Re: [cas-user] login with valid service but not getting ticket query parameter on redirect

2023-08-09 Thread Ray Bon
Pablo, There are a number of maps associated with the web flow. You can put to one of the maps, if needed. From your action class you can see their contents: // authn attributes contains encrypted credential // LOGGER.debug("auth attribs Map: " +

Re: [cas-user] login with valid service but not getting ticket query parameter on redirect

2023-08-09 Thread Pablo Vidaurri
It looks like I'm losing the request scope, or at least the service ticket: 2023-08-08 15:25:26,057 DEBUG [org.apereo.cas.web.flow.GenerateServiceTicketAction] - https://localhost:8443] and added it to the request scope> 2023-08-08 15:25:26,057 DEBUG [org.apereo.cas.web.flow.MyCustomAction] -

Re: [cas-user] Re: Is Azure AD B2C Supported in CAS 6.6.8?

2023-08-09 Thread Ray Bon
Pablo, This logger may help: Ray On Wed, 2023-08-09 at 12:12 -0700, Pablo Vidaurri wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. Still having an issue. Trying to figure out if it's a

Re: [cas-user] login with valid service but not getting ticket query parameter on redirect

2023-08-09 Thread Pablo Vidaurri
Hi Ray, looks to be a self inflicted issue. We have a custom login webflow and have injected as view between generateServiceTicket and Redirect action/view states. When I disable this custom step all works fine. I haven't been able to trace my issue but it is my issue. -psv On Thursday,

[cas-user] Re: Is Azure AD B2C Supported in CAS 6.6.8?

2023-08-09 Thread Pablo Vidaurri
Still having an issue. Trying to figure out if it's a config issue on CAS side or a setup issue on Azure AD side. We are spinning up a new instance of Azure AD B2C. I was given an endpoint with an example payload to use to verify user credentials. Using postman, that api works. But it does not

[cas-user] Re: Herokuapp Cas Initializr is DOWN for few days...

2023-08-09 Thread Julien Weillaert
For information, I try to run with docker my own instance of initializr (tag 0.0.48), but same problem. So it seems to be a code issue in the last version of initializr, the error on server side is always a dependencies not found : 023-08-09T09:55:22.562Z WARN 1 --- [nio-8080-exec-6]

[cas-user] Re: Herokuapp Cas Initializr is DOWN for few days...

2023-08-09 Thread Julien Weillaert
It seems to have been fixed. But I don't understand any of this. Why If I run the docker app myself I only have the last version (7.0.0) available, and on Herokuapp there is also the 6.6.10 for example ? Why and I run the docker app myself, I never had the dependencies available (any of them),

Re: [cas-user] Radius -MFA in cas 6.6.8

2023-08-09 Thread Ray Bon
Vikash, Is it possible there is a network issue? Ray On Tue, 2023-08-08 at 17:20 +0530, Vikash Chandra Ansh wrote: Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information. Hi Everyone, We are trying to

Re: [cas-user] SCIM configuration and I get an error "Using SCIM provisioning target [null]"

2023-08-09 Thread Ray Bon
Jakub, This link, https://apereo.github.io/cas/6.6.x/integration/Delegate-Authentication-Provisioning.html#scim-provisioner, leads to, https://apereo.github.io/cas/6.6.x/integration/SCIM-Integration.html, which lists a required field (among others): cas.scim.target Ray On Mon, 2023-08-07 at

Re: [cas-user] shib-cas-authenticator, proxy tickets, and third-party services

2023-08-09 Thread Ray Bon
Janemarie, Re proxy tickets. The user would not interact with service 2, just with service 1. Service 1 can make make calls to service 2 for data, etc.; or service 1 could screen scrape service 2, or some other mechanism, to make it look like the user is accessing service 2. But the user only

[cas-user] CAS 6.6.x - deadlock detected during the tomcat start

2023-08-09 Thread Milan Siebenbürger
Hi, since the update from 6.5.x to 6.6.x we have been dealing with a deadlock problem. The reason is that com.zaxxer.hikari.pool.ProxyLeakTask sometimes tries to log a Warning about database pool leakage (when tomcat starts), but this log is passed through code to