Misagh, I set a 30 second skew allowance and set the logs to be Debug and tried again. I see these DEBUG messages:
2016-07-29 10:28:44,286 DEBUG [org.jasig.cas.support.saml.authentication.principal.SamlServiceFactory] - Request does not specify a TARGET or request body is empty 2016-07-29 10:28:44,287 DEBUG [org.jasig.cas.support.saml.authentication.principal.GoogleAccountsServiceResponseBuilder] - Using 30000 seconds as skew allowance. 2016-07-29 10:28:44,287 DEBUG [org.jasig.cas.web.support.DefaultArgumentExtractor] - Created [my_service_url] based on org.jasig.cas.support.saml.authentication.principal.GoogleAccountsServiceFactory@54e059ef<mailto:org.jasig.cas.support.saml.authentication.principal.GoogleAccountsServiceFactory@54e059ef> 2016-07-29 10:28:44,288 DEBUG [org.jasig.cas.web.support.DefaultArgumentExtractor] - Extractor generated service for: [my_service_url] 2016-07-29 10:28:44,288 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Placing service in context scope: [my_service_url] 2016-07-29 10:28:44,288 DEBUG [org.jasig.cas.web.flow.InitialFlowSetupAction] - Placing service in context scope: [my_service_url] The logs go on and everything seems fine, it says I authenticated successfully, resolves my attributes from LDAP, and creates a ticket, then I see this error message: 2016-07-29 10:29:00,656 DEBUG [org.jasig.cas.services.DefaultRegisteredServiceUsernameProvider] - Returning the default principal id [david.abney] for username. 2016-07-29 10:29:00,663 DEBUG [org.jasig.cas.web.FlowExecutionExceptionResolver] - Ignoring the received exception due to a type mismatch org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing [AnnotatedAction@44e71d85 targetAction = [EvaluateAction@ab8416b expression = flowScope.service.getResponse(requestScope.serviceTicketId), resultExpression = requestScope.response], attributes = map[[empty]]] in state 'redirect' of flow 'login' -- action execution attributes were 'map[[empty]]' at org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:60) at org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:101) at org.springframework.webflow.engine.State.enter(State.java:194) at org.springframework.webflow.engine.Transition.execute(Transition.java:228) Does that help? Thanks, –––––––––––––––––––– David Abney ITS Web Developer/Programmer 600 West Walnut Street Danville, Kentucky 40422 859.238.5761 [email_logo] www.centre.edu<http://www.centre.edu/> From: [email protected] [mailto:[email protected]] On Behalf Of Misagh Moayyed Sent: Friday, July 29, 2016 10:20 AM To: [email protected] Subject: Re: [cas-user] Google Apps Integration Problem Working theory: Turn your CAS logs up to DEBUG. Set a skewAllowance for googleApps to some value. Watch the logs next when you redeploy and see whether you spot the same error, or you actually see a relevant log entry about the skew allowance setting. -- Misagh From: David Abney <[email protected]><mailto:[email protected]> Reply: David Abney <[email protected]><mailto:[email protected]> Date: July 29, 2016 at 6:27:22 AM To: [email protected]<mailto:[email protected]> <[email protected]><mailto:[email protected]> Subject: [cas-user] Google Apps Integration Problem I am currently updating to CAS v4.2.3 and trying to setup an application that uses the Google Apps integration with CAS. I believe I tested this setup and it worked in 4.1.x. Anyway, whenever I try to login to CAS, I am able to authenticate with my active directory username and password, but then I get an error message that “CAS is unavailable”. The other services that don’t use the Google Apps integration are working just fine. In the tomcat error log I get this message: SEVERE: Servlet.service() for servlet [cas] in context with path [/cas] threw exception [Request processing failed; nested exception is org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing [AnnotatedAction@40cf8796 targetAction = [EvaluateAction@78ceaa17 expression = flowScope.service.getResponse(requestScope.serviceTicketId), resultExpression = requestScope.response], attributes = map[[empty]]] in state 'redirect' of flow 'login' -- action execution attributes were 'map[[empty]]'] with root cause java.lang.NullPointerException at org.jasig.cas.support.saml.authentication.principal.GoogleAccountsServiceResponseBuilder.constructSamlResponse(GoogleAccountsServiceResponseBuilder.java:119) at org.jasig.cas.support.saml.authentication.principal.GoogleAccountsServiceResponseBuilder.build_aroundBody0(GoogleAccountsServiceResponseBuilder.java:62) at org.jasig.cas.support.saml.authentication.principal.GoogleAccountsServiceResponseBuilder$AjcClosure1.run(GoogleAccountsServiceResponseBuilder.java:1) … I assume this process is failing because the attribute map is empty, but I don’t know how to fix this problem. I have attached a copy of my deployerConfigContext file. Also, my Google Apps settings are in the cas.properties file. Any thoughts on why this is occuring? Thanks, –––––––––––––––––––– David Abney ITS Web Developer/Programmer 600 West Walnut Street Danville, Kentucky 40422 859.238.5761 [email_logo] www.centre.edu<http://www.centre.edu/> -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To post to this group, send email to [email protected]<mailto:[email protected]>. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/bcd5c0d98a1149a0a46ab2ef131f0bd9%40Exchange-MB2.centre.edu<https://groups.google.com/a/apereo.org/d/msgid/cas-user/bcd5c0d98a1149a0a46ab2ef131f0bd9%40Exchange-MB2.centre.edu?utm_medium=email&utm_source=footer>. For more options, visit https://groups.google.com/a/apereo.org/d/optout. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To post to this group, send email to [email protected]<mailto:[email protected]>. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.579b65fa.6f0b0585.29c2%40unicon.net<https://groups.google.com/a/apereo.org/d/msgid/cas-user/etPan.579b65fa.6f0b0585.29c2%40unicon.net?utm_medium=email&utm_source=footer>. For more options, visit https://groups.google.com/a/apereo.org/d/optout. -- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/a/apereo.org/group/cas-user/. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/d7ce120c8fb74255a244f7c3b873e5b8%40Exchange-MB2.centre.edu. For more options, visit https://groups.google.com/a/apereo.org/d/optout.
