RE: [cas-user] I am lost... And in desperate need of help
Thanks Marv, This issue has been fixed, the load balancer guy did something… I am not sure what. But now I am back to my registry replication problem. I see this in my logs: 2015-03-03 07:35:27,937 DEBUG [net.sf.ehcache.util.PropertyUtil] - Value found for peerDiscovery: manual 2015-03-03 07:35:27,937 DEBUG [net.sf.ehcache.util.PropertyUtil] - Value found for rmiUrls: //cas -dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket|//cas-dev2.acs.utah.edu:40001/org.jas ig.cas.ticket.TicketGrantingTicket But then later: 2015-03-03 07:35:28,003 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerListener] - 0 RMICachePeers bound in registry for RMI listener And: 2015-03-03 07:35:28,655 DEBUG [net.sf.ehcache.distribution.RMIBootstrapCacheLoader] - Attempting to acquire cache peers for cache org.jasig.cas.ticket.ServiceTicket to bootstrap from. Will wait up to 0ms for cache to join cluster. 2015-03-03 07:35:28,656 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerListener] - 0 RMICachePeers bound in registry for RMI listener 2015-03-03 07:35:28,658 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerProvider] - Lookup URL //cas-dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket 2015-03-03 07:35:28,658 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerProvider] - Lookup URL //cas-dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket 2015-03-03 07:35:28,703 DEBUG [net.sf.ehcache.distribution.ManualRMICacheManagerPeerProvider] - Looking up rmiUrl //cas-dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket through exception org.jasig.cas.ticket.ServiceTicket. This may be normal if a node has gone offline. Or it may indicate network connectivity difficulties java.rmi.NotBoundException: org.jasig.cas.ticket.ServiceTicket at sun.rmi.registry.RegistryImpl.lookup(RegistryImpl.java:136) at sun.rmi.registry.RegistryImpl_Skel.dispatch(Unknown Source) I can successfully telnet from cas-dev1 (where this log trace is from) to cas-dev2 port 40001. The “Will wait up to 0ms” concerns me I guess. So I am back to being lost. I will also try a Hazelcast configuration. -Bryan From: Marvin Addison [mailto:marvin.addi...@gmail.com] Sent: Monday, March 02, 2015 12:51 PM To: cas-user@lists.jasig.org Subject: Re: [cas-user] I am lost... And in desperate need of help With Prod 3.4.12 and MFA, don’t get the successful login page. I get “page not found” in the browser. Turn the org.jasig.casup to DEBUG and post (sanitized) logs corresponding to the 404 error you mentioned. The error goes away if I take one of the 2 CAS servers offline. Did you ever solve your ticket registry replication problems? I wouldn't think that a ticket not found error would cause authentication problems, but this sure sounds like some kind of HA config problem. M -- You are currently subscribed to cas-user@lists.jasig.orgmailto:cas-user@lists.jasig.org as: bwoo...@acs.utah.edumailto:bwoo...@acs.utah.edu To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Re: [cas-user] I am lost... And in desperate need of help
Bryan, welcome to the club of the happy Hazelcast users! ;-) Cheers, D. On Mar 3, 2015, at 11:24 AM, Bryan Wooten bryan.woo...@utah.edu wrote: I closing this issue down. I got everything to work with Hazelcast. So goodbye ehcache… It just isn’t worth trying figure out what is wrong with it. Thanks, Bryan From: Bryan Wooten [mailto:bryan.woo...@utah.edu mailto:bryan.woo...@utah.edu] Sent: Tuesday, March 03, 2015 8:21 AM To: cas-user@lists.jasig.org mailto:cas-user@lists.jasig.org Subject: RE: [cas-user] I am lost... And in desperate need of help Thanks Marv, This issue has been fixed, the load balancer guy did something… I am not sure what. But now I am back to my registry replication problem. I see this in my logs: 2015-03-03 07:35:27,937 DEBUG [net.sf.ehcache.util.PropertyUtil] - Value found for peerDiscovery: manual 2015-03-03 07:35:27,937 DEBUG [net.sf.ehcache.util.PropertyUtil] - Value found for rmiUrls: //cas -dev2.acs.utah.edu http://dev2.acs.utah.edu/:40001/org.jasig.cas.ticket.ServiceTicket|//cas-dev2.acs.utah.edu http://cas-dev2.acs.utah.edu/:40001/org.jas ig.cas.ticket.TicketGrantingTicket But then later: 2015-03-03 07:35:28,003 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerListener] - 0 RMICachePeers bound in registry for RMI listener And: 2015-03-03 07:35:28,655 DEBUG [net.sf.ehcache.distribution.RMIBootstrapCacheLoader] - Attempting to acquire cache peers for cache org.jasig.cas.ticket.ServiceTicket to bootstrap from. Will wait up to 0ms for cache to join cluster. 