CAS 6.1.7.2 Duo-Client Not Found

[Zachary Dunham]

I'm getting the following error in my gradle build:

FAILURE: Build failed with an exception.

* What went wrong:
Execution failed for task ':bootWar'.
> Could not resolve all files for configuration ':runtimeClasspath'.
   > Could not resolve net.unicon.iam:duo-client:0.2.2.
     Required by:
         project : > org.apereo.cas:cas-server-support-duo:6.1.7.2 > org.apereo.cas:cas-server-support-duo-core:6.1.7.2
      > Could not resolve net.unicon.iam:duo-client:0.2.2.
         > Could not get resource 'https://oss.jfrog.org/artifactory/oss-snapshot-local/net/unicon/iam/duo-client/0.2.2/duo-client-0.2.2.pom'.
            > Could not GET 'https://oss.jfrog.org/artifactory/oss-snapshot-local/net/unicon/iam/duo-client/0.2.2/duo-client-0.2.2.pom'. Received status code 409 from server:
      > Could not resolve net.unicon.iam:duo-client:0.2.2.
         > Could not get resource 'https://dl.bintray.com/uniconiam/maven/net/unicon/iam/duo-client/0.2.2/duo-client-0.2.2.pom'.
            > Could not GET 'https://dl.bintray.com/uniconiam/maven/net/unicon/iam/duo-client/0.2.2/duo-client-0.2.2.pom'. Received status code 403 from server: Forbidden

This error tells me that org.apereo.cas:cas-server-support-duo-core:6.1.7.2 requires duo-client 0.2.2. However, https://dl.bintray.com/uniconiam/maven/ and https://oss.jfrog.org/artifactory/oss-snapshot-local/net/unicon/iam/duo-client/ are no longer accessible due to Jfrog shutting bintray down. I also don't see unicon/iam/duo-client:0.2.2 in Maven Central.

Does this mean my only option here is to upgrade to 6.3.x or disable Duo MFA?

Is anyone else experiencing this issue or has anyone found a workaround for this?

Thanks

 

--

Zachary Dunham

Database Administrator I

Information Technology Services

Northeastern State University

[Ray Bon]

Zachary,

I upgraded to 6.3.3.

The old location for the duo library looks to be closed.

Ray

On Mon, 2021-05-10 at 16:13 -0500, 'Zachary Dunham' via CAS Community wrote:

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

[Carl Waldbieser]

I am working around this by having the JAR files (duo and okhttp-2.3.0.jar) locally in the build environment and tweaking the Gradle build script to use those.  Seems to work for now with 6.2.8.

Thanks,

Carl Waldbieser

ITS

Lafayette College

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFnS6pk4yCuyNdkHBeCfKzsQ9hs9r%3D-TN8_AHo1C1innjtxi3Q%40mail.gmail.com.

[Zachary Dunham]

Carl,

Do you happen to know where those gradle jars are stored by default? I was going to go to our currently working instance and grab the jar from there but can't seem to locate it. My first though would be in the .gradle/ location. (I'm running it on Linux).

Thanks again for the help!

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALt4NbPYUdsNQSv8i2dYqGrhpzUyAdFvX5XajHhdoXY%2B563kxA%40mail.gmail.com.

--

Zachary Dunham

Database Administrator I

Information Technology Services

Northeastern State University

918.444.5852

[Carl Waldbieser]

Zachary,

I'm running CAS in docker containers.  If I load up one of the container images and override the entrypoint with a shell, I can see that the CAS WAR file is at /docker/cas/war/cas.war .  I copy that out of the container and expand the archive with `jar xvf cas.war`.  The JAR I am looking for is at "./WEB-INF/lib/duo-client-0.2.2.jar".  There are also a couple "okhttp" JARs in there, too.  I think I needed one of those as well.

Thanks,

Carl Waldbieser

ITS

Lafayette College

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAFnS6pmA-h%2B2hrL5yo-WEHhExSWiDqN2_5b2FvXAPFXmdV%2BEwA%40mail.gmail.com.

[Zachary Dunham]

Carl,

Thanks for the tip! I found my cas.war file and expanded it to find these jars. Did you just need to add these to your dependencies in the Gradle build script as compile files lines? I did that and duo-core still wants to go out to Maven to look for that dependency instead of using the local one I compiled. 

I appreciate your help

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALt4NbPLcTLBF%3DFcP9k3D3g9GGdaD8LOyCbTht_YpS46mcWgBQ%40mail.gmail.com.

[Zachary Dunham]

Carl,

Nevermind, I got it figured out! Thanks again for the help! I ended up using a flatDir repository to load those in. 

Thanks again!