[cas-user] Problem on docker versions

[Umut Arus]

Hi,

I'm trying to run on docker of the different versions of CAS from https://hub.docker.com/r/apereo/cas/. But I couldnt run any top of versions.

It is just "Exited"... What could be the problem?

c01c55d5b7ab        apereo/cas:v5.3.2        "bin/run-cas.sh"         13 minutes ago      Exited (1) 12 minutes ago                          wonderful_aryabhata
533144080d80        apereo/cas                  "jshell"                 16 minutes ago      Exited (0) 16 minutes ago                          jolly_khorana

thanks..

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.
To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/530e8844-32d7-4e7f-9965-0446413de586%40apereo.org.

[Jason Sherman]

Hi,

The fist step I would take is to look at the logs. So:

docker logs c01c55d5b7ab

and

docker logs 533144080d80

Also, it sounds like your running these straight from docker hub. Have you tried:

https://github.com/apereo/cas-webapp-docker

as a starting point on your host machine?

--

Jason

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAGdX6GYzaOCeVj3Jqd5bw7ypfFc-FhnhRKAgdk9gCjiypumjjg%40mail.gmail.com.

[Umut Arus]

Hi,

I'm getting the below error on last cas docker version.

docker run -d -p 8080:8080 -p 8443:8443 --name="cas" apereo/cas

root@umuta:~# docker logs cd62fe31b9c9
Sep 20, 2018 6:47:03 AM java.util.prefs.FileSystemPreferences$1 run
INFO: Created user preferences directory.
|  Welcome to JShell -- Version 11
|  For an introduction type: /help intro

jshell> root@umuta:~#
root@umuta:~#

What can be the issue?

thanks.

--

Umut Arus

System Specialist

Information Technology
Sabancı University

 

Phone: +90216 483 9172

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+u...@apereo.org.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALwryzGE5pv-5dyqqduTVsHvCwjSkXh0SyNN3TcVrj_WwUg8Bg%40mail.gmail.com.

[Jason Sherman]

Hmm,

Can you run docker inspect on the container with an erroneous exit status (e.g. apereo/cas:v5.3.2) and post the output? It looks to me like the image build is fine, but it's dying on run.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAGdX6Ga2JhH-%3Dd%3DD4Oqmgr00qE%3DaxK5Pnigr6jFGb2WL_O1zGw%40mail.gmail.com.

[Umut Arus]

Hi,

You are welcome for your feedbacks.

thanks.

root@umuta:~# docker pull apereo/cas:v5.3.2
v5.3.2: Pulling from apereo/cas
Digest: sha256:81532b1fb2177f8d048fd6ea8663af98a91eb298f36e47c83912f56f2d4a2adc
Status: Image is up to date for apereo/cas:v5.3.2
root@umuta:~#
root@umuta:~#
root@umuta:~# docker run -d -p 8080:8080 -p 8443:8443 --name="cas" apereo/cas:v5.3.2
ed7ff40f67098eef32226054624acc8d554424782cea12bf26b1ca95d8186d8e
root@umuta:~#
root@umuta:~#
root@umuta:~# docker ps -a
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS                                            NAMES
ed7ff40f6709        apereo/cas:v5.3.2   "bin/run-cas.sh"    15 seconds ago      Up 14 seconds       0.0.0.0:8080->8080/tcp, 0.0.0.0:8443->8443/tcp   cas
root@umuta:~#
root@umuta:~# docker logs ed7ff40f6709

   __   ____      _      ____   __ 
  / /  / ___|    / \    / ___|  \ \
 | |  | |       / _ \   \___ \   | |
 | |  | |___   / ___ \   ___) |  | |
 | |   \____| /_/   \_\ |____/   | |
  \_\                           /_/

CAS Version: 5.3.2
CAS Commit Id: 145d8c3dd5e27333dd05f5cc10987df4656fba5e
CAS Build Date/Time: 2018-07-30T21:09:46Z
Spring Boot Version: 1.5.14.RELEASE
Spring Version: 4.3.18.RELEASE
Java Home: /opt/zulu8.30.0.1-jdk8.0.172-linux_x64/jre
Java Vendor: Azul Systems, Inc.
Java Version: 1.8.0_172
JVM Free Memory: 50 MB
JVM Maximum Memory: 1 GB
JVM Total Memory: 690 MB
JCE Installed: Yes
Node Version: N/A
NPM Version: N/A
OS Architecture: amd64
OS Name: Linux
OS Version: 4.15.0-33-generic
OS Date/Time: 2018-09-20T12:23:33.336
OS Temp Directory: /tmp
------------------------------------------------------------
Apache Tomcat Version: Apache Tomcat/8.5.32
------------------------------------------------------------


