Re: [cas-user] How and where to ask for help?

2015-10-02 Thread Skyler Sebastian Lindsey 
Thank you Carlos,


I believe you are correct. I think I have the default java runtime environment 
that comes with ubuntu. Did a java version check and doesn't look like there is 
any reference to an sdk version.


[cid:99ae6b96-bf3c-499d-89d9-fa566f014573]



From: Carlos M. Fernández 
Sent: Friday, October 2, 2015 10:32 AM
To: cas-user@lists.jasig.org
Subject: RE: [cas-user] How and where to ask for help?


Hi, Skyler,



It seems that you only have the OpenJDK JRE. You need to install the devel 
package to get tools.jar.



Best regards,

--

Carlos.

From: Skyler Sebastian Lindsey [mailto:linds...@emmanuel.edu]
Sent: Friday, 02 October, 2015 10:17
To: cas-user@lists.jasig.org
Subject: [cas-user] How and where to ask for help?



Hi,



I am new to CAS JASIG and setting up a CAS server right now but I am getting an 
error message. I posted a screenshot below but I want to find out if there is a 
thread or page I should go through to post correctly in case the error has 
already been solved.



Specifically I run "mvn package install" on my ubuntu server for Cas Web 
Application 4.0.0 but get a Build Failure indicating that artifact 
com.sun:tools:jar:1.5.0 isn't in the location. I checked the path given and it 
indeed was not in there. Not sure if mvn should build that file or not but I 
found a page that had a sample config for so I created it manually but that 
didn't work.



Does anyone know how to resolve the error I am seeing?



[X]



Thank you for your time.




--

You are currently subscribed to 
cas-user@lists.jasig.org as: 
cfern...@sju.edu

To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to cas-user@lists.jasig.org as: 
linds...@emmanuel.edu
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

RE: [cas-user] How and where to ask for help?

2015-10-02 Thread Carlos M. Fernández 
Skyler,



There’s no separate SDK version of Java, just an additional set of files.
In Ubuntu, you need to look for the package “openjdk-7-jdk” and install
it.



Best regards,

--

Carlos.

From: Skyler Sebastian Lindsey [mailto:linds...@emmanuel.edu]
Sent: Friday, 02 October, 2015 10:39
To: cas-user@lists.jasig.org
Subject: Re: [cas-user] How and where to ask for help?



Thank you Carlos,



I believe you are correct. I think I have the default java runtime
environment that comes with ubuntu. Did a java version check and doesn't
look like there is any reference to an sdk version.







  _

From: Carlos M. Fernández 
Sent: Friday, October 2, 2015 10:32 AM
To: cas-user@lists.jasig.org
Subject: RE: [cas-user] How and where to ask for help?



Hi, Skyler,



It seems that you only have the OpenJDK JRE. You need to install the devel
package to get tools.jar.



Best regards,

--

Carlos.

From: Skyler Sebastian Lindsey [mailto:linds...@emmanuel.edu]
Sent: Friday, 02 October, 2015 10:17
To: cas-user@lists.jasig.org
Subject: [cas-user] How and where to ask for help?



Hi,



I am new to CAS JASIG and setting up a CAS server right now but I am
getting an error message. I posted a screenshot below but I want to find
out if there is a thread or page I should go through to post correctly in
case the error has already been solved.



Specifically I run "mvn package install" on my ubuntu server for Cas Web
Application 4.0.0 but get a Build Failure indicating that artifact
com.sun:tools:jar:1.5.0 isn't in the location. I checked the path given
and it indeed was not in there. Not sure if mvn should build that file or
not but I found a page that had a sample config for so I created it
manually but that didn't work.



Does anyone know how to resolve the error I am seeing?







Thank you for your time.



--
You are currently subscribed to cas-user@lists.jasig.org as:
cfern...@sju.edu
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
--
You are currently subscribed to cas-user@lists.jasig.org as:
linds...@emmanuel.edu
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

--
You are currently subscribed to cas-user@lists.jasig.org as:
cfern...@sju.edu
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

[cas-user] Attributes Empty

2015-10-02 Thread Roger Spears 
Hello,

We are able to authenticate, but our attributes are empty.

