CAS-Manager and MDQ Metadata

[Mickaël]

Hi,

I'm preparing to migrate our CAS and CAS-Manager from version 5.3.X to 6.1.X.

I'm testing CAS 6.1 with CAS-Manager 6.1.4-SNAPSHOT with JPA/JDBC dependencies for service storage on Tomcat 9 and Debian 10.

At startup of CAS-Manager, I have a timeout error to reach an external URL for MDQ.

I have to deal with a proxy for going on internet. I have put in JAVA_OPTS -Dhttps.proxyHost= and -Dhttps.proxyPort= without success.

[2020-07-23 10:51:06] [info] 2020-07-23 10:51:06,568 ERROR [org.apereo.cas.util.HttpUtils] - <Connect to mdq.incommon.org:443 [mdq.incommon.org/13.226.169.83, mdq.incommon.org/13.226.169.49, mdq.incommon.org/13.226.169.48, mdq.incommon.org/13.226.169.117] failed: Connection timed out (Connection timed out)>
[2020-07-23 10:51:06] [info] org.apache.http.conn.HttpHostConnectException: Connect to mdq.incommon.org:443 [mdq.incommon.org/13.226.169.83, mdq.incommon.org/13.226.169.49, mdq.incommon.org/13.226.169.48, mdq.incommon.org/13.226.169.117] failed: Connection timed out (Connection timed out)
[2020-07-23 10:51:06] [info] 2020-07-23 10:51:06,579 ERROR [org.apereo.cas.mgmt.InCommonMetadataAggregateResolver] - <Unable to fetch metadata from [https://mdq.incommon.org/entities]>
[2020-07-23 10:51:06] [info] 2020-07-23 10:51:06,581 WARN [org.springframework.boot.web.servlet.context.AnnotationConfigServletWebServerApplicationContext] - <Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'samlController' defined in class path resource [org/apereo/cas/mgmt/config/CasManagementSamlConfiguration.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apereo.cas.mgmt.SamlController]: Factory method 'samlController' threw exception; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'metadataAggregateResolver' defined in class path resource [org/apereo/cas/mgmt/config/CasManagementSamlConfiguration.class]: Bean instantiation via factory method failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.apereo.cas.mgmt.MetadataAggregateResolver]: Factory method 'metadataAggregateResolver' threw exception; nested exception is org.apereo.cas.services.UnauthorizedServiceException: screen.service.error.message>
[2020-07-23 10:51:06] [info] 2020-07-23 10:51:06,655 ERROR [org.springframework.boot.SpringApplication] - <Application run failed>

Thanks for reading.

Sincerely,

Mickaël

[Mallory, Erik]

Are you able to configure the proxy for the command line and wget the
target url?
I had this configured a few years back I'm not sure if I still have a
copy I'll did around though.
--
Erik Mallory
Server Analyst
Wichita State University

On Thu, 2020-07-23 at 02:10 -0700, Mickaël wrote:
> CAUTION: This email originated from outside of Wichita State
> University. Do not click links or open attachments unless you
> recognize the sender and know the content is safe.

[Mickaël]

Hi Erik,

Yes, wget and curl are configured to use our proxy server.

If I wget https://mdq.incommon.org/entities it works and I download a file of 74 Mo.

Mickaël

[Mallory, Erik]

Try something like this.
JAVA_OPTS="-Dhttp.proxySet=true -Dhttps.proxySet=true
-Dhttp.proxyHost=proxysvc.domain.edu
-Dhttps.proxyHost=proxysvc.domain.edu -Dhttp.proxyPort=8080
-Dhttps.proxyPort=8080"

--
Erik Mallory
Server Analyst
Wichita State University

On Thu, 2020-07-23 at 07:53 -0700, Mickaël wrote:
> CAUTION: This email originated from outside of Wichita State
> University. Do not click links or open attachments unless you
> recognize the sender and know the content is safe.
>

[Mickaël]

Erik,

All options are in my JAVA_OPTS and it doesn't use by CAS-Manager.

Mickaël

[Mickaël]

I also tryed to ./gradlew run after have modified without suceess in build.gradle :

        def casRunArgs = Arrays.asList("-Xmx2048M -XX:+TieredCompilation -XX:TieredStopAtLevel=1 -Dhttp.proxySet=true -Dhttps.proxySet=true -Dhttp.proxyHost=XXX.XXX.XXX.XXX -Dhttp.proxyPort=XXXX -Dhttps.proxyHost=XXX.XXX.XXX.XXX -Dhttps.proxyPort=XXXX -Dhttp.nonProxyHosts=\"localhost\" -Dhttps.nonProxyHosts=\"localhost\"".split(" "))

Mickaël