jasig-cas IRC Logs-2011-10-19

Owned by Apereo Infrastructure
Last updated: Oct 19, 2011Version comment
11 min read

[03:27:21 CDT(-0500)] <RaviJK> sreeveturi Hi

[06:59:22 CDT(-0500)] <foxnesn1> ?

[07:35:49 CDT(-0500)] <foxnesn> RaviJK: you are having all kinds of connection issues

[08:04:25 CDT(-0500)] <RaviJK_> foxnesn yeah .. all sorts of things

[08:04:30 CDT(-0500)] <RaviJK_> now i have two logins .

[08:04:34 CDT(-0500)] <foxnesn> hehe

[08:19:23 CDT(-0500)] <foxnesn> lol where's atilling or serac

[08:40:05 CDT(-0500)] <shintaku> if i want to modify the org.jasig.cas.adaptors.jdbc.SearchModeSearchDatabaseAuthenticationHandler to change its behavior, should I create a new class in that package? or create my own package with a new class? I just need to tap into the parent pom with the latter.

[10:35:55 CDT(-0500)] <foxnesn> could someone explain what the gateway value means in CAS ?

[10:49:05 CDT(-0500)] <kickehy> wish i could (tongue)

[10:49:18 CDT(-0500)] <foxnesn> hey kickehy !

[10:49:30 CDT(-0500)] <foxnesn> i almost have my password self service working!

[10:50:05 CDT(-0500)] <foxnesn> ive got it to talk with CAS and i can manually run the commandservlet to check password expirations,responses,etc but i cant seem get it working in my webflow

[10:50:05 CDT(-0500)] <kickehy> nice!

[10:50:52 CDT(-0500)] <kickehy> sounds like it'll be neat (smile)

[10:52:12 CDT(-0500)] <foxnesn> i hope so

[12:20:24 CDT(-0500)] <foxnesn> all the pros must be out today

[13:14:19 CDT(-0500)] <foxnesn> hey kickey why did you get service management working again?

[13:24:46 CDT(-0500)] <foxnesn> er kickehy . heh

[13:32:27 CDT(-0500)] <kickehy> well, it limits what can access your cas server

[13:32:42 CDT(-0500)] <kickehy> for example

[13:33:08 CDT(-0500)] <kickehy> if someone setup their own moodle server and pointed it at your cas server they could use it

[13:33:43 CDT(-0500)] <kickehy> when you enable the service management, you put in the allowed services/web addresses that can access your cas server

[13:34:28 CDT(-0500)] <kickehy> like: https://moodle.domain.edu/**

[13:35:17 CDT(-0500)] <kickehy> that would tell CAS that an page within moodle.domain.edu is allowed to use CAS

[13:35:28 CDT(-0500)] <kickehy> s/an/any

[13:37:06 CDT(-0500)] <kickehy> you could even lock it down further if you wanted to and say https://moodle.domain.edu/login

[13:42:35 CDT(-0500)] <foxnesn> ahh

[13:42:42 CDT(-0500)] <foxnesn> ok prolly will want that in the future

[13:42:52 CDT(-0500)] <foxnesn> how did you you enable it? im not seeing any real docs

[13:42:57 CDT(-0500)] <foxnesn> prolly not looking hard enough

[13:47:15 CDT(-0500)] <kickehy> you need to make sure that you change 'localhost' in your cas.properties to casserver.domain.edu

[13:47:37 CDT(-0500)] <kickehy> then browse to https://casserver.domain.edu/cas/services

[13:48:06 CDT(-0500)] <kickehy> and MAKE SURE the first thing you do is add the cas server as a service

[13:48:20 CDT(-0500)] <kickehy> it'll tell you what the service name is the first time you login

[13:48:26 CDT(-0500)] <kickehy> in big red letters

[13:48:42 CDT(-0500)] <kickehy> warning you that if you don't add it you won't be able to login to your cas server

[13:50:17 CDT(-0500)] <kickehy> https://wiki.jasig.org/display/CASUM/Services+Management

[13:50:32 CDT(-0500)] <kickehy> https://wiki.jasig.org/display/CASUM/Editing

[13:51:19 CDT(-0500)] <kickehy> https://wiki.jasig.org/display/CASUM/Configuring <---I did not do the pooling method

[13:53:25 CDT(-0500)] <foxnesn> hrm...ok illl give it a look

[13:54:01 CDT(-0500)] <foxnesn> im wondering if i set the services then i can make CAS do the redirect I want based on the service the user is requesting

[13:55:51 CDT(-0500)] <foxnesn> did you change host.name in your cas.properties?