2015-03-03 07:35:28,656 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerListener] - 0 RMICachePeers bound in registry for RMI listener 2015-03-03 07:35:28,658 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerProvider] - Lookup URL //cas-dev2.acs.utah.edu http://cas-dev2.acs.utah.edu/:40001/org.jasig.cas.ticket.ServiceTicket 2015-03-03 07:35:28,658 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerProvider] - Lookup URL //cas-dev2.acs.utah.edu http://cas-dev2.acs.utah.edu/:40001/org.jasig.cas.ticket.ServiceTicket 2015-03-03 07:35:28,703 DEBUG [net.sf.ehcache.distribution.ManualRMICacheManagerPeerProvider] - Looking up rmiUrl //cas-dev2.acs.utah.edu http://cas-dev2.acs.utah.edu/:40001/org.jasig.cas.ticket.ServiceTicket through exception org.jasig.cas.ticket.ServiceTicket. This may be normal if a node has gone offline. Or it may indicate network connectivity difficulties java.rmi.NotBoundException: org.jasig.cas.ticket.ServiceTicket at sun.rmi.registry.RegistryImpl.lookup(RegistryImpl.java:136) at sun.rmi.registry.RegistryImpl_Skel.dispatch(Unknown Source) I can successfully telnet from cas-dev1 (where this log trace is from) to cas-dev2 port 40001. The “Will wait up to 0ms” concerns me I guess. So I am back to being lost. I will also try a Hazelcast configuration. -Bryan From: Marvin Addison [mailto:marvin.addi...@gmail.com mailto:marvin.addi...@gmail.com] Sent: Monday, March 02, 2015 12:51 PM To: cas-user@lists.jasig.org mailto:cas-user@lists.jasig.org Subject: Re: [cas-user] I am lost... And in desperate need of help With Prod 3.4.12 and MFA, don’t get the successful login page. I get “page not found” in the browser. Turn the org.jasig.casup to DEBUG and post (sanitized) logs corresponding to the 404 error you mentioned. The error goes away if I take one of the 2 CAS servers offline. Did you ever solve your ticket registry replication problems? I wouldn't think that a ticket not found error would cause authentication problems, but this sure sounds like some kind of HA config problem. M -- You are currently subscribed to cas-user@lists.jasig.org mailto:cas-user@lists.jasig.org as: bwoo...@acs.utah.edu mailto:bwoo...@acs.utah.edu To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to cas-user@lists.jasig.org mailto:cas-user@lists.jasig.org as: bryan.woo...@utah.edu mailto:bryan.woo...@utah.edu To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to cas-user@lists.jasig.org mailto:cas-user@lists.jasig.org as: dkopyle...@unicon.net mailto:dkopyle...@unicon.net To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
RE: [cas-user] I am lost... And in desperate need of help
I closing this issue down. I got everything to work with Hazelcast. So goodbye ehcache… It just isn’t worth trying figure out what is wrong with it. Thanks, Bryan From: Bryan Wooten [mailto:bryan.woo...@utah.edu] Sent: Tuesday, March 03, 2015 8:21 AM To: cas-user@lists.jasig.org Subject: RE: [cas-user] I am lost... And in desperate need of help Thanks Marv, This issue has been fixed, the load balancer guy did something… I am not sure what. But now I am back to my registry replication problem. I see this in my logs: 2015-03-03 07:35:27,937 DEBUG [net.sf.ehcache.util.PropertyUtil] - Value found for peerDiscovery: manual 2015-03-03 07:35:27,937 DEBUG [net.sf.ehcache.util.PropertyUtil] - Value found for rmiUrls: //cas -dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket|//cas-dev2.acs.utah.edu:40001/org.jas ig.cas.ticket.TicketGrantingTicket But then later: 2015-03-03 07:35:28,003 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerListener] - 0 RMICachePeers bound in registry for RMI listener And: 2015-03-03 07:35:28,655 DEBUG [net.sf.ehcache.distribution.RMIBootstrapCacheLoader] - Attempting to acquire cache peers for cache org.jasig.cas.ticket.ServiceTicket to bootstrap from. Will wait up to 0ms for cache to join cluster. 