Indeed!! El sábado, 10 de febrero de 2018, Dmitriy Kopylenko <[email protected]> escribió:
> Thanks for confirming. Sounds like a bug to me. > > D. > > > > > On Sat, Feb 10, 2018 at 12:01 PM -0500, "Brian Davidson" < > [email protected]> wrote: > > I have tried that. Duo works when I disable the bypass facility. When I >> enable it, if bypass script returns false, single factor works and I don’t >> get a 500 error. If the groovy script returns true, I get the 500 error. >> >> So, the Duo integration is working. The bypass groovy script definitely >> is getting called, and it definitely should return a boolean, not a string. >> >> 2018-02-09 15:04:55,638 DEBUG >> [org.springframework.webflow.engine.impl.FlowExecutionImpl] >> - <Attempting to handle >> [org.springframework.webflow.execution.FlowExecutionException: >> Exception thrown in state 'viewLoginFormDuo' of flow 'mfa-duo'] with root >> cause [java.io.NotSerializableException: org.springframework.core.io. >> UrlResource]> >> >> Seems like Spring web flow with the duo flow is not happy with something >> when the bypass script is in place, but it’s fine when bypass isn’t in >> place. >> >> Thanks! >> >> Brian >> >> On Feb 10, 2018, at 11:38 AM, Dmitriy Kopylenko <[email protected]> >> wrote: >> >> Let me suggest to get the Groovy script out of equation completely. >> Switch this groovy bypass off, and try to perform entire duo 2 factor >> authentication transaction. If it completes successfully and then you again >> enable groovy bypass and then after it you get the failures that you are >> seeing, then the problem indeed is somewhere in that bypass facility. >> >> Cheers, >> D. >> >> >> >> >> On Sat, Feb 10, 2018 at 11:29 AM -0500, "Brian Davidson" < >> [email protected]> wrote: >> >> Switching the function to return a String instead of a boolean, I get: >>> >>> 2018-02-10 11:25:06,033 ERROR [org.apereo.cas.util.ScriptingUtils] - >>> <Result [mfa-duo is of type class java.lang.String when we were expecting >>> class java.lang.Boolean> >>> java.lang.ClassCastException: Result [mfa-duo is of type class >>> java.lang.String when we were expecting class java.lang.Boolean >>> >>> … >>> >>> 2018-02-10 11:25:06,952 ERROR [org.apereo.cas.authentication. >>> GroovyMultifactorAuthenticationProviderBypass] - <null> >>> java.lang.NullPointerException: null >>> at org.apereo.cas.authentication.GroovyMultifactorAuthenticatio >>> nProviderBypass.shouldMultifactorAuthenticationProviderExecute( >>> GroovyMultifactorAuthenticationProviderBypass.java:40) >>> ~[cas-server-core-authentication-mfa-5.2.2-SNAPSHOT.jar:5.2.2-SNAPSHOT] >>> >>> … >>> >>> >>> >>> >>> >>> On Feb 10, 2018, at 10:14 AM, Man H <[email protected]> wrote: >>> >>> Try returning string "mfa-duo" or null >>> >>> El sábado, 10 de febrero de 2018, Brian Davidson <[email protected]> >>> escribió: >>> >>>> I changed it from info to warn: >>>> >>>> 2018-02-10 08:54:07,061 WARN [org.apereo.cas.authentication >>>> .GroovyMultifactorAuthenticationProviderBypass] - <Evaluating >>>> principal attributes [businessCategory:[Employee, Staff], cn:Brian >>>> Davidson, ctCalDefaultNoteReminder:0:0, ctCalDefaultReminder:0:10, >>>> ctCalDefaultTaskReminder:0:0, ctCalDisplayPrefs:4:480:1080:1:30:190:2, >>>> ctCalLanguageId:0, ctCalNotifMechanism:1, ctCalOperatingPrefs:0:255:0:0: >>>> 0:0:0:1440:0:1440:0:0:1440:0:1440:0:0:1440:0:1440:0:0:1440:0 >>>> :1440:0:0:1440:0:1440:0:0:1440:0:1440:0:0:1440:0:1440, >>>> ctCalPasswordRequired:1, ctCalPublishedType:0, ctCalRefreshPrefs:1:60, >>>> ctCalSMSTimeRange:0:0, ctCalSysopCanWritePassword:0, ctCalTimezone:0, >>>> ctCalXItemId:10101:02238, eduPersonAffiliation:[member, staff], gecos:Brian >>>> Davidson, gidNumber:5137, givenName:Brian, gmuBannerGUID:REDACTED, >>>> gmuemployeestatus:C, gmugnumber:REDACTED, gmuMLPwdChanged:20170127190453Z, >>>> gmurup:true, gmusecurityquiz:1487691778, homeDirectory:REDACTED, >>>> iplanet-am-modifiable-by:cn=Top-level Admin