[13:55:58 CDT(-0500)] <foxnesn> right now mine says host.name=cas

[13:55:59 CDT(-0500)] <kickehy> i think as long as you added that commons-dbcp dependency and left the default serviceRegistryDao in your deployerConfig...you should be able to run it

[13:56:05 CDT(-0500)] <kickehy> no, that's fine

[13:56:13 CDT(-0500)] <kickehy> just ther server.prefix

[13:56:26 CDT(-0500)] <kickehy> at the top

[13:56:37 CDT(-0500)] <kickehy> at least i think it was called server.prefix

[13:56:40 CDT(-0500)] <foxnesn> i didnt add any dependencies in the pom

[13:57:56 CDT(-0500)] <kickehy> and the hibernate dependency

[13:57:58 CDT(-0500)] <kickehy> lol

[13:58:48 CDT(-0500)] <kickehy> and you have to add the "allowed users" to the deployerConfig...

[13:58:48 CDT(-0500)] <foxnesn> i dont see any of this in the wiki

[13:58:58 CDT(-0500)] <kickehy> https://wiki.jasig.org/display/CASUM/Configuring

[13:59:14 CDT(-0500)] <kickehy> hehe the cas.properties stuff isn't in there

[13:59:21 CDT(-0500)] <foxnesn> lol

[13:59:26 CDT(-0500)] <kickehy> serac helped me get it working the other day

[13:59:30 CDT(-0500)] <foxnesn> i remember that

[13:59:33 CDT(-0500)] <foxnesn> which i asked you hehe

[13:59:55 CDT(-0500)] <kickehy> you did? >.> <.<

[14:00:21 CDT(-0500)] <foxnesn> what's >.> <.< ?

[14:01:36 CDT(-0500)] <foxnesn> also did you setup a database for the persistent data?

[14:02:33 CDT(-0500)] <kickehy> look left/look right....easiest way to describe it is that i was sarcastically saying "you did?" but really did remember you asking

[14:02:50 CDT(-0500)] <kickehy> shifty eyes

[14:02:52 CDT(-0500)] <kickehy> heh

[14:03:00 CDT(-0500)] <kickehy> meh....just ignore me lol

[14:03:12 CDT(-0500)] <kickehy> and yes, i setup a mysql database

[14:03:16 CDT(-0500)] <foxnesn> hrm

[14:03:33 CDT(-0500)] <foxnesn> that bites, another thing to manage

[14:03:54 CDT(-0500)] <kickehy> somewhat, it's mainly for ticket tracking

[14:04:09 CDT(-0500)] <kickehy> and i think it clears its tickets out every so often

[14:04:24 CDT(-0500)] <foxnesn> what happens if you have this setup in an HA environment?

[14:12:16 CDT(-0500)] <kickehy> not sure

[14:12:28 CDT(-0500)] <kickehy> i don't have a HA environment

[14:12:37 CDT(-0500)] <foxnesn> so you set it up pretty much like the wiki then

[14:12:46 CDT(-0500)] <foxnesn> copy/paste in the new stuff in the deployer

[14:12:52 CDT(-0500)] <foxnesn> changed some info in the datasource

[14:15:00 CDT(-0500)] <kickehy> for the most part

[14:15:29 CDT(-0500)] <foxnesn> did you compley erase the in memory dao from your deployer?

[14:15:37 CDT(-0500)] <foxnesn> completely

[14:15:59 CDT(-0500)] <kickehy> let me check....

[14:18:06 CDT(-0500)] <kickehy> <bean id="serviceRegistryDao" class="org.jasig.cas.services.JpaServiceRegistryDaoImpl" p:entityManagerFactory-ref="entityManagerFactory" />

[14:18:22 CDT(-0500)] <kickehy> so i'm calling the entityManagerFactory bean which is in.....

