> > 2018-09-20 12:23:33,448 INFO > [org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator] > - <Configuration directory [/etc/cas/config] is not a directory or cannot > be found at the specific path> >
Your container doesn't have a config directory, and > Caused by: java.lang.IllegalArgumentException: No aliases for private keys > found in key store > It looks like the keystore hasn't been setup in your container, either. If you use https://github.com/apereo/cas-webapp-docker instead of putting together your own Dockerfile, this should be taken care of for you. Otherwise, you'll have to make sure that you put all the things in place that CAS needs to work that are unique to a given CAS instance, like configuration and encryption keys. The images themselves (rightly) don't have any of that stuff. On Thu, Sep 20, 2018 at 7:27 AM Umut Arus <[email protected]> wrote: > Last part of the log... > > 2018-09-20 12:24:05,606 INFO > [org.apereo.cas.support.events.listener.CasConfigurationEventListener] - > <Refreshing CAS configuration. Stand by...> > 2018-09-20 12:24:06,220 WARN > [org.apereo.cas.config.CasCoreServicesConfiguration] - <Runtime memory is > used as the persistence storage for retrieving and persisting service > definitions. Changes that are made to service definitions during runtime > WILL be LOST when the web server is restarted. Ideally for production, you > need to choose a storage option (JDBC, etc) to store and track service > definitions.> > 2018-09-20 12:24:06,293 INFO > [org.apereo.cas.services.AbstractServicesManager] - <Loaded [0] service(s) > from [InMemoryServiceRegistry].> > 2018-09-20 12:24:06,732 WARN > [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for > encryption is not defined for [Ticket-granting Cookie]; CAS will attempt to > auto-generate the encryption key> > 2018-09-20 12:24:06,753 WARN > [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Generated > encryption key [sO4QOgf98hS-2fZEfB4PttueNvibknDSZa5xlC9suyQ] of size [256] > for [Ticket-granting Cookie]. The generated key MUST be added to CAS > settings under setting [cas.tgc.crypto.encryption.key].> > 2018-09-20 12:24:06,761 WARN > [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Secret key for > signing is not defined for [Ticket-granting Cookie]. CAS will attempt to > auto-generate the signing key> > 2018-09-20 12:24:06,762 WARN > [org.apereo.cas.util.cipher.BaseStringCipherExecutor] - <Generated signing > key > [CJqJINZp9drK7hjHrXproIAT-EbPpSToNTW8SA1NPV9MO_cWTe3c9wuMazpUYjmi5ii20f43d0SczCcTxsIncQ] > of size [512] for [Ticket-granting Cookie]. The generated key MUST be added > to CAS settings under setting [cas.tgc.crypto.signing.key].> > 2018-09-20 12:24:07,537 WARN > [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Secret key for > signing is not defined under [cas.webflow.crypto.signing.key]. CAS will > attempt to auto-generate the signing key> > 2018-09-20 12:24:07,538 WARN > [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated signing > key > [vvVdP_t8HW9MhVFiTTqS2xb5Uip4lxJf4uIPJoLRUNkre8wP3_v7uvpELNAFPUsmACn3nqF0Bjt-f_69DpIXdA] > of size [512]. The generated key MUST be added to CAS settings under > setting [cas.webflow.crypto.signing.key].> > 2018-09-20 12:24:07,539 WARN > [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Secret key for > encryption is not defined under [cas.webflow.crypto.encryption.key]. CAS > will attempt to auto-generate the encryption key> > 2018-09-20 12:24:07,542 WARN > [org.apereo.cas.util.cipher.BaseBinaryCipherExecutor] - <Generated > encryption key [nLM2R9XE7xeZEemeD27zzA] of size [16]. The generated key > MUST be added to CAS settings under setting > [cas.webflow.crypto.encryption.key].