Role,o=gmu.edu, >>>> l:opted-in-201103021755, loginShell:/bin/bash, mail:REDACTED, >>>> mailAllowedServiceAccess:-imap,pop,http,smtp:*, >>>> mailAlternateAddress:REDACTED, mailDeliveryOption:mailbox, mailHost: >>>> gmuedu.onmicrosoft.com, mailQuota:1048576000, >>>> mailRoutingAddress:REDACTED, nsmsgDisallowAccess:imap pop http smtp, >>>> nswmExtendedUserPrefs:[meTrashFolder=Trash, meSentFolder=Sent, >>>> meDraftFolder=Drafts, meInitialized=true], objectClass:[posixAccount, >>>> sunUCPreferences, mailrecipient, iplanetPreferences, >>>> inetLocalMailRecipient, iplanet-am-managed-person, inetOrgPerson, >>>> inetAdmin, ctCalUser, inetMailUser, iplanet-am-user-service, gmuPerson, >>>> shadowAccount, userPresenceProfile, inetUser, top, person, >>>> organizationalPerson, ipuser, eduPerson, account], >>>> ou=people,o=gmu.edu,o=pab, >>>> sn:Davidson, uid:REDACTED, uidNumber:888, userPassword:REDACTED]> >>>> >>>> On Feb 10, 2018, at 8:43 AM, Man H <[email protected]> wrote: >>>> >>>> Could you try this >>>> >>>> def boolean run(final Object... args){ >>>> def authentication = args[0] >>>> def principal = args[1] >>>> def service = args[2] >>>> def provider = args[3] >>>> def logger = args[4] >>>> def httpRequest = args[5] >>>> >>>> logger.info("Evaluating principal attributes >>>> ${principal.attributes}") >>>> >>>> return true >>>> } >>>> >>>> >>>> El sábado, 10 de febrero de 2018, Brian Davidson <[email protected]> >>>> escribió: >>>> >>>>> Removed that dependency and still git the same 500 error and same >>>>> stack trace. >>>>> >>>>> On Feb 10, 2018, at 7:20 AM, Man H <[email protected]> wrote: >>>>> >>>>> Why you hace this >>>>> >>>>> >>>>> <dependency> >>>>> <groupId>javax.servlet</groupId> >>>>> <artifactId>servlet-api</artifactId> >>>>> <version>2.5</version> >>>>> <type>jar</type> >>>>> </dependency> >>>>> >>>>> >>>>> El sábado, 10 de febrero de 2018, Brian Davidson <[email protected]> >>>>> escribió: >>>>> >>>>>> Running on apache-tomcat-8.5.24, so that should be servlet v3.1.x. >>>>>> >>>>>> Yes, this is CAS version 5.2.2. >>>>>> >>>>>> CAS w/ Duo works with no bypass groovy script in place. CAS works >>>>>> with bypass groovy script that returns false. We’re just getting the >>>>>> exception when the groovy script returns true. >>>>>> >>>>>> Thanks again for all the help! >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> External >>>>>> >>>>>> A CAS deployment may be deployed to any number of external servlet >>>>>> containers. The container MUST support the servlet specification >>>>>> v3.1.x at a minimum. >>>>>> >>>>>> On Feb 10, 2018, at 6:37 AM, Man H <[email protected]> wrote: >>>>>> >>>>>> Assuming you are on 5.2.2 >>>>>> >>>>>> El sábado, 10 de febrero de 2018, Brian Davidson <[email protected]> >>>>>> escribió: >>>>>> >>>>>>> I meant to add, our pom.xml has the following dependencies (in case >>>>>>> we’re missing something): >>>>>>> >>>>>>> <dependencies> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-webapp-${app.server}</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> <type>war</type> >>>>>>> <scope>runtime</scope> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-support-ldap</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-support-saml</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-support >>>>>>> -hazelcast-ticket-registry</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-support-duo</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-support >>>>>>> -json-service-registry</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.javassist</groupId> >>>>>>> <artifactId>javassist</artifactId> >>>>>>> <version>3.17.1-GA</version> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>javax.servlet</groupId> >>>>>>> <artifactId>servlet-api</artifactId> >>>>>>> <version>2.5</version> >>>>>>> <type>jar</type> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-core-webflow</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-core-web</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> <type>jar</type> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-core-configuration</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> <type>jar</type> >>>>>>> </dependency> >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-core-authentication</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> </dependencies> >>>>>>> >>>>>>> >>>>>>> On