CAS Management not starting

84 views
Skip to first unread message

Julien Sabatier

unread,
Aug 17, 2020, 3:34:10 AM8/17/20
to CAS Community
I try to setup a CAS Management to manages services of my CAS instance.

But when I launch the webapp, it's like it freeze on startup, and I can't access it in my browser.

CAS Version : 6.2.1
CAS Management Version : 6.2.1

Here is my /etc/cas/config/management.properties : https://pastebin.com/v04Q6GwE

And here is the logs I get at CAS Management startup : https://pastebin.com/Wc6Kfvnt

Can someone help me to understand why Cas Management isn't reachable ?

Richard Frovarp

unread,
Aug 17, 2020, 10:25:43 AM8/17/20
to cas-...@apereo.org
You probably aren't waiting long enough?

2020-08-17 09:06:54,686 DEBUG [org.apache.http.impl.execchain.MainClientExec] - Executing request GET /actuator/discoveryProfile HTTP/1.1

It's trying to make a connection to your CAS system. Looks like from your logs it hasn't time out, and thus hasn't fully started. Either make sure CAS is available upon startup of Management, or turn that feature off.
mgmt.enableDiscoveryEndpointCall=false

This is an obvious problem if you are running the IdP and Management in the same container.

Julien Sabatier

unread,
Aug 17, 2020, 10:41:42 AM8/17/20
to CAS Community, richard.frovarp
I solved the problem. It was that I didn't added "cas-server-support-discovery-profile" to my CAS dependencies at compilation, so the discovery service wasn't available.

Thanks for your help.

Now my problem is that I want to use ldap for CAS Management auth, and for this I need to include "cas-management-webapp-support-ldap".
The problem is that this dependency isn't available in 6.2.1-SNAPSHOT version.
The last version available is 5.3.6, and it probable will have conflict with 6.2.1 dependencies.

Nguyen Tran Thanh Lam

unread,
Aug 17, 2020, 10:54:17 AM8/17/20
to cas-...@apereo.org, richard.frovarp
Hi Mr Julien Sabatier,
I have read your cas-management configuration and I guessed your cas-management authen user from LDAP and store service registry to PostgreSQL.
Is that right?
You resolved your problem.
Can you show me your cas-managment, cas-overlay and service registry in detail?
Thank you in advance.

Vào Th 2, 17 thg 8, 2020 vào lúc 21:41 Julien Sabatier <sab...@gmail.com> đã viết:
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/5719680f-880c-4326-8528-f45a4b72920bn%40apereo.org.

Julien Sabatier

unread,
Aug 17, 2020, 11:03:53 AM8/17/20
to CAS Community, Napoleon Ponaparte, richard.frovarp
Hi, 

Yes, I use PostgreSQL to store services and tickets.

I actually try to use LDAP to auth my users in CAS Management, but actually it doesn't work : 

WARN [org.apereo.cas.mgmt.authz.CasRoleBasedAuthorizer] - Unable to authorize access, since the authenticated profile [#CasProfile# | id: julien.sabatier | attributes: {credentialType=UsernamePasswordCredential, isFromNewLogin=true, authenticationDate=2020-08-17T14:18:15.789255Z, authenticationMethod=LdapAuthenticationHandler, successfulAuthenticationHandlers=LdapAuthenticationHandler, longTermAuthenticationRequestTokenUsed=false} | roles: [] | permissions: [] | isRemembered: false | clientName: CasClient | linkedId: null |] does not contain any required roles

The roles are empty, but user "julien.sabatier" is a member of ADMINISTRATOR group in my LDAP.

I tried with this conf : https://pastebin.com/ukiEzpFC

Maybe I misunderstand the params...

@Napoleon Ponaparte : What file / data do you want exactly ?
Reply all
Reply to author
Forward
0 new messages