2018-09-20 12:23:33,448 INFO [org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator] - <Configuration directory [/etc/cas/config] is not a directory or cannot be found at the specific path>
2018-09-20 12:23:33,492 INFO [org.springframework.cloud.bootstrap.config.PropertySourceBootstrapConfiguration] - <Located property source: CompositePropertySource [name='casCompositePropertySource', propertySources=[PropertiesPropertySource {name='embeddedYamlOverriddenProperties'}]]>
2018-09-20 12:23:33,511 INFO [org.apereo.cas.web.CasWebApplication] - <The following profiles are active: standalone>
2018-09-20 12:23:33,606 INFO [org.apereo.cas.web.CasWebApplicationContext] - <Refreshing CasWebApplicationContext()>
2018-09-20 12:23:39,856 WARN [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Runtime memory is used as the persistence storage for retrieving and managing tickets. Tickets that are issued during runtime will be LOST when the web server is restarted. This MAY impact SSO functionality.>
2018-09-20 12:23:39,860 INFO [org.apereo.cas.util.CoreTicketUtils] - <Ticket registry encryption/signing is turned off. This MAY NOT be safe in a clustered production environment. Consider using other choices to handle encryption, signing and verification of ticket registry tickets, and verify the chosen ticket registry does support this behavior.>
2018-09-20 12:23:57,141 INFO [org.apereo.cas.config.CasConfigurationSupportUtilitiesConfiguration] - <CAS is configured to NOT watch configuration directory [/etc/cas/config]. Changes require manual reloads/restarts.>
2018-09-20 12:23:58,027 WARN [org.apereo.cas.config.support.authentication.AcceptUsersAuthenticationEventExecutionPlanConfiguration] - <>
2018-09-20 12:23:58,032 WARN [org.apereo.cas.config.support.authentication.AcceptUsersAuthenticationEventExecutionPlanConfiguration] - <

  ____    _____    ___    ____    _
 / ___|  |_   _|  / _ \  |  _ \  | |
 \___ \    | |   | | | | | |_) | | |
  ___) |   | |   | |_| | |  __/  |_|
 |____/    |_|    \___/  |_|     (_)
                                   

CAS is configured to accept a static list of credentials for authentication. While this is generally useful for demo purposes, it is STRONGLY recommended that you DISABLE this authentication method (by setting 'cas.authn.accept.users' to a blank value) and switch to a mode that is more suitable for production.>
2018-09-20 12:23:58,032 WARN [org.apereo.cas.config.support.authentication.AcceptUsersAuthenticationEventExecutionPlanConfiguration] - <>
root@umuta:~#
root@umuta:~#

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALwryzEfD4i4d2M%3DiuF8QvOQzbhnW0Z6%3DAtuGSoafgxRT20kKQ%40mail.gmail.com.

[Umut Arus]

Last part of the log...