Feb 9, 2018, at 5:19 PM, Man H <[email protected]> wrote: >>>>>>> >>>>>>> >>>>>>> add >>>>>>> <dependency> >>>>>>> <groupId>org.apereo.cas</groupId> >>>>>>> <artifactId>cas-server-core-authentication</artifactId> >>>>>>> <version>${cas.version}</version> >>>>>>> </dependency> >>>>>>> >>>>>>> with: >>>>>>> >>>>>>> cas.authn.mfa.duo[0].bypass.type=GROOVY >>>>>>> cas.authn.mfa.duo[0].bypass.groovy.location=file:/etc/cas/co >>>>>>> nfig/mfaGroovyTrigger.groovy >>>>>>> >>>>>>> you should get >>>>>>> >>>>>>> 2018-02-09 19:10:39,145 DEBUG [org.apereo.cas.authentication >>>>>>> .GroovyMultifactorAuthenticationProviderBypass] - <Evaluating >>>>>>> multifactor authentication bypass properties for principal [casuser], >>>>>>> service [null] and provider >>>>>>> [DefaultDuoMultifactorAuthenticationProvider] >>>>>>> via Groovy script [URL [file:/etc/cas/config/mfaGroov >>>>>>> yTrigger.groovy]]> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> 2018-02-09 17:11 GMT-03:00 Brian Davidson <[email protected]>: >>>>>>> >>>>>>>> Just to add a bit to what Brian M. provided (I’m also a Brian, and >>>>>>>> a co-worker of Brian M’s): >>>>>>>> >>>>>>>> We have Duo MFA working if we comment out: >>>>>>>> cas.authn.mfa.duo[0].bypass.type=GROOVY >>>>>>>> cas.authn.mfa.duo[0].bypass.groovy.location=file:///etc/cas/ >>>>>>>> selectiveDuo.groovy >>>>>>>> >>>>>>>> We did find that CAS was unable to check to see if the user exists >>>>>>>> in Duo if we used the “CAS” integration in Duo. But it works if we >>>>>>>> set up >>>>>>>> the integration as “Auth API”. >>>>>>>> >>>>>>>> We haven’t touched webflow. With the groovy script in place, >>>>>>>> >>>>>>>> When we enable GROOVY bypass script, we get: >>>>>>>> >>>>>>>> 2018-02-09 15:04:55,638 DEBUG >>>>>>>> [org.springframework.webflow.engine.impl.FlowExecutionImpl] >>>>>>>> - <Attempting to handle [org.springframework.webflow.e >>>>>>>> xecution.FlowExecutionException: Exception thrown in state >>>>>>>> 'viewLoginFormDuo' of flow 'mfa-duo'] with root cause [java.io >>>>>>>> .NotSerializableException: org.springframework.core.io.Ur >>>>>>>> lResource]> >>>>>>>> >>>>>>>> As well as the stack trace Brian M. provided. >>>>>>>> >>>>>>>> cas.authn.mfa.duo[0].bypass.groovy.location was the missing piece >>>>>>>> yesterday. Dug through source code to find that. We’re happy to >>>>>>>> provide >>>>>>>> updates to the documentation once we get this working. >>>>>>>> >>>>>>>> Thanks for the help! >>>>>>>> >>>>>>>> On Feb 9, 2018, at 10:14 AM, brian mancuso <[email protected]> >>>>>>>> wrote: >>>>>>>> >>>>>>>> Anything that says "REMOVED" is just stuff I pulled out before >>>>>>>> posting it. I didn't want to post any private/sensitive information. >>>>>>>> >>>>>>>> On Friday, February 9, 2018 at 9:59:12 AM UTC-5, Manfredo Hopp >>>>>>>> wrote: >>>>>>>>> >>>>>>>>> What do you mean by REMOVED in properties . >>>>>>>>> >>>>>>>>> El viernes, 9 de febrero de 2018, brian mancuso <[email protected]> >>>>>>>>> escribió: >>>>>>>>> >>>>>>>>>> Hey all, >>>>>>>>>> >>>>>>>>>> I was originally trying to setup some custom triggers to >>>>>>>>>> determine who should use MFA and who is allowed to bypass. I have >>>>>>>>>> since >>>>>>>>>> been directed towards Groovy to simplify things, but I'm still >>>>>>>>>> having some >>>>>>>>>> trouble. >>>>>>>>>> >>>>>>>>>> At this point, the Groovy script's purpose is strictly to test if >>>>>>>>>> a certain user will bypass MFA while others will not. Here's my >>>>>>>>>> setup: >>>>>>>>>> >>>>>>>>>> */etc/cas/config/cas.properties* >>>>>>>>>> >>>>>>>>>> ## >>>>>>>>>> # Duo security 2fa authentication provider >>>>>>>>>> # https://www.duosecurity.com/docs/duoweb#1.