Hi Meysam - Here is the JDK version we are running in our DEV env
CAS Version: 7.0.4 CAS Branch: 7.0.x CAS Commit Id: d41ac9d5e157605fc43d97a77582c2062e864874 CAS Build Date/Time: 2024-04-26T07:43:16.528866Z Spring Boot Version: 3.2.1 Spring Version: 6.1.2 Java Home: /usr/lib/jvm/zulu21-ca-amd64 Java Vendor: Azul Systems, Inc. Java Version: 21.0.3 Servlet Version: 6.0.0 JVM Free Memory: 144 MB JVM Maximum Memory: 2 GB JVM Total Memory: 278 MB OS Architecture: amd64 OS Name: Linux OS Version: 5.14.0-427.16.1.el9_4.x86_64 OS Date/Time: 2024-06-11T16:39:14.993620776 OS Temp Directory: /tmp ------------------------------------------------------------ Apache Tomcat Version: Apache Tomcat/10.1.23 Hazelcast Version: 5.3.6.9903dc9.20231109 ------------------------------------------------------------ This should match the version provided in the Dockerfile. On Saturday, April 13, 2024 at 4:08:20 AM UTC-4 Meysam Shirazi wrote: > Hi Josh > Check the JDK version. > > On Friday, April 12, 2024 at 12:41:49 AM UTC+3:30 Josh wrote: > >> Hi all - >> >> We're in the process of migrating from CAS 6.6.x to CAS 7.0.x. We have >> several hundred services in our production environment working fine, >> however when starting CAS 7.0.3 in our test environment it seems to bail >> out hard loading some specific services and the application shuts down. >> >> Here is the error we are receiving: >> >> 2024-04-11 15:44:06,843 ERROR >> [org.apereo.cas.util.concurrent.CasReentrantLock] - <Cannot invoke >> "Object.hashCode()" because "key" is null >> ConcurrentHashMap.java:get:936 >> AbstractMapBasedAttributeIndex.java:addAll:81 >> CollectionQueryEngine.java:perform:1376 >> > >> 2024-04-11 15:44:06,882 ERROR >> [org.springframework.boot.SpringApplication] - <Application run failed> >> >> The commonality seems to be having a HashMap (also indicated by the >> error) in the service. >> >> Here is one example, which is working just fine in CAS 6.6 (we've likely >> had this config in place since at least the CAS 5.x days, maybe earlier). I >> reviewed the documentation ( >> https://apereo.github.io/cas/7.0.x/services/Service-Access-Strategy-ABAC.html) >> >> to make sure nothing changed but I am just not seeing it. >> >> accessStrategy : { >> @class : >> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >> enabled : true >> ssoEnabled : true >> caseInsensitive: true >> requireAllAttributes: false >> unauthorizedRedirectUrl : https://support.XXX.XXX >> requiredAttributes : { >> @class : java.util.HashMap >> memberOf : [ "java.util.HashSet", [ "CN=Bomgar_Admins,OU=Role >> Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >> } >> } >> >> I am also attaching the full service definition below: >> >> { >> @class : org.apereo.cas.support.saml.services.SamlRegisteredService >> serviceId : https://bomgar.XXX.XXX/appliance >> name : bomgar.XXX.XXX >> id : 50092 >> evaluationOrder : 100 >> metadataLocation : /etc/cas/saml/metadata/BomgarAppliance-metadata.xml >> accessStrategy : { >> @class : >> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >> enabled : true >> ssoEnabled : true >> caseInsensitive: true >> requireAllAttributes: false >> unauthorizedRedirectUrl : https://support.XXX.XXX >> requiredAttributes : { >> @class : java.util.HashMap >> memberOf : [ "java.util.HashSet", [ "CN=Bomgar_Admins,OU=Role >> Groups,OU=Groups,DC=XXX,DC=XXX,DC=XXX"]] >> } >> } >> attributeReleasePolicy : { >> @class : >> org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy >> allowedAttributes : [ >> java.util.ArrayList >> [ >> displayName >> mail >> memberOf >> ] >> ] >> } >> requiredNameIdFormat: >> urn:oasis:names:tc:SAML:2.0:nameid-format:persistent >> usernameAttributeProvider : { >> @class : >> org.apereo.cas.services.PrincipalAttributeRegisteredServiceUsernameProvider >> usernameAttribute : sAMAccountName >> } >> } >> >> Any assistance would be greatly appreciated. >> >> -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/81db2c47-bcea-4824-baca-23498720bd9en%40apereo.org.
