CAS apereo Authentication Failed with LDAP

[Baba Ndiaye]

Hi i'm a new user of cas apereo

i already install cas ldap and i add ldap module i want to connect with ldap (uid and password) but i always have failed and casuser and Mellon also failed

my cas.properties file

#cas.server.name=http://192.168.1.5:8080

cas.server.name=https://192.168.1.5:8443

cas.server.prefix=${cas.server.name}/cas

logging.config=file:/etc/cas/config/log4j2.xml

# cas.authn.accept.enabled=false

#############mes mes ajouts##################

cas.authn.ldap[0].type=AUTHENTICATED

cas.authn.ldap[0].ldapUrl=ldap://192.168.1.6:389

cas.authn.ldap[0].baseDn=dc=retel,dc=sn

cas.authn.ldap[0].searchFilter=uid={user}

cas.authn.ldap[0].subtreeSearch=true

cas.authn.ldap[0].bindDn=cn=Directory Manager,dc=retel,dc=sn

cas.authn.ldap[0].bindCredential=passer

cas.authn.ldap[0].principalAttributeId=uid

cas.authn.ldap[0].principalAttributePassword=password

################ fin ajout #################

and my slapcat is 

root@ubuntu18:/etc/cas/config# slapcat

dn: dc=retel,dc=sn

objectClass: top

objectClass: dcObject

objectClass: organization

o: retel.sn

dc: retel

structuralObjectClass: organization

entryUUID: 05c02142-c779-103b-966e-39ba122b4bd4

creatorsName: cn=admin,dc=retel,dc=sn

createTimestamp: 20211022114330Z

entryCSN: 20211022114330.237590Z#000000#000#000000

modifiersName: cn=admin,dc=retel,dc=sn

modifyTimestamp: 20211022114330Z

dn: cn=admin,dc=retel,dc=sn

objectClass: simpleSecurityObject

objectClass: organizationalRole

cn: admin

description: LDAP administrator

userPassword:: e1NTSEF9T3M2VUduZlA2S05ySGhKMlJZbjQvM1V2Vk1EVTBqbTk=

structuralObjectClass: organizationalRole

entryUUID: 05c1166a-c779-103b-966f-39ba122b4bd4

creatorsName: cn=admin,dc=retel,dc=sn

createTimestamp: 20211022114330Z

entryCSN: 20211022114330.243915Z#000000#000#000000

modifiersName: cn=admin,dc=retel,dc=sn

modifyTimestamp: 20211022114330Z

dn: ou=people,dc=retel,dc=sn

objectClass: organizationalUnit

ou: people

structuralObjectClass: organizationalUnit

entryUUID: 5f0ec51e-c779-103b-83f2-b9a607630f9c

creatorsName: cn=admin,dc=retel,dc=sn

createTimestamp: 20211022114600Z

entryCSN: 20211022114600.070216Z#000000#000#000000

modifiersName: cn=admin,dc=retel,dc=sn

modifyTimestamp: 20211022114600Z

dn: ou=groups,dc=retel,dc=sn

objectClass: organizationalUnit

ou: groups

structuralObjectClass: organizationalUnit

entryUUID: 5f0fa92a-c779-103b-83f3-b9a607630f9c

creatorsName: cn=admin,dc=retel,dc=sn

createTimestamp: 20211022114600Z

entryCSN: 20211022114600.076076Z#000000#000#000000

modifiersName: cn=admin,dc=retel,dc=sn

modifyTimestamp: 20211022114600Z

dn: uid=baba,ou=people,dc=retel,dc=sn

objectClass: inetOrgPerson

objectClass: posixAccount

objectClass: shadowAccount

cn: baba

sn: Wiz

userPassword:: cGFzc2Vy

loginShell: /bin/bash

uidNumber: 2000

gidNumber: 2000

homeDirectory: /home/baba

structuralObjectClass: inetOrgPerson

uid: baba

entryUUID: b9731220-c77a-103b-83f4-b9a607630f9c

creatorsName: cn=admin,dc=retel,dc=sn

createTimestamp: 20211022115541Z

entryCSN: 20211022115541.219243Z#000000#000#000000

modifiersName: cn=admin,dc=retel,dc=sn

modifyTimestamp: 20211022115541Z

dn: uid=babacar,ou=people,dc=retel,dc=sn

objectClass: inetOrgPerson

objectClass: posixAccount

objectClass: shadowAccount

cn: babacar

sn: Wiz

userPassword:: e1NTSEF9d0JTSS9tYk9OcVdsL0pqWDFFQTh1ZTErZldEWUxZVy8=

loginShell: /bin/bash

uidNumber: 2000

gidNumber: 2000

homeDirectory: /home/babacar

structuralObjectClass: inetOrgPerson

uid: babacar

entryUUID: f39c262c-c788-103b-83f5-b9a607630f9c

creatorsName: cn=admin,dc=retel,dc=sn

createTimestamp: 20211022133731Z

entryCSN: 20211022133731.750520Z#000000#000#000000

modifiersName: cn=admin,dc=retel,dc=sn

thank for your help guys!!!!