-generate-an-akey >>>>>>>>>> # >>>>>>>>>> cas.authn.mfa.duo[0].rank=0 >>>>>>>>>> cas.authn.mfa.duo[0].duoApiHost=REMOVED >>>>>>>>>> cas.authn.mfa.duo[0].duoIntegrationKey=REMOVED >>>>>>>>>> cas.authn.mfa.duo[0].duoSecretKey=REMOVED >>>>>>>>>> cas.authn.mfa.duo[0].duoApplicationKey=REMOVED >>>>>>>>>> cas.authn.mfa.duo[0].id=mfa-duo >>>>>>>>>> cas.authn.mfa.globalProviderId=mfa-duo >>>>>>>>>> cas.authn.mfa.globalFailureMode=OPEN >>>>>>>>>> cas.authn.mfa.duo[0].bypass.type=GROOVY >>>>>>>>>> cas.authn.mfa.duo[0].bypass.groovy.location=file:///etc/cas/ >>>>>>>>>> selectiveDuo.groovy >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> */etc/cas/selectiveDuo.groovy* >>>>>>>>>> >>>>>>>>>> def boolean run(final Object... args) { >>>>>>>>>> def authentication = args[0] >>>>>>>>>> def principal = args[1] >>>>>>>>>> def service = args[2] >>>>>>>>>> def provider = args[3] >>>>>>>>>> def logger = args[4] >>>>>>>>>> def httpRequest = args[5] >>>>>>>>>> >>>>>>>>>> logger.info("Evaluating principal attributes >>>>>>>>>> ${principal.attributes}") >>>>>>>>>> >>>>>>>>>> def bypass = principal.attributes['uid'] >>>>>>>>>> if ((bypass.contains("testuser") && provider.id == "mfa-duo") >>>>>>>>>> { >>>>>>>>>> logger.info("Skipping bypass for principal ${principal.id >>>>>>>>>> }") >>>>>>>>>> return false >>>>>>>>>> } >>>>>>>>>> >>>>>>>>>> return true >>>>>>>>>> } >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> When I try to login though, whenever a user would be sent to DUO, >>>>>>>>>> I get a 500 error: >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> <https://lh3.googleusercontent.com/-bqF7r6WYFDU/Wn2r6Zgza6I/AAAAAAAASso/CtOtDNX7IF0Y2Ua0Eb8GyWbXuYdCSbEJgCLcBGAs/s1600/Screen%2BShot%2B2018-02-09%2Bat%2B9.10.22%2BAM.png> >>>>>>>>>> >>>>>>>>>> Here's a small snippet from the output: >>>>>>>>>> >>>>>>>>>> 2018-02-09 09:04:05,717 DEBUG >>>>>>>>>> [org.apereo.cas.web.FlowExecutionExceptionResolver] >>>>>>>>>> - <Ignoring the received exception due to a type mismatch> >>>>>>>>>> org.springframework.webflow.execution.FlowExecutionException: >>>>>>>>>> Exception thrown in state 'viewLoginFormDuo' of flow 'mfa-duo' >>>>>>>>>> at >>>>>>>>>> org.springframework.webflow.engine.impl.FlowExecutionImpl.wrap(FlowExecutionImpl.java:573) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.engine.impl.FlowExecutionImpl.re >>>>>>>>>> <http://gine.impl.flowexecutionimpl.re/> >>>>>>>>>> sume(FlowExecutionImpl.java:263) ~[spring-webflow-2.4.6.RELEASE >>>>>>>>>> .jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.executor.FlowExecutorImpl.resume >>>>>>>>>> Execution(FlowExecutorImpl.java:169) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> >>>>>>>>>> Caused by: org.apereo.spring.webflow.plug >>>>>>>>>> in.ClientFlowExecutionRepositoryException: Error encoding flow >>>>>>>>>> execution >>>>>>>>>> at org.apereo.spring.webflow.plugin.ClientFlowExecutionReposito >>>>>>>>>> ry.getKey(ClientFlowExecutionRepository.java:114) >>>>>>>>>> ~[spring-webflow-client-repo-1.0.3.jar:1.0.3] >>>>>>>>>> at org.springframework.webflow.engine.impl.FlowExecutionImpl.as >>>>>>>>>> <http://gine.impl.flowexecutionimpl.as/> >>>>>>>>>> signKey(FlowExecutionImpl.java:419) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.engine.impl.RequestControlContex >>>>>>>>>> tImpl.assignFlowExecutionKey(RequestControlContextImpl.java:193) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> >>>>>>>>>> Caused by: java.io.NotSerializableException: >>>>>>>>>> org.springframework.core.io.UrlResource >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1184) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1548) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1509) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1432) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1178) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1548) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1509) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> >>>>>>>>>> 