With a successful login, our cas.log log is empty.  The catalina.out log
contains the following:
2015-10-02 13:14:06,324 DEBUG
[org.jasig.cas.adaptors.ldap.BindLdapAuthenticationHandler] - 
2015-10-02 13:14:06,329 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] -

2015-10-02 13:14:06,329 DEBUG
[org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver]
- 
2015-10-02 13:14:06,330 DEBUG
[org.jasig.cas.authentication.principal.UsernamePasswordCredentialsToPrincipalResolver]
- 
2015-10-02 13:14:06,330 DEBUG
[org.jasig.services.persondir.support.ldap.LdapPersonAttributeDao] -

2015-10-02 13:14:06,330 DEBUG
[org.jasig.services.persondir.support.ldap.LdapPersonAttributeDao] -

2015-10-02 13:14:06,337 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] - 
2015-10-02 13:14:06,337 INFO
[org.jasig.cas.authentication.AuthenticationManagerImpl] -

2015-10-02 13:14:06,337 DEBUG
[org.jasig.cas.authentication.AuthenticationManagerImpl] - 

I am able to pull the attributes out of LDAP using the command line of our
CAS box and a short python script.


Thanks,
Roger
-- 
Roger Spears
Northwest State Community College
22600 State Route 34
Archbold, Ohio  43502
P: 419-267-1304
F: 419-267-3891

***
This message and any attachment are confidential, intended solely for the
use of the individual or entity to whom it is addressed and may be
protected under FERPA ( http://www2.ed.gov/policy/gen/reg/ferpa/index.html
). If you have received it by mistake, or are not the named recipient(s),
please immediately notify the sender and delete the message. You are hereby
notified that any unauthorized use, copying or dissemination of any or all
information contained in this message is prohibited.  Northwest State
Community College and/or any part thereof shall not be liable for the
message if altered, falsified, or in case of error in the recipient.

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Re: [cas-user] Hazelcast failure!

2015-10-02 Thread Paul B. Henson 
On Fri, Sep 25, 2015 at 12:32:58AM +, Bryan Wooten wrote:

> I have never seen this before. Any ideas?
> 
> CAS 3.5.2 with MFA / Oracle JDK 1.8.

I've never had a hazelcast failure since we deployed. We're still
running JDK 1.7 though (the special Oracle support contract version).
There's nothing from hazelcast in your cas.log? When I was originally
testing failover and restarting nodes anytime something interesting
happened it would show up in the log, nodes coming/going etc. For
example, I just bounced a dev node, and the other nodes complained:

2015-10-02 16:46:41,038 INFO [com.hazelcast.nio.TcpIpConnection] - 
[epimetheus-dev]:5701 [dev] Connection [Add
ress[pandora-dev]:5701] lost. Reason: java.io.EOFException[Remote socket 
closed!]
2015-10-02 16:46:41,072 WARN [com.hazelcast.nio.ReadHandler] - 
[epimetheus-dev]:5701 [dev] hz._hzInstance_1_de
v.IO.thread-in-1 Closing socket to endpoint Address[pandora-dev]:5701, 
Cause:java.io.EOFException: Remote sock
et closed!
2015-10-02 16:46:41,132 INFO [com.hazelcast.nio.SocketConnector] - 
[epimetheus-dev]:5701 [dev] Connecting to p
andora-dev/134.71.246.6:5701, timeout: 0, bind-any: true
2015-10-02 16:46:42,140 INFO [com.hazelcast.nio.SocketConnector] - 
[epimetheus-dev]:5701 [dev] Could not conne
ct to: pandora-dev/134.71.246.6:5701. Reason: SocketException[Connection 
refused to address pandora-dev/134.71
.246.6:5701]
2015-10-02 16:46:43,109 INFO [com.hazelcast.nio.SocketConnector] - 
[epimetheus-dev]:5701 [dev] Connecting to pandora-dev/134.71.246.6:5701, 
timeout: 0, bind-any: true
2015-10-02 16:46:43,111 INFO [com.hazelcast.nio.SocketConnector] - 
[epimetheus-dev]:5701 [dev] Could not connect to: 
pandora-dev/134.71.246.6:5701. Reason: SocketException[Connection refused to 
address pandora-dev/134.71.246.6:5701]
2015-10-02 16:46:44,110 INFO [com.hazelcast.nio.SocketConnector] - 
[epimetheus-dev]:5701 [dev] Connecting to pandora-dev/134.71.246.6:5701, 
timeout: 0, bind-any: true
2015-10-02 16:46:44,111 INFO [com.hazelcast.nio.SocketConnector] - 
[epimetheus-dev]:5701 [dev] Could not connect to: 
pandora-dev/134.71.246.6:5701. Reason: SocketException[Connection refused to 
address pandora-dev/134.71.246.6:5701]
2015-10-02 16:46:44,111 WARN [com.hazelcast.nio.ConnectionMonitor] - 
[epimetheus-dev]:5701 [dev] Removing connection to endpoint 
Address[pandora-dev]:5701 Cause => java.net.SocketException {Connection refused 
to address pandora-dev/134.71.246.6:5701}, Error-Count: 5
2015-10-02 16:46:44,119 INFO [com.hazelcast.cluster.ClusterService] - 
[epimetheus-dev]:5701 [dev] Removing Member [pandora-dev]:5701
2015-10-02 16:46:44,168 INFO [com.hazelcast.cluster.ClusterService] - 
[epimetheus-dev]:5701 [dev] 