[Ray Bon]

Baba,

Can you connect and search with ldapsearch or apache directory studio?

Do you want to connect as 'Directory Manager' or 'admin'?

Ray

On Fri, 2021-10-22 at 08:49 -0700, Baba Ndiaye wrote:

Notice: This message was sent from outside the University of Victoria email system. Please be cautious with links and sensitive information.

-- 

Ray Bon

Programmer Analyst

Development Services, University Systems

2507218831 | CLE 019 | rb...@uvic.ca

I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ peoples whose historical relationships with the land continue to this day.

[Baba Ndiaye]

Hi Ray BON

when i use this command

ldapwhoami -x -w "passer" -D uid=baba,ou=people,dc=retel,dc=sn  -H ldap://192.168.1.6 it's OK 

i use admin 

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/507f7af2f867864ec754d2a05b21b8b74863cd74.camel%40uvic.ca.

[Ray Bon]

Baba,

Change your binddn in your properties to admin and try cas again.

In log4j2.xml set ldap.log.level to debug.

Ray

[Baba Ndiaye]

Ray

i change my bindDn and log4j2 but i always have failure i want to the location of cas authentication log

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/7d5c2c555e0438d070585658a489f873640e795f.camel%40uvic.ca.

[Baba Ndiaye]

i modifiy also caslog.level in debug and i have this result 

root@ldap:~# tail -100 /var/log/syslog
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.TransitionableState.handleEvent(TransitionableState.java:116) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.Flow.handleEvent(Flow.java:547) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.impl.FlowExecutionImpl.handleEvent(FlowExecutionImpl.java:390) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.impl.RequestControlContextImpl.handleEvent(RequestControlContextImpl.java:210) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.ViewState.handleEvent(ViewState.java:231) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.ViewState.resume(ViewState.java:195) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.Flow.resume(Flow.java:537) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.engine.impl.FlowExecutionImpl.resume(FlowExecutionImpl.java:259) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.executor.FlowExecutorImpl.resumeExecution(FlowExecutorImpl.java:168) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.webflow.mvc.servlet.FlowHandlerAdapter.handle(FlowHandlerAdapter.java:254) ~[spring-webflow-2.5.1.RELEASE.jar:2.5.1.RELEASE]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1067) ~[spring-webmvc-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:963) ~[spring-webmvc-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006) ~[spring-webmvc-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:909) ~[spring-webmvc-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at javax.servlet.http.HttpServlet.service(HttpServlet.java:660) ~[tomcat9-servlet-api-9.0.16.jar:?]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:883) ~[spring-webmvc-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at javax.servlet.http.HttpServlet.service(HttpServlet.java:741) ~[tomcat9-servlet-api-9.0.16.jar:?]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53) ~[tomcat9-websocket-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apereo.cas.web.support.AuthenticationCredentialsThreadLocalBinderClearingFilter.doFilter(AuthenticationCredentialsThreadLocalBinderClearingFilter.java:28) ~[cas-server-core-web-api-6.5.0-SNAPSHOT.jar:6.5.0-SNAPSHOT]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apereo.cas.web.support.filters.RequestParameterPolicyEnforcementFilter.doFilter(RequestParameterPolicyEnforcementFilter.java:401) ~[cas-server-core-web-api-6.5.0-SNAPSHOT.jar:6.5.0-SNAPSHOT]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apereo.cas.web.support.filters.ResponseHeadersEnforcementFilter.doFilter(ResponseHeadersEnforcementFilter.java:200) ~[cas-server-core-web-api-6.5.0-SNAPSHOT.jar:6.5.0-SNAPSHOT]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apereo.cas.web.support.filters.AddResponseHeadersFilter.doFilter(AddResponseHeadersFilter.java:62) ~[cas-server-core-web-api-6.5.0-SNAPSHOT.jar:6.5.0-SNAPSHOT]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:204) ~[spring-security-web-5.5.3.jar:5.5.3]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:183) ~[spring-security-web-5.5.3