2018-02-09 09:04:05,717 ERROR >>>>>>>>>> [org.springframework.boot.web.support.ErrorPageFilter] >>>>>>>>>> - <Forwarding to error page from request [/login] due to exception >>>>>>>>>> [Exception thrown in state 'viewLoginFormDuo' of flow 'mfa-duo']> >>>>>>>>>> org.springframework.webflow.execution.FlowExecutionException: >>>>>>>>>> Exception thrown in state 'viewLoginFormDuo' of flow 'mfa-duo' >>>>>>>>>> at >>>>>>>>>> org.springframework.webflow.engine.impl.FlowExecutionImpl.wrap(FlowExecutionImpl.java:573) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.engine.impl.FlowExecutionImpl.re >>>>>>>>>> <http://gine.impl.flowexecutionimpl.re/> >>>>>>>>>> sume(FlowExecutionImpl.java:263) ~[spring-webflow-2.4.6.RELEASE >>>>>>>>>> .jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.executor.FlowExecutorImpl.resume >>>>>>>>>> Execution(FlowExecutorImpl.java:169) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at java.lang.reflect.Method.invoke(Method.java:498) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> >>>>>>>>>> Caused by: org.apereo.spring.webflow.plug >>>>>>>>>> in.ClientFlowExecutionRepositoryException: Error encoding flow >>>>>>>>>> execution >>>>>>>>>> at org.apereo.spring.webflow.plugin.ClientFlowExecutionReposito >>>>>>>>>> ry.getKey(ClientFlowExecutionRepository.java:114) >>>>>>>>>> ~[spring-webflow-client-repo-1.0.3.jar:1.0.3] >>>>>>>>>> at org.springframework.webflow.engine.impl.FlowExecutionImpl.as >>>>>>>>>> <http://gine.impl.flowexecutionimpl.as/> >>>>>>>>>> signKey(FlowExecutionImpl.java:419) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.engine.impl.RequestControlContex >>>>>>>>>> tImpl.assignFlowExecutionKey(RequestControlContextImpl.java:193) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at >>>>>>>>>> org.springframework.webflow.engine.ViewState.doEnter(ViewState.java:170) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.engine.State.enter(State.java:194) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at >>>>>>>>>> org.springframework.webflow.engine.Transition.execute(Transition.java:228) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.engine.impl.FlowExecutionImpl.ex >>>>>>>>>> ecute(FlowExecutionImpl.java:395) ~[spring-webflow-2.4.6.RELEASE >>>>>>>>>> .jar:2.4.6.RELEASE] >>>>>>>>>> at org.springframework.webflow.engine.impl.RequestControlContex >>>>>>>>>> tImpl.execute(RequestControlContextImpl.java:214) >>>>>>>>>> ~[spring-webflow-2.4.6.RELEASE.jar:2.4.6.RELEASE] >>>>>>>>>> >>>>>>>>>> Caused by: java.io.NotSerializableException: >>>>>>>>>> org.springframework.core.io.UrlResource >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1184) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1548) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1509) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1432) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeObject0(ObjectOutputStream.java:1178) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.defaultWriteFields(ObjectOutputStream.java:1548) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeSerialData(ObjectOutputStream.java:1509) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> at >>>>>>>>>> java.io.ObjectOutputStream.writeOrdinaryObject(ObjectOutputStream.java:1432) >>>>>>>>>> ~[?:1.8.0_151] >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> I posted the output to pastebin since it was too large for just >>>>>>>>>> posting here: https://pastebin.com/yNPk4u7n >>>>>>>>>> >>>>>>>>>> -- >>>>>>>>>> - Website: https://apereo.github.io/cas >>>>>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>>>>>> --- >>>>>>>>>> You received this message because you are subscribed to the >>>>>>>>>> Google Groups "CAS Community" group. >>>>>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>>>>> send an email to [email