ldap error cas 5.2

Cheltenham, Chris

unread,

Feb 6, 2018, 1:45:09 PM2/6/18

to cas-...@apereo.org

Hello,

I am getting this error in my logs loggin in via LDAP.

2018-02-06 13:40:52,503 ERROR [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <Authentication has failed. Credentials may be incorrect or CAS cannot find authentication handler that supports [cheltenham-ext] of type [UsernamePasswordCredential].>

2018-02-06 13:40:52,504 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN

=============================================================

WHO: cheltenham-ext

WHAT: Supplied credentials: [cheltenham-ext]

ACTION: AUTHENTICATION_SUCCESS

APPLICATION: CAS

WHEN: Tue Feb 06 13:40:52 EST 2018

CLIENT IP ADDRESS: 10.32.32.218

SERVER IP ADDRESS: 170.235.1.71

=============================================================

It’s odd , it says AUTHENTICATION _SUCCESS but it does not appear to work.

Here is the LDAP properties in cas.properties.

# LDAP connector

cas.authn.accept.users=

cas.authn.ldap[0].useSsl=true

cas.authn.ldap[0].useStartTls=false

cas.authn.ldap[0].ldapUrl=ldaps://devldapm-mgmt.philasd.net

cas.authn.ldap[0].dnFormat=

cas.authn.ldap[0].baseDn=dc=philasd,dc=org

cas.authn.ldap[0].connectTimeout=5000

cas.authn.ldap[0].principalAttributeId=casauth

cas.authn.ldap[0].principalAttributePassword=xxxxxxxxxxxxxx

cas.authn.ldap[0].minPoolSize=3

cas.authn.ldap[0].maxPoolSize=10

cas.authn.ldap[0].validateOnCheckout=true

cas.authn.ldap[0].validatePeriodically=true

cas.authn.ldap[0].validatePeriod=600

cas.authn.ldap[0].failFast=true

cas.authn.ldap[0].idleTime=5000

cas.authn.ldap[0].prunePeriod=5000

cas.authn.ldap[0].blockWaitTime=5000

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

image001.gif

Man H

unread,

Feb 6, 2018, 4:55:12 PM2/6/18

to cas-...@apereo.org

Do you have ldap support dependency?

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

Cheltenham, Chris

unread,

Feb 7, 2018, 8:05:51 AM2/7/18

to cas-...@apereo.org

Yes I do.

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

--

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com.

image001.gif

Man H

unread,

Feb 7, 2018, 8:32:22 AM2/7/18

to cas-...@apereo.org

Could you attach start up log with debug set

--

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com.

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/004701d3a014%245a1fa610%240e5ef230%24%40philasd.org.

Cheltenham, Chris

unread,

Feb 7, 2018, 9:48:17 AM2/7/18

to cas-...@apereo.org

Man,

First I would like to thank you for taking the time to help.

How do I set the logs in debug mode?

Do I globally change info to debug in the log4j2.xml?

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/004701d3a014%245a1fa610%240e5ef230%24%40philasd.org.

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midgZCZaj%2B%3D9oUbEiH96VUpwA1_H50j9XBHC4DW%2BaETw7Q%40mail.gmail.com.

image001.gif

Cheltenham, Chris

unread,

Feb 7, 2018, 9:51:35 AM2/7/18

to cas-...@apereo.org

Does this help?

[root@devcas5 logs]# cat catalina.out | grep -i debug | grep -i ccheltenham

2018-02-07 09:50:32,421 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Examining credential [ccheltenham-ext] eligibility for authentication handler [AcceptUsersAuthenticationHandler]>

2018-02-07 09:50:32,422 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Credential [ccheltenham-ext] eligibility is [AcceptUsersAuthenticationHandler] for authentication handler [true]>

2018-02-07 09:50:32,423 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Attempting to encode credential password via [org.springframework.security.crypto.password.NoOpPasswordEncoder] for [ccheltenham-ext]>

2018-02-07 09:50:32,423 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Attempting authentication internally for transformed credential [ccheltenham-ext]>

2018-02-07 09:50:32,424 DEBUG [org.apereo.cas.authentication.AcceptUsersAuthenticationHandler] - <[ccheltenham-ext] was not found in the map.>

