Duo MFA error in 6.2 RC5

71 views
Skip to first unread message

mba...@scad.edu

unread,
Jun 4, 2020, 4:18:07 PM6/4/20
to CAS Community
I'm testing out 6.2 RC5 and am getting an error with Duo:

DEBUG [org.apereo.cas.web.FlowExecutionExceptionResolver] - <Ignoring the received exception [org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing org.apereo.cas.adaptors.duo.web.flow.action.DuoSecurityPrepareWebLoginFormAction@5afaae7e in state 'viewLoginFormDuo' of flow 'mfa-duo' -- action execution attributes were 'map['resolvedAuthenticationEvents' -> list[mfa-duo]]'] due to a type mismatch with handler [[FlowHandlerMapping.DefaultFlowHandler@5f5b9239]]>

I'm using pretty much the same Duo configuration from 6.0.x (which is working), but switched from camelCase to dashes as listed in the latest development documentation.  I got the same error with camel case too.

#####  DUO ####################################
cas.authn.mfa.duo[0].duo-secret-key=${CAS_DUO_SKEY}
cas.authn.mfa.duo[0].rank=0
cas.authn.mfa.duo[0].duo-application-key=${CAS_DUO_AKEY}
cas.authn.mfa.duo[0].duo-integration-key=${CAS_DUO_IKEY}
cas.authn.mfa.duo[0].duo-api-host=${CAS_DUO_HOST}
cas.authn.mfa.duo[0].trusted-device-enabled=false
cas.authn.mfa.duo[0].id=mfa-duo
cas.authn.mfa.duo[0].name=SCAD DUO
cas.authn.mfa.duo[0].order=1
# but this one stays camelCase
cas.authn.mfa.groovyScript=file:/etc/cas/ScadMfa.groovy

And I can actually see a response from Duo early in the log that indicates it retrieved my account info.

Also, I am using the default theme with no changes.

Any help would be appreciated.

Thank you,
Mike


mba...@scad.edu

unread,
Jun 4, 2020, 4:44:50 PM6/4/20
to CAS Community
Doh, I didn't post  the actual error.  Here it is:

ERROR [org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/cas-web].[dispatcherServlet]] - <Servlet.service() for servlet [dispatcherServlet] in context with path [/cas-web] threw exception [Request processing failed; nested exception is org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing org.apereo.cas.adaptors.duo.web.flow.action.DuoSecurityPrepareWebLoginFormAction@5c3e7128 in state 'viewLoginFormDuo' of flow 'mfa-duo' -- action execution attributes were 'map['resolvedAuthenticationEvents' -> list[mfa-duo]]'] with root cause>
java.lang.NullPointerException: null
    at java.util.Objects.requireNonNull(Objects.java:221) ~[?:?]
    at org.apereo.cas.adaptors.duo.web.flow.action.DuoSecurityPrepareWebLoginFormAction.doExecute(DuoSecurityPrepareWebLoginFormAction.java:31) ~[cas-server-support-duo-core-6.2.0-RC5.jar!/:6.2.0-RC5]
    at org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188) ~[spring-webflow-2.5.1.RELEASE.jar!/:2.5.1.RELEASE]

Thanks in advance.

Amit Poddar

unread,
Jun 26, 2020, 5:07:25 PM6/26/20
to CAS Community
Hi,

I am dealing with the same issue, did you get a resolution to this?  If yes then would you be willing to share the resolution?

Thanks,
Amit

Bryan Wooten

unread,
Jun 26, 2020, 5:10:29 PM6/26/20
to cas-...@apereo.org
We have the same issue. But not on the 6.2 master branch.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/a5ad9a82-e295-4af9-9d80-c83faa7d20c0o%40apereo.org.
Reply all
Reply to author
Forward
0 new messages