> > 2018-09-20 12:24:07,902 ERROR [org.apache.catalina.core.StandardService] - > <Failed to start connector [Connector[HTTP/1.1-8443]]> > org.apache.catalina.LifecycleException: Failed to start component > [Connector[HTTP/1.1-8443]] > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:167) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > at > org.apache.catalina.core.StandardService.addConnector(StandardService.java:225) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > at > org.springframework.boot.context.embedded.tomcat.TomcatEmbeddedServletContainer.addPreviouslyRemovedConnectors(TomcatEmbeddedServletContainer.java:265) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.boot.context.embedded.tomcat.TomcatEmbeddedServletContainer.start(TomcatEmbeddedServletContainer.java:208) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.boot.context.embedded.EmbeddedWebApplicationContext.startEmbeddedServletContainer(EmbeddedWebApplicationContext.java:297) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.boot.context.embedded.EmbeddedWebApplicationContext.finishRefresh(EmbeddedWebApplicationContext.java:145) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:546) > ~[spring-context-4.3.18.RELEASE.jar!/:4.3.18.RELEASE] > at > org.springframework.boot.context.embedded.EmbeddedWebApplicationContext.refresh(EmbeddedWebApplicationContext.java:122) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.boot.SpringApplication.refresh(SpringApplication.java:693) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:360) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.boot.SpringApplication.run(SpringApplication.java:303) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.springframework.boot.builder.SpringApplicationBuilder.run(SpringApplicationBuilder.java:134) > ~[spring-boot-1.5.14.RELEASE.jar!/:1.5.14.RELEASE] > at > org.apereo.cas.web.CasWebApplication.main(CasWebApplication.java:71) > ~[cas-server-webapp-init-5.3.2.jar!/:5.3.2] > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > ~[?:1.8.0_172] > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > ~[?:1.8.0_172] > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > ~[?:1.8.0_172] > at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_172] > at > org.springframework.boot.loader.MainMethodRunner.run(MainMethodRunner.java:48) > ~[cas.war:?] > at org.springframework.boot.loader.Launcher.launch(Launcher.java:87) > ~[cas.war:?] > at org.springframework.boot.loader.Launcher.launch(Launcher.java:50) > ~[cas.war:?] > at > org.springframework.boot.loader.WarLauncher.main(WarLauncher.java:59) > ~[cas.war:?] > Caused by: org.apache.catalina.LifecycleException: Protocol handler start > failed > at > org.apache.catalina.connector.Connector.startInternal(Connector.java:1020) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > ... 20 more > Caused by: java.lang.IllegalArgumentException: No aliases for private keys > found in key store > at > org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:116) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at > org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:87) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:225) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at > org.apache.tomcat.util.net.AbstractEndpoint.start(AbstractEndpoint.java:1150) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at org.apache.coyote.AbstractProtocol.start(AbstractProtocol.java:591) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at > org.apache.catalina.connector.Connector.startInternal(Connector.java:1018) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > ... 20 more > Caused by: java.io.IOException: No aliases for private keys found in key > store > at > org.apache.tomcat.util.net.jsse.JSSEUtil.getKeyManagers(JSSEUtil.java:233) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at > org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:114) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at > org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:87) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:225) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at > org.apache.tomcat.util.net.AbstractEndpoint.start(AbstractEndpoint.java:1150) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at org.apache.coyote.AbstractProtocol.start(AbstractProtocol.java:591) > ~[tomcat-coyote-8.5.32.jar!/:8.5.32] > at > org.apache.catalina.connector.Connector.startInternal(Connector.java:1018) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150) > ~[tomcat-catalina-8.5.32.jar!/:8.5.32] > ... 