2018-02-07 09:50:32,424 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <[AcceptUsersAuthenticationHandler] exception details: [ccheltenham-ext not found in backing map.].>

2018-02-07 09:50:35,202 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Examining credential [ccheltenham-ext] eligibility for authentication handler [AcceptUsersAuthenticationHandler]>

2018-02-07 09:50:35,202 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Credential [ccheltenham-ext] eligibility is [AcceptUsersAuthenticationHandler] for authentication handler [true]>

2018-02-07 09:50:35,203 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Attempting to encode credential password via [org.springframework.security.crypto.password.NoOpPasswordEncoder] for [ccheltenham-ext]>

2018-02-07 09:50:35,203 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Attempting authentication internally for transformed credential [ccheltenham-ext]>

2018-02-07 09:50:35,203 DEBUG [org.apereo.cas.authentication.AcceptUsersAuthenticationHandler] - <[ccheltenham-ext] was not found in the map.>

2018-02-07 09:50:35,212 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <[AcceptUsersAuthenticationHandler] exception details: [ccheltenham-ext not found in backing map.].>

2018-02-07 09:50:36,391 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Examining credential [ccheltenham-ext] eligibility for authentication handler [AcceptUsersAuthenticationHandler]>

2018-02-07 09:50:36,391 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Credential [ccheltenham-ext] eligibility is [AcceptUsersAuthenticationHandler] for authentication handler [true]>

2018-02-07 09:50:36,392 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Attempting to encode credential password via [org.springframework.security.crypto.password.NoOpPasswordEncoder] for [ccheltenham-ext]>

2018-02-07 09:50:36,392 DEBUG [org.apereo.cas.authentication.handler.support.AbstractUsernamePasswordAuthenticationHandler] - <Attempting authentication internally for transformed credential [ccheltenham-ext]>

2018-02-07 09:50:36,392 DEBUG [org.apereo.cas.authentication.AcceptUsersAuthenticationHandler] - <[ccheltenham-ext] was not found in the map.>

2018-02-07 09:50:36,393 DEBUG [org.apereo.cas.authentication.PolicyBasedAuthenticationManager] - <[AcceptUsersAuthenticationHandler] exception details: [ccheltenham-ext not found in backing map.].>

[root@devcas5 logs]#

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

From: cas-...@apereo.org [mailto:cas-...@apereo.org] On Behalf Of Man H

Sent: Wednesday, February 7, 2018 8:32 AM

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/004701d3a014%245a1fa610%240e5ef230%24%40philasd.org.

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midgZCZaj%2B%3D9oUbEiH96VUpwA1_H50j9XBHC4DW%2BaETw7Q%40mail.gmail.com.

image001.gif

Cheltenham, Chris

unread,

Feb 7, 2018, 10:13:19 AM2/7/18

to cas-...@apereo.org

Man,

The question you asked is actually no clear to me.

How do I know the ldap support was loaded during the build.

It IS in the pom.xml but how can a verify its in there?

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

From: cas-...@apereo.org [mailto:cas-...@apereo.org] On Behalf Of Man H

Sent: Tuesday, February 6, 2018 4:55 PM
To: cas-...@apereo.org
Subject: Re: [cas-user] ldap error cas 5.2

Do you have ldap support dependency?

--

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com.

image001.gif

Cheltenham, Chris

unread,

Feb 7, 2018, 10:14:57 AM2/7/18

to cas-...@apereo.org

Man,

Let me be a bit cleaere.

How do I know the ldap dependency was incorporated into the cas.war file during after the build?

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00d901d3a026%242a9b2b50%247fd181f0%24%40philasd.org.

image001.gif

Man H

unread,

Feb 7, 2018, 10:49:27 AM2/7/18

to cas-...@apereo.org

# Control log levels via properties
logging.level.org.apereo.cas=debug

In cas startup you can see where properties are fetched from log like this.