.jar:5.5.3]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.security.web.debug.DebugFilter.invokeWithWrappedRequest(DebugFilter.java:90) ~[spring-security-web-5.5.3.jar:5.5.3]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.security.web.debug.DebugFilter.doFilter(DebugFilter.java:78) ~[spring-security-web-5.5.3.jar:5.5.3]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.security.web.debug.DebugFilter.doFilter(DebugFilter.java:67) ~[spring-security-web-5.5.3.jar:5.5.3]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:96) ~[spring-boot-actuator-2.5.5.jar:2.5.5]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apereo.cas.logging.web.ThreadContextMDCServletFilter.doFilter(ThreadContextMDCServletFilter.java:108) ~[cas-server-core-logging-6.5.0-SNAPSHOT.jar:6.5.0-SNAPSHOT]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apereo.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:66) ~[inspektr-common-1.8.16.GA.jar:1.8.16.GA]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:126) ~[spring-boot-2.5.5.jar:2.5.5]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.boot.web.servlet.support.ErrorPageFilter.access$000(ErrorPageFilter.java:64) ~[spring-boot-2.5.5.jar:2.5.5]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.boot.web.servlet.support.ErrorPageFilter$1.doFilterInternal(ErrorPageFilter.java:101) ~[spring-boot-2.5.5.jar:2.5.5]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:119) ~[spring-boot-2.5.5.jar:2.5.5]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119) ~[spring-web-5.3.12.jar:5.3.12]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71) ~[log4j-web-2.14.1.jar:2.14.1]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:200) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:490) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:668) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) ~[tomcat9-catalina-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408) ~[tomcat9-coyote-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) ~[tomcat9-coyote-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:834) ~[tomcat9-coyote-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1415) ~[tomcat9-coyote-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) ~[tomcat9-coyote-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) ~[?:?]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) ~[?:?]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) ~[tomcat9-util-9.0.16.jar:9.0.16]
Oct 23 15:07:47 ldap tomcat9[2473]: #011at java.lang.Thread.run(Thread.java:829) [?:?]
Oct 23 15:07:47 ldap tomcat9[2473]: #033[36m2021-10-23 15:07:47,478 DEBUG [org.apereo.cas.web.flow.resolver.impl.AbstractCasWebflowEventResolver] - <Resolved single event [authenticationFailure] via [org.apereo.cas.web.flow.resolver.impl.DefaultCasDelegatingWebflowEventResolver] for this context>#033[m
Oct 23 15:07:47 ldap tomcat9[2473]: #033[36m2021-10-23 15:07:47,483 DEBUG [org.apereo.cas.web.flow.actions.AuthenticationExceptionHandlerAction] - <Located current event [authenticationFailure]>#033[m
Oct 23 15:07:47 ldap tomcat9[2473]: #033[36m2021-10-23 15:07:47,483 DEBUG [org.apereo.cas.web.flow.actions.AuthenticationExceptionHandlerAction] - <Located error attribute [class org.apereo.cas.authentication.AuthenticationException] with message [0 errors, 0 successes] from the current event>#033[m
Oct 23 15:07:47 ldap tomcat9[2473]: #033[36m2021-10-23 15:07:47,483 DEBUG [org.apereo.cas.web.flow.authentication.DefaultCasWebflowAuthenticationExceptionHandler] - <Unable to translate handler errors of the authentication exception [org.apereo.cas.authentication.AuthenticationException: 0 errors, 0 successes]. Returning [UNKNOWN]>#033[m
Oct 23 15:07:47 ldap tomcat9[2473]: #033[36m2021-10-23 15:07:47,483 DEBUG [org.apereo.cas.web.flow.actions.AuthenticationExceptionHandlerAction] - <Final event id resolved from the error is [UNKNOWN]>#033[m
Oct 23 15:09:01 ldap CRON[2556]: (root) CMD (  [ -x /usr/lib/php/sessionclean ] && if [ ! -d /run/systemd/system ]; then /usr/lib/php/sessionclean; fi)
Oct 23 15:09:23 ldap systemd[1]: Starting Clean php session files...
Oct 23 15:09:23 ldap systemd[1]: Started Clean php session files.

[Ray Bon]

Baba,

Turn down the logging for springframework, it should not be needed.

Check TOMCAT_HOME/logs/catalina.out. Syslog output is not capturing the cas login steps.

Ray