CAS 7.2 works with embeded Tomcat but not when served by Jetty

[Laurent PELLISSIER]

Hi,

I install a very basic CAS 7.2.5 on a new Alma Linux 9.6 this way :

CAS Initializr :

  Deployement type : Executable

  Checked : Shell, Github actions, OpenRewrite

  Dependencies : Apache Tomcat, LDAP & Active Directory Authentication

$ curl "https://getcas.apereo.org/starter.tgz?artifactId=cas&casVersion=7.2.5&commandlineShellSupported=true&deploymentType=web&description=WAR%20overlay%20to%20use%20as%20a%20starting%20template%20for%20Apereo%20CAS%20deployments.&dockerSupported=false&githubActionsSupported=true&groupId=org.apereo.cas&helmSupported=false&herokuSupported=false&javaVersion=21&language=java&name=cas&nativeImageSupported=false&openRewriteSupported=true&packageName=org.apereo&packaging=war&puppeteerSupported=false&sbomSupported=false&type=cas-overlay&version=1.0.0" | tar -xzvf -

$ ./gradlew clean build

$ java -jar build/libs/cas.war

It works and I can authenticate to an LDAP account.

Now I switch to 

CAS Initializr :

  Deployement type : Web

  Same checked items and dependancies.

I copy build/libs/cas.war to $JETTY_BASE/webapps, it's deployed by Jetty. But when I connect to the CAS : 500 Internal server error

Error: jakarta.servlet.ServletException: Request processing failed: org.springframework.webflow.execution.FlowExecutionException: Exception thrown in state 'null' of flow 'login'

In cas.log :

2025-07-25 16:01:26,349 ERROR [org.apereo.cas.web.support.filters.AbstractSecurityFilter] - <Request processing failed: org.springframework.webflow.execution.FlowExecutionException: Exception thrown in state 'null' of flow 'login'>
jakarta.servlet.ServletException: Request processing failed: org.springframework.webflow.execution.FlowExecutionException: Exception thrown in state 'null' of flow 'login'
        at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1022) ~[spring-webmvc-6.2.5.jar:6.2.5]

The only configuration file is /etc/cas/config/application.properties and doesn't change between the two tests :

cas.tgc.crypto.encryption.key=_4p...bKOQ
cas.webflow.crypto.encryption.key=Sw...Rv
cas.tgc.crypto.signing.key=D68...PSm
cas.webflow.crypto.signing.key=q7ul...fQyqmw

cas.server.name=https://cas.example.com:8443
cas.server.prefix=${cas.server.name}/cas
cas.server.scope=example.com

logging.config=file:/etc/cas/config/log4j2.xml
logging.level.org.apereo.cas=DEBUG

cas.authn.accept.users=

cas.authn.ldap[0].name=myLDAP
cas.authn.ldap[0].type=ANONYMOUS
cas.authn.ldap[0].base-dn=dc=example,dc=com
cas.authn.ldap[0].ldap-url=ldap://ldap.example.com:389
cas.authn.ldap[0].search-filter=(&(objectClass=posixAccount)(uid={user}))
cas.authn.ldap[0].subtree-search=true

I don't see any erreor in log files except a lot of Java exceptions.

Thanks for your help

[Ray Bon]

Laurent,

What are the java exceptions?

The FlowExecutionException is not likely the cause of the problem.

Check the logs during startup to be sure there are no warnings nor errors.

Could jetty be conflicting with something else on the host?

Ray

---

From: cas-...@apereo.org <cas-...@apereo.org> on behalf of Laurent PELLISSIER <laurent.p...@gmail.com>
Sent: July 25, 2025 07:19
To: CAS Community <cas-...@apereo.org>
Subject: [cas-user] CAS 7.2 works with embeded Tomcat but not when served by Jetty

 

You don't often get email from laurent.p...@gmail.com. Learn why this is important

--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7dfa9b0a-020d-4a3e-8594-2da0be76ae23n%40apereo.org.