1. If you use https, then please use a DNS name for the URL, do not use IP address. So please change your both CAS and Moodle to use DNS name. 2. For the certificates, please use well-known certificates if you are not familiar with self-signed certicates and how to add them to Java Key Store. 3. Please use the URL of Nginx, if you use nginx as a reverse proxy of tomcat.
[email protected]在 2021年11月6日星期六上午2:49:08 [UTC+8]寫道： > Ray > i use nginx for the redirection my server.com:8080/cas to my > https://server.com it's work well i my ldap users can connect to the CAS > correctly. > in my server.xml (tomcat9) i dont do anything > > Le ven. 5 nov. 2021 à 18:26, Ray Bon <[email protected]> a écrit : > >> Baba, >> >> This looks like tomcat errors and not cas errors. Is that correct? >> >> What is your tomcat setup? Is it fronted by apache or nginx? >> >> If this is a different issue, you should create a new question. >> >> Ray >> >> On Fri, 2021-11-05 at 16:32 +0000, Baba Ndiaye wrote: >> >> Notice: This message was sent from outside the University of Victoria >> email system. Please be cautious with links and sensitive information. >> >> i have this message in my catalina.log >> root@srv-cas:~# tail -20 /var/log/tomcat9/catalina.2021-11-05.log >> 05-Nov-2021 03:35:58.254 AVERTISSEMENT [http-nio-8080-exec-2] >> javax.persistence.spi.PersistenceProviderResolverHolder$DefaultPersistenceProviderResolver.log >> >> javax.persistence.spi::No valid providers found. >> 05-Nov-2021 06:55:27.264 INFOS [http-nio-8080-exec-8] >> org.apache.coyote.http11.Http11Processor.service Erreur lors de l'analyse >> d'un en-tête de requête HTTP Note: toutes les occurrences suivantes >> d'erreurs d'analyse des requêtes HTTP seront enregistrées au niveau DEBUG >> java.lang.IllegalArgumentException: Un caractère invalide a été >> trouvé dans la cible de la requête, les caractères valides sont définis >> dans RFC 7230 et RFC 3986 >> at >> org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:469) >> at >> org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:260) >> at >> org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65) >> at >> org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868) >> at >> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1639) >> at >> org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) >> at >> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) >> at java.base/java.lang.Thread.run(Thread.java:829) >> 05-Nov-2021 06:55:42.969 AVERTISSEMENT [http-nio-8080-exec-2] >> javax.persistence.spi.PersistenceProviderResolverHolder$DefaultPersistenceProviderResolver.log >> >> javax.persistence.spi::No valid providers found. >> 05-Nov-2021 10:21:22.130 AVERTISSEMENT [http-nio-8080-exec-2] >> javax.persistence.spi.PersistenceProviderResolverHolder$DefaultPersistenceProviderResolver.log >> >> javax.persistence.spi::No valid providers found. >> 05-Nov-2021 15:53:07.885 AVERTISSEMENT [http-nio-8080-exec-8] >> javax.persistence.spi.PersistenceProviderResolverHolder$DefaultPersistenceProviderResolver.log >> >> javax.persistence.spi::No valid providers found. >> root@srv-cas:~# >> >> Le ven. 5 nov. 2021 à 12:37, Baba Ndiaye <[email protected]> a écrit : >> >> Hi Ray >> when i build the cas.war i execute this command ./gradlew createKeystore the >> location folder /etc/cas/thekeystore but i never use it so i also have a >> good certif (not autosigned) and i use it for my nginx (tomcat redirection) >> and my moodle. >> >> Le jeu. 4 nov. 2021 à 16:06, Ray Bon <[email protected]> a écrit : >> >> Baba, >> >> Did you create a self signed certificate for your application? >> >> If so, you would have to add it to the java keystore. >> You do not need to start with an https url for your application, just use >> http://... >> Once things are running, you can add a certificate. See >> https://apereo.github.io/cas/6.4.x/installation/Troubleshooting-Guide.html#ssl--certificates >> >> Ray >> >> On Thu, 2021-11-04 at 12:33 +0000, Baba Ndiaye wrote: >> >> Notice: This message was sent from outside the University of Victoria >> email system. Please be cautious with links and sensitive information. >> >> root@srv-cas:~# tail -20 /var/log/nginx/tomcat-error.log >> 2021/11/04 02:12:23 [crit] 112503#112503: *77 SSL_do_handshake() failed >> (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) >> while SSL handshaking, client: x.x.x.x, server: 0.0.0.0:443 >> 2021/11/04 03:55:14 [crit] 112503#112503: *113 SSL_do_handshake() failed >> (SSL: error:141CF06C:SSL routines:tls_parse_ctos_key_share:bad key share) >> while SSL handshaking, client: x.x.x.x, server: 0.0.0.0:443 >> >> >> >> Le jeu. 4 nov. 2021 à 11:47, Baba Ndiaye <[email protected]> a écrit : >> >> i follow this tutorial but it's dont work yet >> Apereo CAS 6.4.x Deployment - WAR Overlays || Fawnoos || Open-Source >> Identity and Access Management Consulting Services >> <https://fawnoos.com/2021/08/29/cas64-gettingstarted-overlay/> >> >> Le mer. 3 nov. 2021 à 23:36, Baba Ndiaye <[email protected]> a écrit : >> >> Thank Felix i changed it but i have the same error so i want to know if i >> must configure a another files like cas properties ???? >> >> Le mer. 3 nov. 2021 à 19:47, Felix Schumacher < >> [email protected]> a écrit : >> >> Hi Baba, >> >> the regex is not correct. >> >> It should be ending with //.