CAS 6.2 to 6.3.7.2 upgrade

[Colin Ryan]

As a longer view on Log4J mitigation we are doing test upgrades from
6.2.x to 6.3...

We are using Mongo for service registry, ticketregistry and GAuth registry.

When testing the GAuth functions we are getting an exception from the
following mongo related error.


2021-12-15 21:15:06,696 DEBUG
[org.apereo.cas.web.FlowExecutionExceptionResolver] - <Ignoring the
received exception
[org.springframework.webflow.execution.ActionExecutionException:
Exception thrown executing
org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b
in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action
execution attributes were 'map['resolvedAuthenticationEvents' ->
list[mfa-gauth]]'] due to a type mismatch with handler
[[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
2021-12-15 21:15:06,696 DEBUG
[org.apereo.cas.web.FlowExecutionExceptionResolver] - <Ignoring the
received exception
[org.springframework.webflow.execution.ActionExecutionException:
Exception thrown executing
org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b
in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action
execution attributes were 'map['resolvedAuthenticationEvents' ->
list[mfa-gauth]]'] due to a type mismatch with handler
[[FlowHandlerMapping.DefaultFlowHandler@2b6ccf3e]]>
2021-12-15 21:15:06,701 ERROR
[org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/cas].[dispatcherServlet]]
- <Servlet.service() for servlet [dispatcherServlet] in context with
path [/cas] threw exception [Request processing failed; nested exception
is org.springframework.webflow.execution.ActionExecutionException:
Exception thrown executing
org.apereo.cas.otp.web.flow.OneTimeTokenAccountCheckRegistrationAction@1cdb280b
in state 'accountRegistrationCheck' of flow 'mfa-gauth' -- action
execution attributes were 'map['resolvedAuthenticationEvents' ->
list[mfa-gauth]]'] with root cause>
java.lang.IllegalArgumentException: Collation not supported by wire
version: 4
    at
com.mongodb.internal.operation.OperationHelper.validateCollation(OperationHelper.java:132)
~[mongodb-driver-core-4.1.1.jar!/:?]
    at
com.mongodb.internal.operation.OperationHelper.validateReadConcernAndCollation(OperationHelper.java:326)
~[mongodb-driver-core-4.1.1.jar!/:?]



We are using Mongo 3.4.14-4


Thoughts


Sincerely


Colin

[Baba Ndiaye]

Eventually i'm using JSON for service registry but i have this 

unzip -l /var/lib/tomcat9/webapps/cas.war                                                                                                                                  s.war | grep log4j
    35359  2021-12-15 21:05   WEB-INF/lib/log4j-web-2.16.0.jar
    21248  2021-12-15 21:05   WEB-INF/lib/log4j-slf4j18-impl-2.16.0.jar
  1789565  2021-12-15 21:05   WEB-INF/lib/log4j-core-2.16.0.jar
    12847  2021-12-15 21:05   WEB-INF/lib/log4j-jcl-2.16.0.jar
    30977  2021-12-15 21:05   WEB-INF/lib/log4j-jul-2.16.0.jar
   301892  2021-12-15 21:05   WEB-INF/lib/log4j-api-2.16.0.jar
    26461  2021-12-15 22:08   WEB-INF/lib/log4j-jul-2.14.1.jar
    12694  2021-12-15 22:08   WEB-INF/lib/log4j-jcl-2.14.1.jar
    20688  2021-12-15 22:08   WEB-INF/lib/log4j-slf4j18-impl-2.14.1.jar
   300365  2021-12-15 22:08   WEB-INF/lib/log4j-api-2.14.1.jar
    35337  2021-12-15 22:08   WEB-INF/lib/log4j-web-2.14.1.jar
     4774  2021-12-15 22:08   WEB-INF/lib/spring-boot-starter-log4j2-2.5.4.jar
  1745700  2021-12-15 22:08   WEB-INF/lib/log4j-core-2.14.1.jar
   180352  2021-12-15 22:08   WEB-INF/lib/log4j-layout-template-json-2.14.1.jar

WEB-INF/lib/log4j-core-2.14.1.jar  and  WEB-INF/lib/log4j-layout-template-json-2.14.1.jar are always log4j 2.14.1 any issue please

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/5f67b8f4-81c0-51e8-7593-f8f2f8477ca4%40caveo.ca.

[Ray Bon]

Baba,

You want 6.3.7.3.

Make sure you clean before you build.

./gradlew clean build

Ray

On Wed, 2021-12-15 at 21:51 +0000, Baba Ndiaye wrote:

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

-- 

Ray Bon

Programmer Analyst

Development Services, University Systems

2507218831 | CLE 019 | rb...@uvic.ca

I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day.

[Colin Ryan]

I'm not concerned about the Log4J in 6.3.7.2, a gradlew clean build
fixed that up...but curious about any big mismatches with
mfa-gauth/mongo that could be causing the exception stack below.
Specifically "java.lang.IllegalArgumentException: Collation not

supported by wire version: 4"

C