20 more > root@umuta:~# > > > On Thu, Sep 20, 2018 at 3:26 PM Umut Arus <[email protected]> wrote: > >> Hi, >> >> You are welcome for your feedbacks. >> >> thanks. >> >> root@umuta:~# docker pull apereo/cas:v5.3.2 >> v5.3.2: Pulling from apereo/cas >> Digest: >> sha256:81532b1fb2177f8d048fd6ea8663af98a91eb298f36e47c83912f56f2d4a2adc >> Status: Image is up to date for apereo/cas:v5.3.2 >> root@umuta:~# >> root@umuta:~# >> root@umuta:~# docker run -d -p 8080:8080 -p 8443:8443 --name="cas" >> apereo/cas:v5.3.2 >> ed7ff40f67098eef32226054624acc8d554424782cea12bf26b1ca95d8186d8e >> root@umuta:~# >> root@umuta:~# >> root@umuta:~# docker ps -a >> CONTAINER ID IMAGE COMMAND >> CREATED STATUS >> PORTS NAMES >> ed7ff40f6709 apereo/cas:v5.3.2 "bin/run-cas.sh" 15 seconds >> ago Up 14 seconds 0.0.0.0:8080->8080/tcp, 0.0.0.0:8443->8443/tcp >> cas >> root@umuta:~# >> root@umuta:~# docker logs ed7ff40f6709 >> >> __ ____ _ ____ __ >> / / / ___| / \ / ___| \ \ >> | | | | / _ \ \___ \ | | >> | | | |___ / ___ \ ___) | | | >> | | \____| /_/ \_\ |____/ | | >> \_\ /_/ >> >> CAS Version: 5.3.2 >> CAS Commit Id: 145d8c3dd5e27333dd05f5cc10987df4656fba5e >> CAS Build Date/Time: 2018-07-30T21:09:46Z >> Spring Boot Version: 1.5.14.RELEASE >> Spring Version: 4.3.18.RELEASE >> Java Home: /opt/zulu8.30.0.1-jdk8.0.172-linux_x64/jre >> Java Vendor: Azul Systems, Inc. >> Java Version: 1.8.0_172 >> JVM Free Memory: 50 MB >> JVM Maximum Memory: 1 GB >> JVM Total Memory: 690 MB >> JCE Installed: Yes >> Node Version: N/A >> NPM Version: N/A >> OS Architecture: amd64 >> OS Name: Linux >> OS Version: 4.15.0-33-generic >> OS Date/Time: 2018-09-20T12:23:33.336 >> OS Temp Directory: /tmp >> ------------------------------------------------------------ >> Apache Tomcat Version: Apache Tomcat/8.5.32 >> ------------------------------------------------------------ >> >> >> 2018-09-20 12:23:33,448 INFO >> [org.apereo.cas.configuration.DefaultCasConfigurationPropertiesSourceLocator] >> - <Configuration directory [/etc/cas/config] is not a directory or cannot >> be found at the specific path> >> 2018-09-20 12:23:33,492 INFO >> [org.springframework.cloud.bootstrap.config.PropertySourceBootstrapConfiguration] >> - <Located property source: CompositePropertySource >> [name='casCompositePropertySource', >> propertySources=[PropertiesPropertySource >> {name='embeddedYamlOverriddenProperties'}]]> >> 2018-09-20 12:23:33,511 INFO [org.apereo.cas.web.CasWebApplication] - >> <The following profiles are active: standalone> >> 2018-09-20 12:23:33,606 INFO >> [org.apereo.cas.web.CasWebApplicationContext] - <Refreshing >> CasWebApplicationContext()> >> 2018-09-20 12:23:39,856 WARN >> [org.apereo.cas.config.CasCoreTicketsConfiguration] - <Runtime memory is >> used as the persistence storage for retrieving and managing tickets. >> Tickets that are issued during runtime will be LOST when the web server is >> restarted. This MAY impact SSO functionality.> >> 2018-09-20 12:23:39,860 INFO [org.apereo.cas.util.CoreTicketUtils] - >> <Ticket registry encryption/signing is turned off. This MAY NOT be safe in >> a clustered production environment. Consider using other choices to handle >> encryption, signing and verification of ticket registry tickets, and verify >> the chosen ticket registry does support this behavior.> >> 2018-09-20 12:23:57,141 INFO >> [org.apereo.cas.config.CasConfigurationSupportUtilitiesConfiguration] - >> <CAS is configured to NOT watch configuration directory [/etc/cas/config]. >> Changes require manual reloads/restarts.> >> 2018-09-20 12:23:58,027 WARN >> [org.apereo.cas.config.support.authentication.AcceptUsersAuthenticationEventExecutionPlanConfiguration] >> - <> >> 2018-09-20 12:23:58,032 WARN >> [org.apereo.cas.config.support.authentication.AcceptUsersAuthenticationEventExecutionPlanConfiguration] >> - < >> >> ____ _____ ___ ____ _ >> / ___| |_ _| / _ \ | _ \ | | >> \___ \ | | | | | | | |_) | | | >> ___) | | | | |_| | | __/ |_| >> |____/ |_| \___/ |_| (_) >> >> >> CAS is configured to accept a static list of credentials for >> authentication. While this is generally useful for demo purposes, it is >> STRONGLY recommended that you DISABLE this authentication method (by >> setting 'cas.authn.accept.users' to a blank value) and switch to a mode >> that is more suitable for production.