INFO] Finished at: 2018-05-02T08:31:08-05:00

> [INFO] Final Memory: 27M/179M

> [INFO] 
> 

> [ERROR] Failed to execute goal on project cas-overlay: Could not resolve
> dependencies for project org.apereo.cas:cas-overlay:war:1.0: Could not find
> artifact com.github.duosecurity:duo_client_java:jar:-930cd4e0a5-1 in jitpack
> (https://jitpack.io) -> [Help 1]

> [ERROR]

> [ERROR] To see the full stack trace of the errors, re-run Maven with the -e
> switch.

> [ERROR] Re-run Maven using the -X switch to enable full debug logging.

> [ERROR]

> [ERROR] For more information about the errors and possible solutions, please
> read the following articles:

> [ERROR] [Help 1]
> http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException

> I went back to my dev environment to try a build there, and got the same 
> error.
> Being the hard head that I am, I copied the cas.war file from the development
> environment to the test environment and I was able to get it working. That was
> last night. This morning I tried building the war file again

> And received the same error. Can some one somewhere fix this?

> Thanks,

> Erik Mallory

> Server Analyst

> Wichita State University

> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups "CAS
> Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email
> to cas-user+unsubscr...@apereo.org .
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/1A2877B2-7A28-47A1-8DA8-6C6A6DAC0675%40wichita.edu
> .

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1238229225.21399741.1525269311795.JavaMail.zimbra%40unicon.net.

[cas-user] error when I run mvmn - the trustAnchors parameter must be non-empty

[Jennifer LaVoie]

I am following this amazing document

https://dacurry-tns.github.io/deploying-apereo-cas/introduction_overview.html 
(thank you so much for this)

But I am hitting  a snag here

https://dacurry-tns.github.io/deploying-apereo-cas/building_server_ldap_authentication_overview.html

I have added the correct lines to the pom.xml, but when I run mvnm clean 
package, I get the following error


[INFO] Scanning for projects...
[INFO] 
[INFO] 

[INFO] Building cas-overlay 1.0
[INFO] 

Downloading from central: 
https://repo.maven.apache.org/maven2/org/apache/maven/plugins/maven-clean-plugin/2.5/maven-clean-plugin-2.5.pom
[INFO] 

[INFO] BUILD FAILURE
[INFO] 

[INFO] Total time: 0.820 s
[INFO] Finished at: 2018-05-02T09:40:12-04:00
[INFO] Final Memory: 9M/208M
[INFO] 

[ERROR] Plugin org.apache.maven.plugins:maven-clean-plugin:2.5 or one of 
its dependencies could not be resolved: Failed to read artifact descriptor 
for org.apache.maven.plugins:maven-clean-plugin:jar:2.5: Could not transfer 
artifact org.apache.maven.plugins:maven-clean-plugin:pom:2.5 from/to 
central (https://repo.maven.apache.org/maven2): java.lang.RuntimeException: 
Unexpected error: java.security.InvalidAlgorithmParameterException: the 
trustAnchors parameter must be non-empty -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e 
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, 
please read the following articles:
[ERROR] [Help 1] 
http://cwiki.apache.org/confluence/display/MAVEN/PluginResolutionException


I do have a self signed cert in my jre/lib/security/cacerts, so I am not 
sure I understand the error.

Any help or advice would be appreciated

Jen

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/bb74c4d6-c426-4915-808d-472d25dae8ce%40apereo.org.