[14:19:10 CDT(-0500)] <kickehy> ticketRegistry.xml

[14:19:24 CDT(-0500)] <kickehy> <bean id="entityManagerFactory"

[14:19:25 CDT(-0500)] <kickehy> class="org.springframework.orm.jpa.LocalContainerEntityManagerFactoryBean">

[14:19:27 CDT(-0500)] <kickehy> <property name="dataSource" ref="dataSource"/>

[14:19:30 CDT(-0500)] <kickehy> <property name="jpaVendorAdapter">

[14:19:32 CDT(-0500)] <kickehy> <bean class="org.springframework.orm.jpa.vendor.HibernateJpaVendorAdapter">

[14:19:35 CDT(-0500)] <kickehy> <property name="generateDdl" value="true"/>

[14:19:38 CDT(-0500)] <kickehy> <property name="showSql" value="true" />

[14:19:41 CDT(-0500)] <kickehy> </bean>

[14:19:43 CDT(-0500)] <kickehy> </property>

[14:19:45 CDT(-0500)] <kickehy> <property name="jpaProperties">

[14:19:48 CDT(-0500)] <kickehy> <props>

[14:19:49 CDT(-0500)] <foxnesn> ahh k got it

[14:19:50 CDT(-0500)] <kickehy> <!-- Use MySQLDialect at your own risk. See MySQL section below for details. -->

[14:19:53 CDT(-0500)] <kickehy> <prop key="hibernate.dialect">org.hibernate.dialect.MySQL5InnoDBDialect</prop>

[14:19:56 CDT(-0500)] <kickehy> <prop key="hibernate.hbm2ddl.auto">update</prop>

[14:19:59 CDT(-0500)] <kickehy> </props>

[14:20:02 CDT(-0500)] <kickehy> </property>

[14:20:04 CDT(-0500)] <kickehy> </bean>

[14:20:06 CDT(-0500)] <kickehy> oh duh

[14:20:09 CDT(-0500)] <kickehy> pastie

[14:20:11 CDT(-0500)] <kickehy> i always forget

[14:20:14 CDT(-0500)] <kickehy> my bad all (tongue)

[14:20:16 CDT(-0500)] <kickehy> http://pastie.org/2725554

[14:21:32 CDT(-0500)] <foxnesn> so you are not using the transation manager?

[14:21:39 CDT(-0500)] <foxnesn> transaction

[14:22:34 CDT(-0500)] <kickehy> the transactionmanager just points at the entitymanagerfactory

[14:22:48 CDT(-0500)] <kickehy> <bean id="transactionManager"

[14:22:48 CDT(-0500)] <kickehy> class="org.springframework.orm.jpa.JpaTransactionManager"

[14:22:48 CDT(-0500)] <kickehy> p:entityManagerFactory-ref="entityManagerFactory" />

[14:22:48 CDT(-0500)] <kickehy>

[14:22:49 CDT(-0500)] <kickehy> <tx:annotation-driven transaction-manager="transactionManager" />

[14:23:23 CDT(-0500)] <foxnesn> right, just curious if you are using it, not sure if you did not include in the pastie for a special reason

[14:24:13 CDT(-0500)] <kickehy> http://pastie.org/2725571

[14:24:22 CDT(-0500)] <kickehy> that's my whole ticketregistry.xml

[14:25:17 CDT(-0500)] <kickehy> https://wiki.jasig.org/display/CASUM/JpaTicketRegistry

[14:25:22 CDT(-0500)] <foxnesn> the wiki for services manangement doesnt say anything about having to setup a ticket reg

[14:26:24 CDT(-0500)] <kickehy> maybe i went down the wrong rabbit hole...