* and not //* >> >> Regards >> Felix >> >> Am 3. November 2021 18:58:12 MEZ schrieb Baba Ndiaye <[email protected]>: >> >> >> Hi Ray >> i change the config and now i use https for all applications but i always >> have the same error but in the url is https now >> [image: cas-url-error.png] >> >> and in my app-id.json i have this >> { >> "@class" : "org.apereo.cas.services.RegexRegisteredService", >> "serviceId" : "^(https?)://*", >> "name" : "Moodle", >> "id" : 1635948950, >> "evaluationOrder" : 99999 >> } >> >> Le mer. 3 nov. 2021 à 16:46, Ray Bon <[email protected]> a écrit : >> >> Baba, >> >> In the image, the service= parameter is an http url. Change your service >> definition to, ^(https?)://.* >> >> Ray >> >> On Wed, 2021-11-03 at 16:30 +0000, Baba Ndiaye wrote: >> >> Notice: This message was sent from outside the University of Victoria >> email system. Please be cautious with links and sensitive information. >> >> Hi Ray >> I add support-json-service-registry and rebuid build.gradle >> I also uncomment cas.service-registry.json.location=/etc/cas/services >> I add the folder >> I also create a file moodle-id.json >> { >> "@class" : "org.apereo.cas.services.RegexRegisteredService", >> "serviceId" : "^(https)://*", >> "name" : "Moodle", >> "id" : id >> "evolutionOrder": 99999 >> } >> id=date+%s >> But it's not work >> >> Le mer. 3 nov. 2021 à 16:14, Ray Bon <[email protected]> a écrit : >> >> Baba, >> >> That message means that the service sent to cas/login does not match one >> in the service registry. >> Check that your service regex will match including parameters in the >> service url. >> >> Ray >> >> On Wed, 2021-11-03 at 04:00 -0700, Baba Ndiaye wrote: >> >> Notice: This message was sent from outside the University of Victoria >> email system. Please be cautious with links and sensitive information. >> >> Hi >> i finally success to configure CAS with LDAP authentication but when i >> try to use it with moodle i always have this message. >> >> [image: cas-error.JPG] >> >> -- >> >> >> Ray Bon >> Programmer Analyst >> Development Services, University Systems >> 2507218831 <(250)%20721-8831> | CLE 019 | [email protected] >> >> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional >> territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ >> peoples whose historical relationships with the land continue to this day. >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/097f1bc6fd5ff01bc01e7085ff7cd0815a50a3b5.camel%40uvic.ca >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/097f1bc6fd5ff01bc01e7085ff7cd0815a50a3b5.camel%40uvic.ca?utm_medium=email&utm_source=footer> >> . >> >> -- >> >> >> Ray Bon >> Programmer Analyst >> Development Services, University Systems >> 2507218831 <(250)%20721-8831> | CLE 019 | [email protected] >> >> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional >> territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ >> peoples whose historical relationships with the land continue to this day. >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/cddd375cb9cb9635841b6d116e005daea86bf59f.camel%40uvic.ca >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/cddd375cb9cb9635841b6d116e005daea86bf59f.camel%40uvic.ca?utm_medium=email&utm_source=footer> >> . >> >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/8BEA2A48-3FD5-412A-BCFE-5754FB3F32D2%40internetallee.de >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/8BEA2A48-3FD5-412A-BCFE-5754FB3F32D2%40internetallee.de?utm_medium=email&utm_source=footer> >> . >> >> >> >> -- >> >> >> Ray Bon >> Programmer Analyst >> Development Services, University Systems >> 2507218831 <(250)%20721-8831> | CLE 019 | [email protected] >> >> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional >> territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ >> peoples whose historical relationships with the land continue to this day. >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/745a18707accf120c961ea1c688d68cbc7338e3e.camel%40uvic.ca >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/745a18707accf120c961ea1c688d68cbc7338e3e.camel%40uvic.ca?utm_medium=email&utm_source=footer> >> . >> >> >> -- >> >> Ray Bon >> Programmer Analyst >> Development Services, University Systems >> 2507218831 <(250)%20721-8831> | CLE 019 | [email protected] >> >> I acknowledge and respect the lək̓ʷəŋən peoples on whose traditional >> territory the university stands, and the Songhees, Esquimalt and WSÁNEĆ >> peoples whose historical relationships with the land continue to this day. >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> > To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/95e25ecb479b29dd4e6ba5b2e995c08043de8378.camel%40uvic.ca >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/95e25ecb479b29dd4e6ba5b2e995c08043de8378.camel%40uvic.ca?utm_medium=email&utm_source=footer> >> . >> > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/cb2ee43b-57a2-4201-97dc-07a8c970f4c0n%40apereo.org.