\_\ /_/

CAS Version: 5.2.2
CAS Commit Id: eefb26e6ea0f3f0505ea7dcfc7e11c4ebcb44b7d
CAS Build Date/Time: 2018-01-31T19:13:42Z
Spring Boot Version: 1.5.8.RELEASE
------------------------------------------------------------
Java Home: /usr/local/jdk1.8.0_152/jre
Java Vendor: Oracle Corporation
Java Version: 1.8.0_152
JVM Free Memory: 560 MB
JVM Maximum Memory: 1 GB
JVM Total Memory: 928 MB
JCE Installed: No
------------------------------------------------------------
OS Architecture: amd64
OS Name: Linux
OS Version: 4.13.0-32-generic
OS Date/Time: 2018-02-07T12:30:44.726
OS Temp Directory: /usr/local/apache-tomcat-8.5.23-cas5/temp
------------------------------------------------------------

2018-02-07 12:30:44,791 INFO [org.apereo.cas.configuration.config.CasCoreBootstrapStandaloneConfiguration] - <Configuration files found at [/etc/cas/config] are [[/etc/cas/config/cas.properties]]>
2018-02-07 12:30:44,825 INFO [org.apereo.cas.configuration.config.CasCoreBootstrapStandaloneConfiguration] - <Found and loaded [188] setting(s) from [/etc/cas/config]>
2018-02-07 12:30:44,826 INFO [org.springframework.cloud.bootstrap.config.PropertySourceBootstrapConfiguration] - <Located property source: PropertiesPropertySource {name='standaloneCasConfigService'}>
2018-02-07 12:30:44,920 INFO [org.apereo.cas.web.CasWebApplicationServletInitializer] - <The following profiles are active: standalone>

--

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00d901d3a026%242a9b2b50%247fd181f0%24%40philasd.org.

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00e901d3a026%2464ad8090%242e0881b0%24%40philasd.org.

Cheltenham, Chris

unread,

Feb 7, 2018, 11:00:30 AM2/7/18

to cas-...@apereo.org

Man,

I may have found the issue.

I cannot connect to LDAP servers via 636 but I can 389.

Therefore, am looking into importing the certs in the proper places.

Hopefully that is my issue.

But thanks for your help

--

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00c201d39f7a%249aea9e10%24d0bfda30%24%40philasd.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midn4n%3D%2BV7_2qQPMyK28gFmUGDYq48bj5OCy4BEW-RDH_w%40mail.gmail.com.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00d901d3a026%242a9b2b50%247fd181f0%24%40philasd.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00e901d3a026%2464ad8090%242e0881b0%24%40philasd.org.

--

- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5mifXrudMM96ykemtGDWv10iwbrYEr1%2BcJW3UhyPkzjcLnA%40mail.gmail.com.

image001.gif

Cheltenham, Chris

unread,

Feb 7, 2018, 3:30:42 PM2/7/18

to cas-...@apereo.org

Man,

I was able to fix the ldap issue.

It was a faulty ldap.conf client configuration.

I have the cs.properties file set to debug

I have some logging data –

[root@devcas5 logs]# cat catalina.out | grep -i error

2018-02-07 15:26:24,308 INFO [org.springframework.boot.web.servlet.FilterRegistrationBean] - <Mapping filter: 'errorPageFilter' to: [/*]>

2018-02-07 15:26:30,644 INFO [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] - <Mapped "{[/error],produces=[text/html]}" onto public org.springframework.web.servlet.ModelAndView org.springframework.boot.autoconfigure.web.BasicErrorController.errorHtml(javax.servlet.http.HttpServletRequest,javax.servlet.http.HttpServletResponse)>

2018-02-07 15:26:30,646 INFO [org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerMapping] - <Mapped "{[/error]}" onto public org.springframework.http.ResponseEntity<java.util.Map<java.lang.String, java.lang.Object>> org.springframework.boot.autoconfigure.web.BasicErrorController.error(javax.servlet.http.HttpServletRequest)>

2018-02-07 15:27:33,591 INFO [org.springframework.web.socket.config.WebSocketMessageBrokerStats] - <WebSocketSession[0 current WS(0)-HttpStream(0)-HttpPoll(0), 0 total, 0 closed abnormally (0 connect failure, 0 send limit, 0 transport error)], stompSubProtocol[processed CONNECT(0)-CONNECTED(0)-DISCONNECT(0)], stompBrokerRelay[null], inboundChannel[pool size = 0, active threads = 0, queued tasks = 0, completed tasks = 0], outboundChannelpool size = 0, active threads = 0, queued tasks = 0, completed tasks = 0], sockJsScheduler[pool size = 2, active threads = 1, queued tasks = 3, completed tasks = 27]>

[root@devcas5 logs]# cat catalina.out | grep -i debug

07-Feb-2018 15:25:45.320 INFO [localhost-startStop-1] org.apache.jasper.servlet.TldScanner.scanJars At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.