[14:27:45 CDT(-0500)] <kickehy> i don't think you have to worry about the ticket registry if you're just using the inmemorydao

[14:28:14 CDT(-0500)] <foxnesn> but im not

[14:28:15 CDT(-0500)] <foxnesn> lol

[14:28:20 CDT(-0500)] <kickehy> <bean id="serviceRegistryDao" class="org.jasig.cas.services.InMemoryServiceRegistryDaoImpl" />

[14:28:24 CDT(-0500)] <foxnesn> im using the persistent one in a mysql db

[14:28:33 CDT(-0500)] <kickehy> I think you just want to leave that in your deployerconfig

[14:28:34 CDT(-0500)] <kickehy> lol

[14:28:45 CDT(-0500)] <foxnesn> the wiki says to replace it

[14:28:46 CDT(-0500)] <kickehy> i confused myself (tongue)

[14:29:11 CDT(-0500)] <kickehy> yes, it suggest you replace it with something

[14:29:21 CDT(-0500)] <kickehy> which is why i did the jpaticketregistry

[14:29:34 CDT(-0500)] <foxnesn> cause then on app restart all of that data goes away and people lose tickets if signed on

[14:32:27 CDT(-0500)] <foxnesn> i thnk since you are not setting up HA you dont need to do the jpa

[14:32:54 CDT(-0500)] <foxnesn> if you look in the wiki for the services you will see you set it up there and its default attributes does the rest

[14:33:27 CDT(-0500)] <kickehy> i forget why i did it, but i remember it wasn't because of HA

[14:33:33 CDT(-0500)] <kickehy> lol

[14:33:40 CDT(-0500)] <foxnesn> well nhow you have one step done for HA

[14:33:44 CDT(-0500)] <kickehy> atilling sent me down that path

[14:34:14 CDT(-0500)] <foxnesn> sometimes these wikis are...confusing...

[14:35:45 CDT(-0500)] <kickehy> heh

[14:36:03 CDT(-0500)] <kickehy> i bet they make sense/flow for the people who wrote them (tongue)

[14:36:10 CDT(-0500)] <kickehy> <3 all you guys

[14:37:26 CDT(-0500)] <foxnesn> yea lol

[14:37:31 CDT(-0500)] <foxnesn> confusing to a noob like me obviously

[14:37:59 CDT(-0500)] <foxnesn> the two of us could write a pretty nice how-to probably

[14:38:34 CDT(-0500)] <foxnesn> mainly describing which pieces you will need

[14:41:13 CDT(-0500)] <foxnesn> are you positive that data is actually being stored in your mysql db? did you check?

[14:52:10 CDT(-0500)] <kickehy> when it grants tickets yes

[14:52:17 CDT(-0500)] <foxnesn> ok

[14:52:30 CDT(-0500)] <foxnesn> <dependency> <groupId>commons-dbcp</groupId> <artifactId>commons-dbcp</artifactId> <version>1.4</version> <scope>runtime</scope>

[14:52:35 CDT(-0500)] <foxnesn> </dependency>

[14:52:42 CDT(-0500)] <foxnesn> so you know what the dependency is for mysql ?

[14:52:45 CDT(-0500)] <kickehy> yep as long as you're using java 6

[14:52:53 CDT(-0500)] <kickehy> yeah hold on

[14:53:01 CDT(-0500)] <foxnesn> whatever you are using i guess

[14:53:23 CDT(-0500)] <kickehy> <dependency>

[14:53:23 CDT(-0500)] <kickehy> <groupId>mysql</groupId>

[14:53:23 CDT(-0500)] <kickehy> <artifactId>mysql-connector-java</artifactId>

[14:53:23 CDT(-0500)] <kickehy> <version>5.1.18</version>

[14:53:23 CDT(-0500)] <kickehy> <scope>runtime</scope>

[14:53:25 CDT(-0500)] <kickehy> </dependency>

[14:53:32 CDT(-0500)] <foxnesn> where did you find that?

[14:55:50 CDT(-0500)] <kickehy> https://wiki.jasig.org/display/CASUM/End-to-end+Windows+Example#End-to-endWindowsExample-TheStarterPom <---but i went to the link under the JDBC section on https://wiki.jasig.org/display/CASUM/JpaTicketRegistry

[14:56:04 CDT(-0500)] <kickehy> and followed the link which told me what the most recent version was

[14:57:00 CDT(-0500)] <foxnesn> yikes

[14:58:47 CDT(-0500)] <foxnesn> ok here goes

[15:00:21 CDT(-0500)] <kickehy> did you install mysql first?

