Re: [cas-user] CAS 7.0.3: missing LDAP principal attributes when using DUO MFA

2024-05-05 Thread Robin Joseph 
I have the same issue with 7.0.3 and Duo MFA, I am also hoping for a fix
with 7.1, Thank you Ray and Mike.

On Wed, Apr 17, 2024 at 9:53 AM Mike S  wrote:

> You're right! Removing support-surrogate-webflow allows merging to proceed
> properly. Think this will be addressed in 7.1, or is this working as
> intended and we have to do something else to enable proper attribute
> merging?
>
> On Tuesday, April 16, 2024 at 8:55:32 p.m. UTC-2:30 Ray Bon wrote:
>
>> I have been able to confirm that the presence of the surrogate log in
>> feature can create the observed problem.
>>
>> implementation "org.apereo.cas:cas-server-support-surrogate-webflow"
>>
>> The non merging of attributes happens even though no surrogate login
>> takes place.
>>
>> Ray
>>
>> On Mon, 2024-04-15 at 12:30 -0700, Mike S wrote:
>>
>> Notice: This message was sent from outside the University of Victoria
>> email system. Please be cautious with links and sensitive information.
>>
>> FYI, downgrading to 6.6.13 works. DUO universal prompt functions properly
>> and the principal attributes are from LDAP only. I'm suspicious that
>> something about DUO and/or MFA is broken in CAS 7.0.3.
>>
>> On Monday, April 15, 2024 at 2:10:54 p.m. UTC-2:30 Mike S wrote:
>>
>> Hi Ray,
>>
>> it was in /etc/cas/config/lob4j2.xml, setting the log level to debug:
>>
>> 
>> 
>> /var/log/cas
>> *debug*
>>
>> On Saturday, April 13, 2024 at 1:48:06 a.m. UTC-2:30 Ray Bon wrote:
>>
>> Mike,
>>
>> What logger did you enable to see this?
>>
>> Ray
>>
>> On Fri, 2024-04-12 at 11:36 -0700, Mike S wrote:
>>
>> Notice: This message was sent from outside the University of Victoria
>> email system. Please be cautious with links and sensitive information.
>>
>> Thanks for your response Ray. I've been banging my head against this for
>> a while and I thought it was something I was missing. I've verified the
>> conflict resolver option doesn't work.
>>
>> The log debug log output  shows the LDAP and DUO attributes at one point
>> are merged, but the result is discarded.
>>
>> Is there a suggested workaround?
>>
>> On Friday, April 12, 2024 at 12:24:47 p.m. UTC-2:30 Ray Bon wrote:
>>
>> Mike,
>>
>> I can confirm this behaviour.
>> DefaultPrincipalElectionStrategy was changed between 6.5 and 7.0. The
>> change was in 5bcef20 about 5 months ago.
>>
>> The old behaviour was to select the first principle in a list; new
>> behaviour defaults to last.
>> Even setting this property,
>>
>> cas.person-directory.principal-resolution-conflict-strategy=first
>>
>> does not work.
>>
>> Printing the list of principals immediately before
>> PrincipalElectionStrategyConflictResolver is invoked:
>>
>> 2024-04-11 23:40:23,144 ERROR [
>> org.aper.cas.auth.prin.DefaultPrincipalElectionStrategy] - > SimplePrincipal(id=rbon, attributes={cn=[Ray Bon],
>> description=[ROLE_ADMIN], domain=[uvic.ca], ...
>> 2024-04-11 23:40:23,144 ERROR [
>> org.aper.cas.auth.prin.DefaultPrincipalElectionStrategy] - > SimplePrincipal(id=rbon, attributes={duoAud=[...],
>> duoAuthCtxAccessDeviceIp=[...], ...
>>
>> The principal id's are the same (so merging attributes should work).
>>
>> Our setup fetches attributes after authentication (instead of at the time
>> of authentication) but before duo flow.
>>
>> I will investigate if there is an effect of when ldap attributes are
>> retrieved; as well as look into other possible config settings that might
>> affect attribute merging.
>>
>> Ray
>>
>>
>> On Wed, 2024-04-10 at 12:47 -0700, Mike S wrote:
>>
>> Notice: This message was sent from outside the University of Victoria
>> email system. Please be cautious with links and sensitive information.
>>
>>
>> (Apologies for the repost. The CAS version has been added in the subject
>> line as well as the cas.properties file)
>>
>> We are testing a CAS 7.0.3 POC system using universal prompt DUO MFA. The
>> system is configured to use OpenLDAP for authentication. However, once DUO
>> MFA is enabled via the Fawnoos blog entry, the attributes returned for the
>> principal are from DUO.
>>
>> How do we tell CAS to only use the LDAP attribute repository?
>>
>> Thanks,
>> Mike
>>
>> *cas.properties*
>>
>> cas.server.name=https://cas-poc.xxx.yyy
>> cas.server.prefix=${cas.server.name}/cas
>> cas.server.scope=xxx.yyy
>> cas.host.name=xxx.yyy
>>
>> logging.config: file:/etc/cas/config/log4j2.xml
>> logging.level.org.apereoi.cas=debug
>>
>> server.port=8443
>> server.ssl.enabled=true
>> server.ssl.protocol=TLS
>> server.ssl.key-store=file:/etc/cas/config/keystore.jks
>> server.ssl.key-store-password=XXX
>> server.ssl.key-password=Y
>> server.ssl.key-store-type=JKS
>> server.ssl.key-alias=default
>>
>> server.servlet.context-path=/cas
>> server.servlet.application-display-name=cas
>>
>> cas.server.tomcat.http[0].enabled=false
>> cas.server.tomcat.http-proxy.enabled=true
>> cas.server.tomcat.http-proxy.secure=false
>> cas.server.tomcat.http-proxy.scheme=https
>>

[Bug 1907712] [NEW] grub installation crash

2020-12-10 Thread Robin JOSEPH 
Public bug reported:

the grub installation had crash, and I receive a message saying that the
system will be able to boot. Actually, I'm writing in a window that
automatically  opened so, I don"t know what will happen when I will
reboot.