2015-03-03 07:35:28,656 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerListener] - 0 RMICachePeers bound in registry for RMI listener 2015-03-03 07:35:28,658 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerProvider] - Lookup URL //cas-dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket 2015-03-03 07:35:28,658 DEBUG [net.sf.ehcache.distribution.RMICacheManagerPeerProvider] - Lookup URL //cas-dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket 2015-03-03 07:35:28,703 DEBUG [net.sf.ehcache.distribution.ManualRMICacheManagerPeerProvider] - Looking up rmiUrl //cas-dev2.acs.utah.edu:40001/org.jasig.cas.ticket.ServiceTicket through exception org.jasig.cas.ticket.ServiceTicket. This may be normal if a node has gone offline. Or it may indicate network connectivity difficulties java.rmi.NotBoundException: org.jasig.cas.ticket.ServiceTicket at sun.rmi.registry.RegistryImpl.lookup(RegistryImpl.java:136) at sun.rmi.registry.RegistryImpl_Skel.dispatch(Unknown Source) I can successfully telnet from cas-dev1 (where this log trace is from) to cas-dev2 port 40001. The “Will wait up to 0ms” concerns me I guess. So I am back to being lost. I will also try a Hazelcast configuration. -Bryan From: Marvin Addison [mailto:marvin.addi...@gmail.com] Sent: Monday, March 02, 2015 12:51 PM To: cas-user@lists.jasig.orgmailto:cas-user@lists.jasig.org Subject: Re: [cas-user] I am lost... And in desperate need of help With Prod 3.4.12 and MFA, don’t get the successful login page. I get “page not found” in the browser. Turn the org.jasig.casup to DEBUG and post (sanitized) logs corresponding to the 404 error you mentioned. The error goes away if I take one of the 2 CAS servers offline. Did you ever solve your ticket registry replication problems? I wouldn't think that a ticket not found error would cause authentication problems, but this sure sounds like some kind of HA config problem. M -- You are currently subscribed to cas-user@lists.jasig.orgmailto:cas-user@lists.jasig.org as: bwoo...@acs.utah.edumailto:bwoo...@acs.utah.edu To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to cas-user@lists.jasig.orgmailto:cas-user@lists.jasig.org as: bryan.woo...@utah.edumailto:bryan.woo...@utah.edu To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
[cas-user] I am lost... And in desperate need of help
So here is the deal, in our Dev environment we front CAS with Citrix Netscalar, load balanced between 2 CAS servers. I have 3 versions of CAS I can run, our current Prod 3.4.12 version, a 3.5.2 version and a CAS-MFA M6 version. The Prod version is currently running in Prod has 2 servers and they run behind an ancient Sun Appserv software load balancer. So doing a simple cas/login (no service URL) works for the 3.5.2 version. I get the successful login page. With Prod 3.4.12 and MFA, don't get the successful login page. I get page not found in the browser. The error goes away if I take one of the 2 CAS servers offline. Anyway all 3 use the same cas.properties files and all the files in /etc/cas. (ehcache, etc) So I need to figure out what the diffs are. Currently I think something is going on with either web-flow.xml or something called ${requestScope.redirect.url} but I don't know and can figure out where that property comes from. Thanks, Bryan Wooten UIT-Common Infrastructure Systems Work: 801.585.9323 Cell: 801.414.3593 -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
Re: [cas-user] I am lost... And in desperate need of help
With Prod 3.4.12 and MFA, don’t get the successful login page. I get “page not found” in the browser. Turn the org.jasig.casup to DEBUG and post (sanitized) logs corresponding to the 404 error you mentioned. The error goes away if I take one of the 2 CAS servers offline. Did you ever solve your ticket registry replication problems? I wouldn't think that a ticket not found error would cause authentication problems, but this sure sounds like some kind of HA config problem. M -- You are currently subscribed to cas-user@lists.jasig.org as: arch...@mail-archive.com To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user