[15:00:24 CDT(-0500)] <foxnesn> bah cas wont deploy

[15:00:25 CDT(-0500)] <foxnesn> yea

[15:00:34 CDT(-0500)] <foxnesn> already have that running for the password self service

[15:00:48 CDT(-0500)] <kickehy> ah

[15:01:05 CDT(-0500)] <kickehy> did you create the "locks" table as well?

[15:01:20 CDT(-0500)] <foxnesn> no

[15:01:41 CDT(-0500)] <kickehy> https://wiki.jasig.org/display/CASUM/JpaTicketRegistry <---locks table section

[15:01:53 CDT(-0500)] <kickehy> that gives you the mysql cli line to run

[15:02:02 CDT(-0500)] <foxnesn> but that isnt mentioned in setting up the services lol

[15:02:16 CDT(-0500)] <foxnesn> i would assume if it were required it would be mentioned in the services wiki

[15:02:38 CDT(-0500)] <kickehy> oh...this is for setting up the jpaticketregistry

[15:02:42 CDT(-0500)] <foxnesn> it should include directions for setting up the ticket reg if it is required for service management

[15:03:20 CDT(-0500)] <foxnesn> The prefix "tx" for element "tx:annotation-driven" is not bound.

[15:03:22 CDT(-0500)] <foxnesn> that's my error

[15:04:42 CDT(-0500)] <foxnesn> looks like i have to setup jpa lol

[15:04:50 CDT(-0500)] <kickehy> heh

[15:04:58 CDT(-0500)] <kickehy> i wish i could be more clear for you

[15:05:08 CDT(-0500)] <kickehy> i don't 100% fully understand it all

[15:05:17 CDT(-0500)] <foxnesn> im assuming "is not bound" means it doesnt know what "transationManager" is pointing to since it is not created

[15:05:42 CDT(-0500)] <foxnesn> it's fine, it is a learning experience

[15:05:49 CDT(-0500)] <kickehy> agreed

[15:05:54 CDT(-0500)] <foxnesn> documenting this is going to a freaking manual

[15:05:58 CDT(-0500)] <kickehy> it made sense the other day (tongue)

[15:07:23 CDT(-0500)] <kickehy> yeah...i only just started my documenation on it

[15:07:34 CDT(-0500)] <kickehy> i've been sidetracked with this wireless project

[15:08:00 CDT(-0500)] <kickehy> but i guess based on my priority of projects....CAS has sidetracked my wireless project

[15:08:18 CDT(-0500)] <foxnesn> really? who decided the priority

[15:08:26 CDT(-0500)] <kickehy> my boss

[15:08:30 CDT(-0500)] <foxnesn> ah

[15:08:37 CDT(-0500)] <foxnesn> you showed him your progress

[15:08:43 CDT(-0500)] <foxnesn> and i bet he got all excited

[15:09:12 CDT(-0500)] <kickehy> well...he's not a huge fan of SSO

[15:09:18 CDT(-0500)] <foxnesn> why not?

[15:09:45 CDT(-0500)] <kickehy> plus...the only reason we started this project is because that's how orgsync said to do it

[15:09:54 CDT(-0500)] <kickehy> foxnesn: not too sure

[15:10:15 CDT(-0500)] <kickehy> old school maybe?

[15:11:07 CDT(-0500)] <foxnesn> ahh

[15:15:41 CDT(-0500)] <kickehy> i can see it being very useful for non-critical applications, and by non critical i mean our Admin system

[15:15:50 CDT(-0500)] <kickehy> wait

[15:16:00 CDT(-0500)] <kickehy> take that second non out of there

[15:16:11 CDT(-0500)] <kickehy> admin system would be considered critical

[15:16:12 CDT(-0500)] <foxnesn> hehe

[15:16:12 CDT(-0500)] <kickehy> hehe

[15:16:35 CDT(-0500)] <kickehy> plus the password policy they have on the admin system is insane

