[5.2] Dashboard - Application Not Authorized to Use CAS

376 views
Skip to first unread message

Kevin Liu

unread,
Feb 19, 2018, 9:33:07 AM2/19/18
to CAS Community
Hello,

I'm trying to enable access to the Dashboard with the default casuser:Mellon account but I'm running into an Application Not Authorized to Use CAS. This is my cas.properties file. I can't figure out what I'm missing? Looking online, it seems I need a registry of some sort but I can't find additional documentation on it.


cas.server.prefix: https://xxx.xxx.xxx.xxx/cas1

logging.config: file:/etc/cas1/config/log4j2.xml

endpoints.enabled=true
endpoints.sensitive=false
cas.adminPagesSecurity.ip=192.168.x.xx
cas.monitor.endpoints.enable=true
cas.monitor.endpoints.sensitive=false
cas.adminPagesSecurity.actuatorEndpointsEnabled=true


cas.adminPagesSecurity.loginUrl=${cas.server.prefix}/login
cas.adminPagesSecurity.service=${cas.server.prefix}/status/dashboard
cas.adminPagesSecurity.users=file:/etc/cas1/config/adminusers.properties
cas.adminPagesSecurity.adminRoles[0]=ROLE_ADMIN

Am I missing anything?

David Curry

unread,
Feb 19, 2018, 10:06:00 AM2/19/18
to cas-...@apereo.org
Do you have an entry in the service registry that matches the service?

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "name" : "CAS Admin Dashboard",
  "id" : 123456789,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 12345
}

Or something like that.

--Dave


--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

The New School


--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/f80f5c5d-f27d-4fa4-af85-45a306351383%40apereo.org.

Kevin Liu

unread,
Feb 19, 2018, 11:34:30 AM2/19/18
to CAS Community
This is my current entry in service registry

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : "^https://xxx.xxx.xxx.xxx:xxxx/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 1509646291,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 5000
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
Message has been deleted

Ray Bon

unread,
Feb 19, 2018, 12:01:33 PM2/19/18
to cas-...@apereo.org
Kevin,

What is the URL that you are trying to access?

Ray

On Mon, 2018-02-19 at 08:34 -0800, Kevin Liu wrote:
This is my current entry in service registry

{
  "@class" : "org.apereo.cas.services.RegexRegisteredService",
  "serviceId" : "^https://xxx.xxx.xxx.xxx:xxxx/cas1/status/dashboard(\\z|/.*)",
  "name" : "CAS Admin Dashboard",
  "id" : 1509646291,
  "description" : "CAS dashboard and administrative endpoints",
  "evaluationOrder" : 5000
}


On Monday, February 19, 2018 at 9:06:00 AM UTC-6, David Curry wrote:
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.



-- 
Ray Bon
Programmer analyst
Development Services, University Systems
2507218831 | CLE 019 | rb...@uvic.ca

Kevin Liu

unread,
Feb 19, 2018, 12:24:35 PM2/19/18
to CAS Community
I'm trying to access https://xxx.xxx.xxx.xxx:xxxx/cas1/status/dashboard
Message has been deleted

Ray Bon

unread,
Feb 19, 2018, 1:55:18 PM2/19/18
to cas-...@apereo.org
Put these into the log config to verify that the services you want are correct:

        <!-- INFO Loaded [#] service(s) from [???ServiceRegistryDAO]
             DEBUG Adding registered service [service URL] -->
        <AsyncLogger name="org.apereo.cas.services.AbstractServicesManager" level="debug" />

        <!-- DEBUG Publishing event [service details] -->
        <AsyncLogger name="org.apereo.cas.services.AbstractServiceRegistryDao" level="debug"/>

        <!-- INFO  Grented ticket [...] for service [...] for user [...]
             DEBUG Resolved service [limited details about service]
                   Located registered service definition [service details] -->
        <AsyncLogger name="org.apereo.cas.DefaultCentralAuthenticationService" level="debug" />

Ray

Kevin Liu

unread,
Feb 20, 2018, 8:41:08 AM2/20/18
to CAS Community
I've added and it looks like CAS is just not picking up on any of the services directory. It doesn't show as registering the service.

David Curry

unread,
Feb 20, 2018, 8:47:40 AM2/20/18
to cas-...@apereo.org
Assuming "the services directory" means you're trying to use an external directory full of JSON service definitions, do you have

    <dependency>
        <groupId>org.apereo.cas</groupId>
        <artifactId>cas-server-support-json-service-registry</artifactId>
        <version>${cas.version}</version>
    </dependency>

in your pom.xml and

cas.serviceRegistry.json.location:    file:/etc/cas/services

(whatever directory path you want) in cas.properties?

--Dave


--

DAVID A. CURRY, CISSP
DIRECTOR OF INFORMATION SECURITY
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • david...@newschool.edu

The New School


To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
 To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ff038326-4415-4650-92f9-569aca4942f3%40apereo.org.

Kevin Liu

unread,
Feb 20, 2018, 8:58:36 AM2/20/18
to cas-...@apereo.org
Yes, I have it in. I also don't know what happened but I just did another restart of tomcat and it looks like everything is working now. Didn't change a thing from when it wasn't working till now so not exactly sure what went wrong. Maybe just a long configuration load time?

Thank you all for helping! Also Dave, your tutorial is pretty awesome!

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/ff038326-4415-4650-92f9-569aca4942f3%40apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to a topic in the Google Groups "CAS Community" group.
To unsubscribe from this topic, visit https://groups.google.com/a/apereo.org/d/topic/cas-user/RiOeRX2fSw4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to cas-user+unsubscribe@apereo.org.
 To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAOqbxWEDqcdDGyC-S3YPqD0G%3Dd8K4DF1-t4d7LMYh5K%2BA%40mail.gmail.com.

Cheltenham, Chris

unread,
Feb 20, 2018, 11:16:01 AM2/20/18
to cas-...@apereo.org

Hello Everyone,

 

I am getting access denied on the /cas-management

It appears CAS 5 is a bit different from 4

 

Does anyone know why I am getting access denied to the management stuff?

 

 

 

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

Kevin Liu

unread,
Feb 20, 2018, 11:23:41 AM2/20/18
to CAS Community
I'm not familiar with cas 4 but do you have a cas.properties file? 

Cheltenham, Chris

unread,
Feb 20, 2018, 11:31:19 AM2/20/18
to cas-...@apereo.org

Yes, Cas works properly.

 

 

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

Man H

unread,
Feb 20, 2018, 11:36:22 AM2/20/18
to cas-...@apereo.org
This should be another thread since dashboard is not the same as cas-management.
Make it a service

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00a301d3aa65%24cd4c39e0%2467e4ada0%24%40philasd.org.

Cheltenham, Chris

unread,
Feb 20, 2018, 11:48:21 AM2/20/18
to cas-...@apereo.org

Man,

 

I don’t know what that means.

 

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

Man H

unread,
Feb 20, 2018, 1:19:36 PM2/20/18
to cas-...@apereo.org
Define cas-managenent as service

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.

To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscribe@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/00d101d3aa6a%249b75a4b0%24d260ee10%24%40philasd.org.
Reply all
Reply to author
Forward
0 new messages