2018-02-07 15:26:24,941 DEBUG [org.apereo.cas.config.CasCoreAuthenticationConfiguration] - <Configuring authentication execution plan [CasCoreAuthenticationHandlersConfiguration]>

2018-02-07 15:26:24,947 DEBUG [org.apereo.cas.config.CasCoreAuthenticationConfiguration] - <Configuring authentication execution plan [CasCoreAuthenticationHandlersConfiguration]>

2018-02-07 15:26:24,969 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Registering handler [HttpBasedServiceCredentialsAuthenticationHandler] principal resolver [org.apereo.cas.authentication.principal.resolvers.ProxyingPrincipalResolver@50ffe03d[]] into the execution plan>

2018-02-07 15:26:24,979 DEBUG [org.apereo.cas.config.CasCoreAuthenticationConfiguration] - <Configuring authentication execution plan [CasCoreAuthenticationMetadataConfiguration]>

2018-02-07 15:26:24,989 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Registering metadata populator [org.apereo.cas.authentication.metadata.SuccessfulHandlerMetaDataPopulator@3623dcab[order=-2147483648]] into the execution plan>

2018-02-07 15:26:24,997 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Registering metadata populator [org.apereo.cas.authentication.metadata.RememberMeAuthenticationMetaDataPopulator@6bb56375[order=-2147483648]] into the execution plan>

2018-02-07 15:26:25,004 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Registering metadata populator [org.apereo.cas.authentication.metadata.AuthenticationCredentialTypeMetaDataPopulator@67d5898d[order=-2147483648]] into the execution plan>

2018-02-07 15:26:25,004 DEBUG [org.apereo.cas.config.CasCoreAuthenticationConfiguration] - <Configuring authentication execution plan [AcceptUsersAuthenticationEventExecutionPlanConfiguration]>

2018-02-07 15:26:25,018 DEBUG [org.apereo.cas.authentication.support.password.PasswordEncoderUtils] - <No password encoder shall be created given the requested encoder type [NONE]>

2018-02-07 15:26:25,130 DEBUG [org.apereo.cas.config.CasPersonDirectoryConfiguration] - <Final list of attribute repositories is [[]]>

2018-02-07 15:26:25,132 DEBUG [org.apereo.cas.config.CasCoreAuthenticationPrincipalConfiguration] - <Attribute repository sources are not available for principal resolution so principal resolver will echo back the principal resolved during authentication directly.>

2018-02-07 15:26:25,038 DEBUG [org.apereo.cas.authentication.DefaultAuthenticationEventExecutionPlan] - <Final list of attribute repositories is [[]]org.apereo.cas.authentication.principal.resolvers.ChainingPrincipalResolver@25737659[chain=[org.apereo.cas.authentication.principal.resolvers.EchoingPrincipalResolver@31da9ee5[]]]] into the execution plan>

2018-02-07 15:26:26,341 DEBUG [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Ticket-granting ticket expiration policy is based on hard/idle timeouts of [28800]/[7200] seconds>

2018-02-07 15:26:26,482 DEBUG [org.apereo.cas.config.CasCoreConfiguration] - <Configuring authentication request service selection strategy plan [CasCoreAuthenticationServiceSelectionStrategyConfiguration]>

2018-02-07 15:26:26,878 DEBUG [org.apereo.cas.monitor.config.CasCoreMonitorConfiguration] - <Configured memory monitor with free-memory threshold [10]>

2018-02-07 15:26:26,879 DEBUG [org.apereo.cas.monitor.config.CasCoreMonitorConfiguration] - <Configured session monitor with service ticket threshold [5000] and session threshold [10000]>

2018-02-07 15:26:27,199 DEBUG [org.apereo.cas.web.report.util.ControllerUtils] - <Located logging configuration reference in the environment as [file:/etc/cas/log4j2.xml]>