[15:16:50 CDT(-0500)] <foxnesn> at least 64 characters

[15:16:51 CDT(-0500)] <foxnesn> lol

[15:17:06 CDT(-0500)] <kickehy> it's more of the fact your password expires every 3 months

[15:17:15 CDT(-0500)] <kickehy> and it remembers the last 5 passwords you entered

[15:17:24 CDT(-0500)] <foxnesn> what wow

[15:17:28 CDT(-0500)] <kickehy> i don't even try logging in anymore

[15:17:35 CDT(-0500)] <kickehy> i just hit the password reset button

[15:17:39 CDT(-0500)] <foxnesn> haha

[15:18:51 CDT(-0500)] <foxnesn> what day were you working with atilling on this?

[15:18:58 CDT(-0500)] <foxnesn> i can check it in the irc log

[15:19:22 CDT(-0500)] <kickehy> ummm i think thursday or friday

[15:19:32 CDT(-0500)] <foxnesn> ok

[15:19:47 CDT(-0500)] <foxnesn> im wrapping up here and dont want to get more into this hah

[15:20:02 CDT(-0500)] <kickehy> haha

[15:20:51 CDT(-0500)] <foxnesn> so he told you NOT to include the transation manager in your deployer BUT to include it in the ticketregistry?

[15:21:52 CDT(-0500)] <kickehy> well he didn't say that, that's just what the wiki did

[15:22:17 CDT(-0500)] <foxnesn> so you have them in both?

[15:22:30 CDT(-0500)] <foxnesn> cause the service manager wiki has it and so does the ticket reg

[15:22:43 CDT(-0500)] <foxnesn> in fact having both as is would include a ton of redundant info

[15:23:05 CDT(-0500)] <kickehy> the two wiki articles kind of overlap

[15:23:40 CDT(-0500)] <foxnesn> i wonder if including it in both would make duplicate entries in the db somehow

[15:23:48 CDT(-0500)] <kickehy> the services registry one has the transaction manager/ticket registry setup a different way than the jpaticketregistry wiki says

[15:23:58 CDT(-0500)] <kickehy> and!

[15:24:10 CDT(-0500)] <kickehy> it'll probably error on you anyways

[15:24:20 CDT(-0500)] <kickehy> because you'll have two beans that are trying to do the same thing

[15:24:26 CDT(-0500)] <foxnesn> right

[15:24:43 CDT(-0500)] <kickehy> since those individual xml files get made into one big one at runtime

[15:24:46 CDT(-0500)] <foxnesn> no wonder institutions just pay these guys to do it haha

[15:25:55 CDT(-0500)] <kickehy> since i already had the transaction manager setup inside the ticketregistry.xml...i didn't need to add it to the deployerconfig like the services registry wiki states

[15:26:06 CDT(-0500)] <foxnesn> i see

[15:26:19 CDT(-0500)] <kickehy> and in fact i do recall asking that question to atilling

[15:30:38 CDT(-0500)] <kickehy> at least you're not documenting switch ports

[15:30:55 CDT(-0500)] <kickehy> and putting descriptions on them all

[22:53:26 CDT(-0500)] <foxnesn1> im trying to setup pooling and i keep meeting the error:

[22:53:53 CDT(-0500)] <foxnesn1> Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'poolingContextSource' defined in ServletContext resource [/WEB-INF/deployerConfigContext.xml]: Instantiation of bean failed; nested exception is java.lang.NoClassDefFoundError: org/apache/commons/pool/KeyedObjectPool

[22:54:16 CDT(-0500)] <foxnesn1> i setup pooledcontextsource just like the wiki describes

[22:54:23 CDT(-0500)] <foxnesn1> and put the pooled properties in cas.properties

[22:55:01 CDT(-0500)] <foxnesn1> if i remove pooledcontextsource bean and its reference in the ldapbind then it runs fine

[22:55:05 CDT(-0500)] <foxnesn1> something about that line...

[22:57:49 CDT(-0500)] <foxnesn1> looks like i need a jar for pooling but the wiki has no mention of it

[23:08:24 CDT(-0500)] <foxnesn1> ah, i had to add commons-pool-1.5.2.jar to tomcat lib to get pooling to work