protected]. >>>>>>>>>> To view this discussion on the web visit >>>>>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/b3ba >>>>>>>>>> 67e2-e0ca-4a8e-853b-041343564b9f%40apereo.org >>>>>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/b3ba67e2-e0ca-4a8e-853b-041343564b9f%40apereo.org?utm_medium=email&utm_source=footer> >>>>>>>>>> . >>>>>>>>>> >>>>>>>>> >>>>>>>> -- >>>>>>>> - Website: https://apereo.github.io/cas >>>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>>>> --- >>>>>>>> You received this message because you are subscribed to the Google >>>>>>>> Groups "CAS Community" group. >>>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>>> send an email to [email protected]. >>>>>>>> To view this discussion on the web visit >>>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/651d >>>>>>>> f904-b94c-4d3b-9915-ddfd969c5924%40apereo.org >>>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/651df904-b94c-4d3b-9915-ddfd969c5924%40apereo.org?utm_medium=email&utm_source=footer> >>>>>>>> . >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> -- >>>>>>>> - Website: https://apereo.github.io/cas >>>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>>>> --- >>>>>>>> You received this message because you are subscribed to the Google >>>>>>>> Groups "CAS Community" group. >>>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>>> send an email to [email protected]. >>>>>>>> To view this discussion on the web visit >>>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/2A0C >>>>>>>> 53A0-2FFF-4F1E-AAAE-B9647B352CB5%40gmail.com >>>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/2A0C53A0-2FFF-4F1E-AAAE-B9647B352CB5%40gmail.com?utm_medium=email&utm_source=footer> >>>>>>>> . >>>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> - Website: https://apereo.github.io/cas >>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>>> --- >>>>>>> You received this message because you are subscribed to the Google >>>>>>> Groups "CAS Community" group. >>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>> send an email to [email protected]. >>>>>>> To view this discussion on the web visit >>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY >>>>>>> 5midKW9nbuUSutNPX5%2BKbmKPfaGnMRfjmVosqwBESC9KNgw%40mail.gmail.com >>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midKW9nbuUSutNPX5%2BKbmKPfaGnMRfjmVosqwBESC9KNgw%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>>> . >>>>>>> >>>>>>> >>>>>>> >>>>>>> -- >>>>>>> - Website: https://apereo.github.io/cas >>>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>>> --- >>>>>>> You received this message because you are subscribed to the Google >>>>>>> Groups "CAS Community" group. >>>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>>> send an email to [email protected]. >>>>>>> To view this discussion on the web visit >>>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/4B95 >>>>>>> 3717-A37E-4E87-AD49-2BF69A7124C1%40gmail.com >>>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/4B953717-A37E-4E87-AD49-2BF69A7124C1%40gmail.com?utm_medium=email&utm_source=footer> >>>>>>> . >>>>>>> >>>>>> >>>>>> -- >>>>>> - Website: https://apereo.github.io/cas >>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>> --- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "CAS Community" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> To view this discussion on the web visit >>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY >>>>>> 5mifAJL3Wiq%2Bh8HdAbUGB0SEaARNZH--s5wcJ_%3DamQtER9w%40mail.gmail.com >>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5mifAJL3Wiq%2Bh8HdAbUGB0SEaARNZH--s5wcJ_%3DamQtER9w%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>>> . >>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> - Website: https://apereo.github.io/cas >>>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>>> - Contributions: https://goo.gl/mh7qDG >>>>>> --- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "CAS