Members [2] {
Member [prometheus-dev]:5701
Member [epimetheus-dev]:5701 this
}

2015-10-02 16:46:49,440 INFO [com.hazelcast.nio.SocketAcceptor] - 
[epimetheus-dev]:5701 [dev] Accepting socket connection from /134.71.246.6:41256
2015-10-02 16:46:49,440 INFO [com.hazelcast.nio.TcpIpConnectionManager] - 
[epimetheus-dev]:5701 [dev] 5701 accepted socket connection from 
/134.71.246.6:41256
2015-10-02 16:46:55,530 INFO [com.hazelcast.cluster.ClusterService] - 
[epimetheus-dev]:5701 [dev] 

Members [3] {
Member [prometheus-dev]:5701
Member [epimetheus-dev]:5701 this
Member [pandora-dev]:5701
}

I would think there'd be something in your logs to explain the failure...

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  hen...@cpp.edu
California State Polytechnic University  |  Pomona CA 91768

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

RE: [cas-user] cas 3.5.2 catalina logs

2015-10-02 Thread Chris Cheltenham 
I thank you for your help Misagh,

However, what we have is that the SLO is not able to reach the web server 
apache session in /tmp/cas using mod_auth_cas.
I don't understand why it is saying the certificate for apahe is not valid.
I have it imported the CAS cert, same as the one in tomcat server.xml to the 
CACerts file.

The affect if the user session is still active until the apache /tmp/cas 
session is removed.
Unless the user completely close the browser, the session is still open.

We have a requirement that the user have to authenticate whenever they logout 
and it is not working unless you close the browser.

Does anyone know a way to fix that?

If the answer is turning SLO off, I do not see where you do that in this file:

/cas/cas-server-3.5.2.1/cas-server-core/src/main/java/org/jasig/cas/ticket/registry/support/DefaultTicketRegistryCleaner.java


From: Misagh Moayyed [mailto:mmoay...@unicon.net]
Sent: Wednesday, September 30, 2015 1:53 AM
To: cas-user@lists.jasig.org
Subject: RE: [cas-user] cas 3.5.2 catalina logs

You have an app at https://dcis.hhs.gov/main.php whose certificate is 
considered invalid, and your CAS has SLO turned on, and CAS is trying to send 
SLO notifications to the app, and it fails.

Reference: 
http://jasig.github.io/cas/4.1.x/installation/Troubleshooting-Guide.html#pkix-path-building-failed

From: Chris Cheltenham [mailto:cchelten...@swaintechs.com]
Sent: Tuesday, September 29, 2015 4:56 PM
To: cas-user@lists.jasig.org
Subject: [cas-user] cas 3.5.2 catalina logs

Hello,

I see this in my tomcat6 logs.

Does anyone know why something is trying to write back to main/php which does 
not live on this server?


2015-09-29 19:53:21,363 WARN [org.jasig.cas.util.HttpClient] - https://dcis.hhs.gov/main.php].
  Error is [sun.security.validator.ValidatorException: PKIX path building 
failed: sun.security.provider.certpath.SunCertPathBuilderExc
eption: unable to find valid certification path to requested target]>
root@acquisitions-reports1:/var/log/tomcat6 >
Thank You;

Chris Cheltenham
cchelten...@swaintechs.com
SwainTechs
10 Walnut Grove Rd
Suite 110
Horsham, PA
19044

888-905-5767 / X407





--

You are currently subscribed to 
cas-user@lists.jasig.org as: 
mmoay...@unicon.net

To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user



--

You are currently subscribed to 
cas-user@lists.jasig.org as: 
cchelten...@swaintechs.com

To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user