I'm testing out 6.2 RC5 and am getting an error with Duo: 

DEBUG [org.apereo.cas.web.FlowExecutionExceptionResolver] - <Ignoring the 
received exception 
[org.springframework.webflow.execution.ActionExecutionException: Exception 
thrown executing 
org.apereo.cas.adaptors.duo.web.flow.action.DuoSecurityPrepareWebLoginFormAction@5afaae7e
 
in state 'viewLoginFormDuo' of flow 'mfa-duo' -- action execution 
attributes were 'map['resolvedAuthenticationEvents' -> list[mfa-duo]]'] due 
to a type mismatch with handler 
[[FlowHandlerMapping.DefaultFlowHandler@5f5b9239]]>

I'm using pretty much the same Duo configuration from 6.0.x (which is 
working), but switched from camelCase to dashes as listed in the latest 
development documentation.  I got the same error with camel case too.

#####  DUO ####################################
cas.authn.mfa.duo[0].duo-secret-key=${CAS_DUO_SKEY}
cas.authn.mfa.duo[0].rank=0
cas.authn.mfa.duo[0].duo-application-key=${CAS_DUO_AKEY}
cas.authn.mfa.duo[0].duo-integration-key=${CAS_DUO_IKEY}
cas.authn.mfa.duo[0].duo-api-host=${CAS_DUO_HOST}
cas.authn.mfa.duo[0].trusted-device-enabled=false
cas.authn.mfa.duo[0].id=mfa-duo
cas.authn.mfa.duo[0].name=SCAD DUO
cas.authn.mfa.duo[0].order=1
# but this one stays camelCase
cas.authn.mfa.groovyScript=file:/etc/cas/ScadMfa.groovy

And I can actually see a response from Duo early in the log that indicates 
it retrieved my account info.

Also, I am using the default theme with no changes.

Any help would be appreciated. 

Thank you,
Mike


-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/dba1319a-cb46-477a-9d8e-0e8a33d51800o%40apereo.org.

Reply via email to