2018-02-07 15:26:27,204 DEBUG [org.apereo.cas.web.report.util.ControllerUtils] - <Loaded logging configuration resource [URL [file:/etc/cas/log4j2.xml]]. Initializing logger context...>

2018-02-07 15:26:38,419 DEBUG [org.apereo.cas.services.AbstractServicesManager] - <Loading services from [InMemoryServiceRegistry]>

2018-02-07 15:26:38,495 DEBUG [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Protocol tickets generated by CAS are not signed/encrypted.>

2018-02-07 15:26:38,619 DEBUG [org.apereo.cas.services.ServiceRegistryInitializer] - <Service registry contains [0] service definitions>

2018-02-07 15:26:38,717 DEBUG [org.apereo.cas.pm.config.PasswordManagementConfiguration] - <Password management is disabled. To enable the password management functionality, add 'cas.authn.pm.enabled=true' to the CAS configuration and then configure storage options for account updates>

2018-02-07 15:26:38,811 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Initializing CAS webflow configuration...>

2018-02-07 15:26:38,811 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casAuthenticationBlockedView]>

2018-02-07 15:26:38,812 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casBadWorkstationView]>

2018-02-07 15:26:38,812 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casBadHoursView]>

2018-02-07 15:26:38,812 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casAccountLockedView]>

2018-02-07 15:26:38,812 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casAccountDisabledView]>

2018-02-07 15:26:38,812 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casPasswordUpdateSuccess]>

2018-02-07 15:26:38,812 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casExpiredPassView]>

2018-02-07 15:26:38,812 DEBUG [org.apereo.cas.web.flow.configurer.AbstractCasWebflowConfigurer] - <Added view state [casMustChangePassView]>

2018-02-07 15:26:38,833 DEBUG [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Located encryption key to use for [Ticket-granting Cookie]>

2018-02-07 15:26:38,833 DEBUG [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Creating encryption key instance based on provided secret key>

2018-02-07 15:26:38,844 DEBUG [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Initialized cipher encryption sequence via content encryption [A128CBC-HS256] and algorithm [dir]>

2018-02-07 15:26:38,844 DEBUG [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Located signing key to use for [Ticket-granting Cookie]>

2018-02-07 15:26:38,844 DEBUG [org.apereo.cas.util.cipher.AbstractCipherExecutor] - <Created signing key instance [AesKey] based on provided secret key>

2018-02-07 15:26:39,367 DEBUG [org.apereo.cas.util.cipher.AbstractCipherExecutor] - <Created signing key instance [AesKey] based on provided secret key>

2018-02-07 15:26:39,371 DEBUG [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Secret key for encryption defined under [cas.webflow.crypto.encryption.key] is Base64 encoded.>

2018-02-07 15:26:59,474 DEBUG [org.apereo.cas.services.AbstractServicesManager] - <Loading services from [InMemoryServiceRegistry]>

2018-02-07 15:27:09,482 DEBUG [org.apereo.cas.authentication.PseudoPlatformTransactionManager] - <Creating new transaction with name [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner.clean]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT; 'ticketTransactionManager'>

2018-02-07 15:27:09,483 DEBUG [org.apereo.cas.authentication.PseudoPlatformTransactionManager] - <Creating new transaction with name [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner.clean]: PROPAGATION_REQUIRED,ISOLATION_DEFAULT; 'ticketTransactionManager'>

2018-02-07 15:27:09,491 DEBUG [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Attempting to acquire ticket cleanup lock.>

2018-02-07 15:27:09,491 DEBUG [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Acquired lock. Proceeding with cleanup.>

2018-02-07 15:27:09,501 DEBUG [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Releasing ticket cleanup lock.>

2018-02-07 15:27:09,501 DEBUG [org.apereo.cas.ticket.registry.DefaultTicketRegistryCleaner] - <Finished ticket cleanup.>

2018-02-07 15:27:09,503 DEBUG [org.apereo.cas.authentication.PseudoPlatformTransactionManager] - <Initiating transaction commit>

2018-02-07 15:27:09,503 DEBUG [org.apereo.cas.authentication.PseudoPlatformTransactionManager] - <Resuming suspended transaction after completion of inner transaction>