[cas-user] duo-client not downloading

['Mallory, Erik' via CAS Community]

To whom it may concern,
I successfully built and configured cas 5.1.8 with duo-mfa in our development 
environment. When I went to build it for our test environment I received the 
following error.
Downloading: 
https://jitpack.io/com/github/duosecurity/duo_client_java/-930cd4e0a5-1/duo_client_java--930cd4e0a5-1.jar
[INFO] 
[INFO] BUILD FAILURE
[INFO] 
[INFO] Total time: 22.202 s
[INFO] Finished at: 2018-05-02T08:31:08-05:00
[INFO] Final Memory: 27M/179M
[INFO] 
[ERROR] Failed to execute goal on project cas-overlay: Could not resolve 
dependencies for project org.apereo.cas:cas-overlay:war:1.0: Could not find 
artifact com.github.duosecurity:duo_client_java:jar:-930cd4e0a5-1 in jitpack 
(https://jitpack.io) -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e 
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please 
read the following articles:
[ERROR] [Help 1] 
http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException


I went back to my dev environment to try a build there, and got the same error. 
Being the hard head that I am, I copied the cas.war file from the development 
environment to the test environment and I was able to get it working. That was 
last night. This morning I tried building the war file again
And received the same error. Can some one somewhere fix this?

Thanks,
Erik Mallory
Server Analyst
Wichita State University

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1A2877B2-7A28-47A1-8DA8-6C6A6DAC0675%40wichita.edu.

Re: [cas-user] How to obtain service url in my custom Authentication Handlers

[Misagh Moayyed]

Short answer is, you cannot (in a way that would safe and sensible). 

What do you mean by " compare the current service url to decide whether 
authenticate success or failed."? 

--Misagh 

> From: "Donghua Liu" 
> To: "CAS Community" 
> Sent: Wednesday, May 2, 2018 12:14:11 AM
> Subject: Re: [cas-user] How to obtain service url in my custom Authentication
> Handlers

> I went through this documentation, but I couldn't find how can I get the
> requested service url.

> 在 2018年5月2日星期三 UTC+8上午8:51:09，paul li写道：
>> hi,
>> You just need to follow what's in
>> https://apereo.github.io/cas/5.2.x/installation/Configuring-Custom-Authentication.html
>> step by step.

>> 1. Create a custom authentication handler class
>> public class MyAuthenticationHandler extends
>> AbstractUsernamePasswordAuthenticationHandler {

>> 2. Create a custom PlanConfiguation class that implements
>> AuthenicationEventExecutionPlanConfigurer, to register your handler class
>> @Configuration ( "MyAuthenticationEventExecutionPlanConfiguration" )
>> @EnableConfigurationProperties ( CasConfigurationProperties . class ) public
>> class MyAuthenticationEventExecutionPlanConfiguration implements
>> AuthenticationEventExecutionPlanConfigurer {

>> 3. In src/main/resources/META-INF/spring.factories
>> register your custom PlanConfiguation
>> org.springframework.boot.autoconfigure.EnableAutoConfiguration =
>> com.example.cas.MyAuthenticationEventExecutionPlanConfiguration
>> Rebuild and deploy your code, it's best to set your log level to DEBUG to see
>> the the debugg messages under org.aperero.cas...

>> When CAS first starts, you'll see the custom PlanConfiguration class gets
>> initialized, followed by your handler.

>> Thanks

>> On Tue, May 1, 2018 at 10:39 AM, Donghua Liu < liudon...@gmail.com > wrote:

>>> hi,
>>> I want to implement a custome Authentication Handlers which get related
>>> permission and compare the current service url to decide whether 
>>> authenticate
>>> success or failed.
>>> After reading Configuring-Custom-Authentication , It seems I need to extend
>>> AbstractUsernamePasswordAuthenticationHandler , but I could not find any 
>>> clues
>>> on how to get service url.

>>> --
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> ---
>>> You received this message because you are subscribed to the Google Groups 
>>> "CAS
>>> Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send an 
>>> email
>>> to cas-user+u...@apereo.org .
>>> To view this discussion on the web visit
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/6b4e24ec-c49b-4e26-8b92-7ca9a798306a%40apereo.org
>>> .

> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups "CAS
> Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email
> to cas-user+unsubscr...@apereo.org .
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/3c832774-7329-43a5-befa-ffe6a9a2cd4c%40apereo.org
> .

