[cas-user] CAS 6.1.x Ldaps configuration problem

[Julien Gribonvald]

Hi,

I'm beginning a new CAS configuration with latest dev version with the 
overlay packaging and when configuring ldaps I'm having a such error :


java.lang.NullPointerException: Thread local SslConfig has not been set
    at 
org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:53) 
~[ldaptive-1.2.4.jar!/:?]


With no ssl conf I don't have any problems, here are my change to move 
on ssl use:


cas.authn.ldap[0].ldapUrl=ldaps://my.domain.fr:636
#cas.authn.ldap[0].ldapUrl=ldap://my.domain.fr:389
#cas.authn.ldap[0].useSsl=false

Did I make something wrong or ?

Is there someone having the same problem or not ?

After googling a bit it seems that could be a problem with ldaptive lib 
and jdk11... Any information about a such problem ?


Thanks

--

Julien Gribonvald

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b098c57c-feb6-ecaa-88a0-579ca6bb963c%40recia.fr.

Re: [cas-user] CAS 6.1.x Ldaps configuration problem

[Daniel Fisher]

This appears to be a bug in JNDI code that manifests with an NPE in the
ldaptive thread local code.
I've filed an issue, but there isn't a resolution yet.

Work arounds include:
* Use startTLS
* Use the UnboundID provider
* Use Java 8 (versions 9-12 are all affected)

--Daniel Fisher

On Fri, Jan 25, 2019 at 1:28 PM Julien Gribonvald <
julien.gribonv...@recia.fr> wrote:

> Hi,
>
> I'm beginning a new CAS configuration with latest dev version with the
> overlay packaging and when configuring ldaps I'm having a such error :
>
> java.lang.NullPointerException: Thread local SslConfig has not been set
>  at
> org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:53)
>
> ~[ldaptive-1.2.4.jar!/:?]
>
> With no ssl conf I don't have any problems, here are my change to move
> on ssl use:
>
> cas.authn.ldap[0].ldapUrl=ldaps://my.domain.fr:636
> #cas.authn.ldap[0].ldapUrl=ldap://my.domain.fr:389
> #cas.authn.ldap[0].useSsl=false
>
> Did I make something wrong or ?
>
> Is there someone having the same problem or not ?
>
> After googling a bit it seems that could be a problem with ldaptive lib
> and jdk11... Any information about a such problem ?
>
> Thanks
>
> --
>
> Julien Gribonvald
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to cas-user+unsubscr...@apereo.org.
> To view this discussion on the web visit
> https://groups.google.com/a/apereo.org/d/msgid/cas-user/b098c57c-feb6-ecaa-88a0-579ca6bb963c%40recia.fr
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFC6YwSxnKgGG%2B6ZtiZQmLYzVLZ_AefVH_WcXOR2rPnRc3FDWA%40mail.gmail.com.


smime.p7s
Description: S/MIME Cryptographic Signature

Re: [cas-user] CAS 6.1.x Ldaps configuration problem

[David Gelhar]

Using Java8 probably isn't an option - CAS 6.x requires Java11

We have been able to work around the issue by using the UnboundID provider 
as suggested, with settings like this:

cas.properties :
cas.authn.ldap[0].providerClass=
org.ldaptive.provider.unboundid.UnboundIDProvider

build.gradle:
// to use UnboundID ldap provider instead of JNDI
compile "com.unboundid:unboundid-ldapsdk:4.0.9"


On Friday, January 25, 2019 at 5:47:00 PM UTC-5, dfisher wrote:
>
> This appears to be a bug in JNDI code that manifests with an NPE in the 
> ldaptive thread local code.
> I've filed an issue, but there isn't a resolution yet.
>
> Work arounds include:
> * Use startTLS
> * Use the UnboundID provider
> * Use Java 8 (versions 9-12 are all affected)
>
> --Daniel Fisher
>
> On Fri, Jan 25, 2019 at 1:28 PM Julien Gribonvald  > wrote:
>
>> Hi,
>>
>> I'm beginning a new CAS configuration with latest dev version with the 
>> overlay packaging and when configuring ldaps I'm having a such error :
>>
>> java.lang.NullPointerException: Thread local SslConfig has not been set
>>  at 
>> org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:53)
>>  
>>
>> ~[ldaptive-1.2.4.jar!/:?]
>>
>> With no ssl conf I don't have any problems, here are my change to move 
>> on ssl use:
>>
>> cas.authn.ldap[0].ldapUrl=ldaps://my.domain.fr:636
>> #cas.authn.ldap[0].ldapUrl=ldap://my.domain.fr:389
>> #cas.authn.ldap[0].useSsl=false
>>
>> Did I make something wrong or ?
>>
>> Is there someone having the same problem or not ?
>>
>> After googling a bit it seems that could be a problem with ldaptive lib 
>> and jdk11... Any information about a such problem ?
>>
>> Thanks
>>
>> -- 
>>
>> Julien Gribonvald
>>
>> -- 
>> - Website: https://apereo.github.io/cas
>> - Gitter Chatroom: https://gitter.im/apereo/cas
>> - List Guidelines: https://goo.gl/1VRrw7
>> - Contributions: https://goo.gl/mh7qDG
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "CAS Community" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to cas-user+u...@apereo.org .
>> To view this discussion on the web visit 
>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/b098c57c-feb6-ecaa-88a0-579ca6bb963c%40recia.fr
>> .
>>
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/19893719-ec68-4348-8a46-ca48e4df4002%40apereo.org.

Re: [cas-user] CAS 6.1.x Ldaps configuration problem

[Julien Gribonvald]

Thanks a lot David.

This solved the problem and it solved me some hours !