> >> 2018-09-20 12:23:58,032 WARN >> [org.apereo.cas.config.support.authentication.AcceptUsersAuthenticationEventExecutionPlanConfiguration] >> - <> >> root@umuta:~# >> root@umuta:~# >> >> >> >> On Thu, Sep 20, 2018 at 9:51 AM Umut Arus <[email protected]> wrote: >> >>> Hi, >>> >>> I'm getting the below error on last cas docker version. >>> >>> docker run -d -p 8080:8080 -p 8443:8443 --name="cas" apereo/cas >>> >>> root@umuta:~# docker logs cd62fe31b9c9 >>> Sep 20, 2018 6:47:03 AM java.util.prefs.FileSystemPreferences$1 run >>> INFO: Created user preferences directory. >>> | Welcome to JShell -- Version 11 >>> | For an introduction type: /help intro >>> >>> jshell> root@umuta:~# >>> root@umuta:~# >>> >>> What can be the issue? >>> >>> thanks. >>> >>> >>> On Wed, Sep 19, 2018 at 4:16 PM Jason Sherman <[email protected]> >>> wrote: >>> >>>> Hi, >>>> >>>> The fist step I would take is to look at the logs. So: >>>> docker logs c01c55d5b7ab >>>> and >>>> docker logs 533144080d80 >>>> >>>> Also, it sounds like your running these straight from docker hub. Have >>>> you tried: >>>> https://github.com/apereo/cas-webapp-docker >>>> as a starting point on your host machine? >>>> >>>> On Wed, Sep 19, 2018 at 6:48 AM Umut Arus <[email protected]> >>>> wrote: >>>> >>>>> Hi, >>>>> >>>>> I'm trying to run on docker of the different versions of CAS from >>>>> https://hub.docker.com/r/apereo/cas/. But I couldnt run any top of >>>>> versions. >>>>> >>>>> It is just "Exited"... What could be the problem? >>>>> >>>>> c01c55d5b7ab apereo/cas:v5.3.2 "bin/run-cas.sh" >>>>> 13 minutes ago Exited (1) 12 minutes ago >>>>> wonderful_aryabhata >>>>> 533144080d80 apereo/cas >>>>> "jshell" 16 minutes ago Exited (0) 16 minutes >>>>> ago jolly_khorana >>>>> >>>>> thanks.. >>>>> >>>>> -- >>>>> - Website: https://apereo.github.io/cas >>>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>>> - List Guidelines: https://goo.gl/1VRrw7 >>>>> - Contributions: https://goo.gl/mh7qDG >>>>> --- >>>>> You received this message because you are subscribed to the Google >>>>> Groups "CAS Community" group. >>>>> To unsubscribe from this group and stop receiving emails from it, send >>>>> an email to [email protected]. >>>>> To view this discussion on the web visit >>>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/530e8844-32d7-4e7f-9965-0446413de586%40apereo.org >>>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/530e8844-32d7-4e7f-9965-0446413de586%40apereo.org?utm_medium=email&utm_source=footer> >>>>> . >>>>> >>>> >>>> >>>> -- >>>> Jason >>>> >>>> -- >>>> - Website: https://apereo.github.io/cas >>>> - Gitter Chatroom: https://gitter.im/apereo/cas >>>> - List Guidelines: https://goo.gl/1VRrw7 >>>> - Contributions: https://goo.gl/mh7qDG >>>> --- >>>> You received this message because you are subscribed to the Google >>>> Groups "CAS Community" group. >>>> To unsubscribe from this group and stop receiving emails from it, send >>>> an email to [email protected]. >>>> To view this discussion on the web visit >>>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAGdX6GYzaOCeVj3Jqd5bw7ypfFc-FhnhRKAgdk9gCjiypumjjg%40mail.gmail.com >>>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAGdX6GYzaOCeVj3Jqd5bw7ypfFc-FhnhRKAgdk9gCjiypumjjg%40mail.gmail.com?utm_medium=email&utm_source=footer> >>>> . >>>> >>> >>> >>> -- >>> *Umut Arus* >>> System Specialist >>> Information Technology >>> Sabancı University >>> >>> Phone: +90216 483 9172 >>> >>> >>> >> >> -- >> *Umut Arus* >> System Specialist >> Information Technology >> Sabancı University >> >> Phone: +90216 483 9172 >> >> >> > > -- > *Umut Arus* > System Specialist > Information Technology > Sabancı University > > Phone: +90216 483 9172 > > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALwryzGiNyyQMw_stfPKxfX5rQr8YNuXornK5er%2B46KAC16N5g%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CALwryzGiNyyQMw_stfPKxfX5rQr8YNuXornK5er%2B46KAC16N5g%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- Jason -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAGdX6GaVg-MisYf%2BVUObpubqunmgMDZwn9hGCjVgqzO%2B-mT4rw%40mail.gmail.com.