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: ubiquity 20.04.15.2
ProcVersionSignature: Ubuntu 5.4.0-42.46-generic 5.4.44
Uname: Linux 5.4.0-42-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.11-0ubuntu27.4
Architecture: amd64
CasperMD5CheckResult: pass
CasperVersion: 1.445.1
CurrentDesktop: ubuntu:GNOME
Date: Thu Dec 10 21:39:45 2020
InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz file=/cdrom/preseed/ubuntu.seed 
maybe-ubiquity quiet splash ---
LiveMediaBuild: Ubuntu 20.04.1 LTS "Focal Fossa" - Release amd64 (20200731)
ProcEnviron:
 LANGUAGE=fr_FR.UTF-8
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=
 LANG=fr_FR.UTF-8
 LC_NUMERIC=C.UTF-8
SourcePackage: grub-installer
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: grub-installer (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: amd64 apport-bug focal ubiquity-20.04.15.2 ubuntu

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1907712

Title:
  grub installation crash

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub-installer/+bug/1907712/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[cas-user] customize caslogin page

2020-06-08 Thread Robin Joseph 
I downloaded and installed CAS 6.1.6,  Now I am looking to change the
image, color and text on the login page, I found very high level
instructions on Apereo site the
https://apereo.github.io/cas/6.1.x/ux/User-Interface-Customization.html.
managed to get the casLoginView.html by ./gradlew getResources
-PresourceName=casLoginVIew downloaded the view but how can I download
other files ? view does not have much info in it to customize. There may be
other .jsp, html and image files I need to download but not sure how to do
that.

Any help on this matter is greatly appreciated.

Thank you.

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMLyn%2B8ecv2LqQoy4S8Jcv%2BsmZr8MDgsCpMgpk_%3DBvSU2S52wQ%40mail.gmail.com.

Re: [cas-user] cas 5.3.3 management webapp overlay issue

2020-03-02 Thread Robin Joseph 
Any solution to fix this problem? it is happening to the latest 6.1.0-RC4

On Thursday, March 28, 2019 at 9:04:33 AM UTC-4, magicserverpixiedust wrote:
>
> Still haven't found a resolution for this either.
>
> On Thu, Mar 28, 2019 at 7:15 AM Rob Blais > 
> wrote:
>
>> Has there been any resolution to this?  I've run into the exact same 
>> problem with CAS 6.0.1 and 6.1.0-RC2.  It worked fine in 5.2.x and previous 
>> versions I've used. 
>>
>> On Tuesday, September 25, 2018 at 3:00:47 PM UTC-4, magicserverpixiedust 
>> wrote:
>>>
>>> If I start cas.war and wait for it to complete, then start 
>>> cas-management.war - then CAS Management app starts fine without the hang 
>>> up during Tomcat start.
>>>
>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-...@apereo.org .
>> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/eb6faecf-2c18-4d20-a1c8-a4ceacd2948a%40apereo.org
>>  
>> 
>> .
>>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/89205915-5395-4707-b717-44d66563a533%40apereo.org.

[cas-user] Re: CAS 6.1.0-RC5 gradle build issue

2020-02-19 Thread Robin Joseph 
Hi Erik,

I am also having this issue now, did you find a solution for this issue, I 
have the same statement on my gradle.build, 

On Friday, September 6, 2019 at 1:57:03 PM UTC-4, Mallory, Erik wrote:
>
> Hello, 
>
> I get the following error when attempting to include DUO MFA in the gradle 
> build
>
> Execution failed for task ':bootWar'.
>
> > Could not resolve all files for configuration ':runtimeClasspath'.
>
>> Could not resolve net.unicon.iam:duo-client:0.2.2.
>
>  Required by:
>
>  project : > 
> org.apereo.cas:cas-server-support-duo:6.1.0-RC5-SNAPSHOT:20190902.034040-116 
> > 
> org.apereo.cas:cas-server-support-duo-core:6.1.0-RC5-SNAPSHOT:20190902.034040-116
>
>   > Could not resolve net.unicon.iam:duo-client:0.2.2.
>
>  > Could not get resource '
> https://oss.jfrog.org/artifactory/oss-snapshot-local/net/unicon/iam/duo-client/0.2.2/duo-client-0.2.2.pom
> '.
>
> > Could not HEAD '
> https://oss.jfrog.org/artifactory/oss-snapshot-local/net/unicon/iam/duo-client/0.2.2/duo-client-0.2.2.pom'.
>  
> Received status code 409 from server: 
>
>  
>
> My gradle.build has the following line:
>
> compile "org.apereo.cas:cas-server-support-duo:${project.'cas.version'}
>
>  
>
> Thanks
>
> Erik Mallory
>
> Server Analyst 
>
> Wichita State University
>
> 316.978.3502
>
>  
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/342ac4b1-dfb8-4a5b-8741-c72d76e3f8e3%40apereo.org.