Regards,

--Julien

Le 26/01/2019 à 16:40, David Gelhar a écrit :

Using Java8 probably isn't an option - CAS 6.x requires Java11

We have been able to work around the issue by using the UnboundID 
provider as suggested, with settings like this:


cas.properties :
cas.authn.ldap[0].providerClass=org.ldaptive.provider.unboundid.UnboundIDProvider

build.gradle:
// to use UnboundID ldap provider instead of JNDI
compile "com.unboundid:unboundid-ldapsdk:4.0.9"


On Friday, January 25, 2019 at 5:47:00 PM UTC-5, dfisher wrote:

This appears to be a bug in JNDI code that manifests with an NPE
in the ldaptive thread local code.
I've filed an issue, but there isn't a resolution yet.

Work arounds include:
* Use startTLS
* Use the UnboundID provider
* Use Java 8 (versions 9-12 are all affected)

--Daniel Fisher

On Fri, Jan 25, 2019 at 1:28 PM Julien Gribonvald
> wrote:

Hi,

I'm beginning a new CAS configuration with latest dev version
with the
overlay packaging and when configuring ldaps I'm having a such
error :

java.lang.NullPointerException: Thread local SslConfig has not
been set
 at

org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:53)

~[ldaptive-1.2.4.jar!/:?]

With no ssl conf I don't have any problems, here are my change
to move
on ssl use:

cas.authn.ldap[0].ldapUrl=ldaps://my.domain.fr:636

#cas.authn.ldap[0].ldapUrl=ldap://my.domain.fr:389

#cas.authn.ldap[0].useSsl=false

Did I make something wrong or ?

Is there someone having the same problem or not ?

After googling a bit it seems that could be a problem with
ldaptive lib
and jdk11... Any information about a such problem ?

Thanks

-- 


Julien Gribonvald

-- 
- Website: https://apereo.github.io/cas

- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the
Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from
it, send an email to cas-user+u...@apereo.org .
To view this discussion on the web visit

https://groups.google.com/a/apereo.org/d/msgid/cas-user/b098c57c-feb6-ecaa-88a0-579ca6bb963c%40recia.fr

.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google 
Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send 
an email to cas-user+unsubscr...@apereo.org 
.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/19893719-ec68-4348-8a46-ca48e4df4002%40apereo.org 
.

--
Julien Gribonvald

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/822f6e93-70c5-0d44-4314-2517be228676%40recia.fr.

Re: [cas-user] CAS 6.1.x Ldaps configuration problem

[Łukasz Woźniak]

Hello,

Help me too. Thanks!

Regards,

Łukasz

W dniu sobota, 26 stycznia 2019 16:40:59 UTC+1 użytkownik David Gelhar 
napisał:
>
> Using Java8 probably isn't an option - CAS 6.x requires Java11
>
> We have been able to work around the issue by using the UnboundID provider 
> as suggested, with settings like this:
>
> cas.properties :
> cas.authn.ldap[0].providerClass=
> org.ldaptive.provider.unboundid.UnboundIDProvider
>
> build.gradle:
> // to use UnboundID ldap provider instead of JNDI
> compile "com.unboundid:unboundid-ldapsdk:4.0.9"
>
>
> On Friday, January 25, 2019 at 5:47:00 PM UTC-5, dfisher wrote:
>>
>> This appears to be a bug in JNDI code that manifests with an NPE in the 
>> ldaptive thread local code.
>> I've filed an issue, but there isn't a resolution yet.
>>
>> Work arounds include:
>> * Use startTLS
>> * Use the UnboundID provider
>> * Use Java 8 (versions 9-12 are all affected)
>>
>> --Daniel Fisher
>>
>> On Fri, Jan 25, 2019 at 1:28 PM Julien Gribonvald  
>> wrote:
>>
>>> Hi,
>>>
>>> I'm beginning a new CAS configuration with latest dev version with the 
>>> overlay packaging and when configuring ldaps I'm having a such error :
>>>
>>> java.lang.NullPointerException: Thread local SslConfig has not been set
>>>  at 
>>> org.ldaptive.ssl.ThreadLocalTLSSocketFactory.getDefault(ThreadLocalTLSSocketFactory.java:53)
>>>  
>>>
>>> ~[ldaptive-1.2.4.jar!/:?]
>>>
>>> With no ssl conf I don't have any problems, here are my change to move 
>>> on ssl use:
>>>
>>> cas.authn.ldap[0].ldapUrl=ldaps://my.domain.fr:636
>>> #cas.authn.ldap[0].ldapUrl=ldap://my.domain.fr:389
>>> #cas.authn.ldap[0].useSsl=false
>>>
>>> Did I make something wrong or ?
>>>
>>> Is there someone having the same problem or not ?
>>>
>>> After googling a bit it seems that could be a problem with ldaptive lib 
>>> and jdk11... Any information about a such problem ?
>>>
>>> Thanks
>>>
>>> -- 
>>>
>>> Julien Gribonvald
>>>
>>> -- 
>>> - Website: https://apereo.github.io/cas
>>> - Gitter Chatroom: https://gitter.im/apereo/cas
>>> - List Guidelines: https://goo.gl/1VRrw7
>>> - Contributions: https://goo.gl/mh7qDG
>>> --- 
>>> You received this message because you are subscribed to the Google 
>>> Groups "CAS Community" group.
>>> To unsubscribe from this group and stop receiving emails from it, send 
>>> an email to cas-user+u...@apereo.org.
>>> To view this discussion on the web visit 
>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/b098c57c-feb6-ecaa-88a0-579ca6bb963c%40recia.fr
>>> .
>>>
>>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/030ddbd4-0b6a-4f65-9eab-c0c6b88938cb%40apereo.org.