2018-09-20 12:24:05,606 INFO [org.apereo.cas.support.events.listener.CasConfigurationEventListener] - <Refreshing CAS configuration. Stand by...>
2018-09-20 12:24:06,220 WARN [org.apereo.cas.config.CasCoreServicesConfiguration] - <Runtime memory is used as the persistence storage for retrieving and persisting service definitions. Changes that are made to service definitions during runtime WILL be LOST when the web server is restarted. Ideally for production, you need to choose a storage option (JDBC, etc) to store and track service definitions.>
2018-09-20 12:24:06,293 INFO [org.apereo.cas.services.AbstractServicesManager] - <Loaded [0] service(s) from [InMemoryServiceRegistry].>
2018-09-20 12:24:06,732 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for encryption is not defined for [Ticket-granting Cookie]; CAS will attempt to auto-generate the encryption key>
2018-09-20 12:24:06,753 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Generated encryption key [sO4QOgf98hS-2fZEfB4PttueNvibknDSZa5xlC9suyQ] of size [256] for [Ticket-granting Cookie]. The generated key MUST be added to CAS settings under setting [cas.tgc.crypto.encryption.key].>
2018-09-20 12:24:06,761 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for signing is not defined for [Ticket-granting Cookie]. CAS will attempt to auto-generate the signing key>
2018-09-20 12:24:06,762 WARN [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Generated signing key [CJqJINZp9drK7hjHrXproIAT-EbPpSToNTW8SA1NPV9MO_cWTe3c9wuMazpUYjmi5ii20f43d0SczCcTxsIncQ] of size [512] for [Ticket-granting Cookie]. The generated key MUST be added to CAS settings under setting [cas.tgc.crypto.signing.key].>
2018-09-20 12:24:07,537 WARN [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Secret key for signing is not defined under [cas.webflow.crypto.signing.key]. CAS will attempt to auto-generate the signing key>
2018-09-20 12:24:07,538 WARN [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated signing key [vvVdP_t8HW9MhVFiTTqS2xb5Uip4lxJf4uIPJoLRUNkre8wP3_v7uvpELNAFPUsmACn3nqF0Bjt-f_69DpIXdA] of size [512]. The generated key MUST be added to CAS settings under setting [cas.webflow.crypto.signing.key].>
2018-09-20 12:24:07,539 WARN [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Secret key for encryption is not defined under [cas.webflow.crypto.encryption.key]. CAS will attempt to auto-generate the encryption key>
2018-09-20 12:24:07,542 WARN [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated encryption key [nLM2R9XE7xeZEemeD27zzA] of size [16]. The generated key MUST be added to CAS settings under setting [cas.webflow.crypto.encryption.key].>
2018-09-20 12:24:07,902 ERROR [org.apache.catalina.core.StandardService] - <Failed to start connector [Connector[HTTP/1.1-8443]]>
org.apache.catalina.LifecycleException: Failed to start component [Connector[HTTP/1.1-8443]]
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:167) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    at org.apache.catalina.core.StandardService.addConnector(StandardService.java:225) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    at org.springframework.boot.context.embedded.tomcat.TomcatEmbeddedServletContainer.addPreviouslyRemovedConnectors(TomcatEmbeddedServletContainer.java:265) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.boot.context.embedded.tomcat.TomcatEmbeddedServletContainer.start(TomcatEmbeddedServletContainer.java:208) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.boot.context.embedded.EmbeddedWebApplicationContext.startEmbeddedServletContainer(EmbeddedWebApplicationContext.java:297) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.boot.context.embedded.EmbeddedWebApplicationContext.finishRefresh(EmbeddedWebApplicationContext.java:145) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:546) ~[spring-context-4.3.18.RELEASE.jar!/:4.3.18.RELEASE]
    at org.springframework.boot.context.embedded.EmbeddedWebApplicationContext.refresh(EmbeddedWebApplicationContext.java:122) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:693) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:360) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.boot.SpringApplication.run(SpringApplication.java:303) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.springframework.boot.builder.SpringApplicationBuilder.run(SpringApplicationBuilder.java:134) ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE]
    at org.apereo.cas.web.CasWebApplication.main(CasWebApplication.java:71) ~[cas-server-webapp-init-5.3.2.jar!/:5.3.2]
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_172]
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) ~[?:1.8.0_172]
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.8.0_172]
    at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_172]
    at org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:48) ~[cas.war:?]
    at org.springframework.boot.loader.Launcher.launch(Launcher.java:87) ~[cas.war:?]
    at org.springframework.boot.loader.Launcher.launch(Launcher.java:50) ~[cas.war:?]
    at org.springframework.boot.loader.WarLauncher.main(WarLauncher.java:59) ~[cas.war:?]
Caused by: org.apache.catalina.LifecycleException: Protocol handler start failed
    at org.apache.catalina.connector.Connector.startInternal(Connector.java:1020) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    ... 20 more
Caused by: java.lang.IllegalArgumentException: No aliases for private keys found in key store
    at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:116) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:87) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:225) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.tomcat.util.net.AbstractEndpoint.start(AbstractEndpoint.java:1150) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.coyote.AbstractProtocol.start(AbstractProtocol.java:591) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.catalina.connector.Connector.startInternal(Connector.java:1018) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    ... 20 more
Caused by: java.io.IOException: No aliases for private keys found in key store
    at org.apache.tomcat.util.net.jsse.JSSEUtil.getKeyManagers(JSSEUtil.java:233) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:114) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:87) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:225) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.tomcat.util.net.AbstractEndpoint.start(AbstractEndpoint.java:1150) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.coyote.AbstractProtocol.start(AbstractProtocol.java:591) ~[tomcat-coyote-8.5.32.jar!/:8.5.32]
    at org.apache.catalina.connector.Connector.startInternal(Connector.java:1018) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) ~[tomcat-catalina-8.5.32.jar!/:8.5.32]
    ... 20 more
root@umuta:~#

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALwryzGiNyyQMw_stfPKxfX5rQr8YNuXornK5er%2B46KAC16N5g%40mail.gmail.com.

[Jason Sherman]

2018-09-20 12:23:33,448 INFO [org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator] - <Configuration directory [/etc/cas/config] is not a directory or cannot be found at the specific path>

 

Your container doesn't have a config directory, and

 

Caused by: java.lang.IllegalArgumentException: No aliases for private keys found in key store

It looks like the keystore hasn't been setup in your container, either.

If you use

https://github.com/apereo/cas-webapp-docker

instead of putting together your own Dockerfile, this should be taken care of for you.

Otherwise, you'll have to make sure that you put all the things in place that CAS needs to work that are unique to a given CAS instance, like configuration and encryption keys. The images themselves (rightly) don't have any of that stuff.

To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAGdX6GaVg-MisYf%2BVUObpubqunmgMDZwn9hGCjVgqzO%2B-mT4rw%40mail.gmail.com.