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/320054935.21396467.1525262705075.JavaMail.zimbra%40unicon.net.

[cas-user] <> CAS5.2x Password Management/ Change Password flow

[Jay]

Closing this thread as I got the answer

On Friday, April 27, 2018 at 9:58:43 AM UTC-5, Jay wrote:
>
> Hello everyone,
>
> As part of our migration from CAS3.5 to CAS5.2.x we have added the new 
> Password management module and using the change password functionality.
>
> Below are the changes we had to do and everything seems to working fine.
>
> #CAS property
> cas.authn.pm.enabled=true
>
> 
>
> org.apereo.cas
> cas-server-support-pm
> ${cas.version}
>
> 
>
> 
>
> org.apereo.cas
> cas-server-support-pm-webflow
> ${cas.version}
>
> 
>
>
> Since in this implementation we wont be able to access the ChangePassword 
> screen directly from the url 
> (https://:/cas/changePassword)  *correct me if I am 
> wrong here*.
>
> Is there a way I can enable the Change Password checkbox in the login 
> screen when a user tries to access the above said url?
>
> Thanks,
> Jay
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/a32f2461-0bae-40d5-aa93-b2453b3a0e30%40apereo.org.

[cas-user] CAS 4.1.6 and CAPTCHA

[Artur Stöcklin]

Hi all

Currently we are using CAS 4.1.6. I was asked if there is a chance to 
implement CAPTCHA into the login page. I see that cas version 5.0 and 
higher supports Google reCAPTCHA.
Does anyboday know or have implemented captcha on version 4.1.6?

Thanks in advance

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/3712abf6-0f51-4f98-92b0-f9ec9884e3fb%40apereo.org.

Re: [cas-user] How to obtain service url in my custom Authentication Handlers

[Donghua Liu]

I went through this documentation, but I couldn't find how can I get the 
requested service url.

在 2018年5月2日星期三 UTC+8上午8:51:09，paul li写道：
>
> hi,
>
> You just need to follow what's in 
> https://apereo.github.io/cas/5.2.x/installation/Configuring-Custom-Authentication.html
>  
> step by step.
>
> 1. Create a custom authentication handler class
>
> public class MyAuthenticationHandler extends 
> AbstractUsernamePasswordAuthenticationHandler {
>
>
> 2. Create a custom PlanConfiguation class that implements 
> AuthenicationEventExecutionPlanConfigurer, to register your handler class
>
> @Configuration("MyAuthenticationEventExecutionPlanConfiguration")@EnableConfigurationProperties(CasConfigurationProperties.class)public
>  class MyAuthenticationEventExecutionPlanConfiguration
> implements AuthenticationEventExecutionPlanConfigurer {
>
>
> 3. In src/main/resources/META-INF/spring.factories
> register your  custom PlanConfiguation
>
> org.springframework.boot.autoconfigure.EnableAutoConfiguration=com.example.cas.MyAuthenticationEventExecutionPlanConfiguration
>
> Rebuild and deploy your code, it's best to set your log level to DEBUG to 
> see the the debugg messages under org.aperero.cas...
>
> When CAS first starts, you'll see the custom PlanConfiguration class gets 
> initialized, followed by your handler.
>
>
> Thanks
>
>
> On Tue, May 1, 2018 at 10:39 AM, Donghua Liu  > wrote:
>
>> hi,
>> I want to implement a custome Authentication Handlers which get related 
>> permission and compare the current service url to decide whether 
>> authenticate success or failed.
>> After reading Configuring-Custom-Authentication 
>> ,
>>  
>> It seems I need to extend  AbstractUsernamePasswordAuthenticationHandler , 
>> but I could not find any clues on how to get service url.
>>
>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-user+u...@apereo.org .
>> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/6b4e24ec-c49b-4e26-8b92-7ca9a798306a%40apereo.org
>>  
>> 
>> .
>>
>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/3c832774-7329-43a5-befa-ffe6a9a2cd4c%40apereo.org.