Community" group. >>>>>> To unsubscribe from this group and stop receiving emails from it, >>>>>> send an email to [email protected]. >>>>>> To view this discussion on the web visit >>>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/726B >>>>>> 28A6-E38E-425D-8ECD-5A6040905A48%40gmail.com >>>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/726B28A6-E38E-425D-8ECD-5A6040905A48%40gmail.com?utm_medium=email&utm_source=footer> >>>>>> . >>>>>> >>>>> >>>>> -- >>>>> - Website: https://apereo.github.io/cas >>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>> - Contributions: https://goo.gl/mh7qDG >>>>> --- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "CAS Community" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY >>>>> 5mieAUtjrCY1UgJwF%3DBUDy_2%2B%2BMntboaea4EkH6sWQnZ6rA%40mail.gmail.com >>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5mieAUtjrCY1UgJwF%3DBUDy_2%2B%2BMntboaea4EkH6sWQnZ6rA%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>>> . >>>>> >>>>> >>>>> >>>>> -- >>>>> - Website: https://apereo.github.io/cas >>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>> - Contributions: https://goo.gl/mh7qDG >>>>> --- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "CAS Community" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/F324 >>>>> 0192-8B43-4275-92A4-44EFFCCEFCC1%40gmail.com >>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/F3240192-8B43-4275-92A4-44EFFCCEFCC1%40gmail.com?utm_medium=email&utm_source=footer> >>>>> . >>>>> >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit https://groups.google.com/a/ap >>>> ereo.org/d/msgid/cas-user/CAMY5midbkPD7vFCpoQRb90zKLROcc4RQQ >>>> e01uiA_3GCXo5TnWg%40mail.gmail.com >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5midbkPD7vFCpoQRb90zKLROcc4RQQe01uiA_3GCXo5TnWg%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>>> >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit https://groups.google.com/a/ap >>>> ereo.org/d/msgid/cas-user/2B4CEB0E-10CF-46AA-8D9B-A04FCA5CA2 >>>> BE%40gmail.com >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/2B4CEB0E-10CF-46AA-8D9B-A04FCA5CA2BE%40gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit https://groups.google.com/a/ >>> apereo.org/d/msgid/cas-user/CAMY5mifvs%3D_2OmiV2Prjw4KOThdsN1vS2CCN0Zk2F >>> Ygc5RjHZQ%40mail.gmail.com >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5mifvs%3D_2OmiV2Prjw4KOThdsN1vS2CCN0Zk2FYgc5RjHZQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >>> >>> >>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected]. >>> To view this discussion on the web visit https://groups.google.com/a/ >>> apereo.org/d/msgid/cas-user/42968FBF-4E13-4EC6-B374- >>> A3739F6FACAD%40gmail.com >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/42968FBF-4E13-4EC6-B374-A3739F6FACAD%40gmail.com?utm_medium=email&utm_source=footer> >>> . >>> >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit https://groups.google.com/a/ >> apereo.org/d/msgid/cas-user/20C889EBD5E2E103.605F6678- >> 9158-45B0-8E5F-A4C9A2DAA4C0%40mail.outlook.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/20C889EBD5E2E103.605F6678-9158-45B0-8E5F-A4C9A2DAA4C0%40mail.outlook.com?utm_medium=email&utm_source=footer> >> . >> >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit https://groups.google.com/a/ >> apereo.org/d/msgid/cas-user/4348DB5A-6914-4F33-8373- >> F8C1DBF21A49%40gmail.com >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/4348DB5A-6914-4F33-8373-F8C1DBF21A49%40gmail.com?utm_medium=email&utm_source=footer> >> . >> > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: <https://goo.gl/1VRrw7> To view this discussion on the > web visit > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/20C889EBD5E2E103.E4373F61-E564-4B8D-ADFE-548523AFFC2F%40mail.outlook.com?utm_medium=email&utm_source=footer> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMY5micJyg%2BbVEKo3OOYTnJzmM8OUB2SHm19cCBGi6PbyWYAtg%40mail.gmail.com.
