Question

我正在尝试在本地设置CAS服务器，并且我也正在本地运行Drupal。我正在将Mongo DB用于CAS ticket registry和user authentication。对于CAS服务注册表，我使用的是基于文件的JSON service registry。

我的服务注册表：

{
  "@class": "org.apereo.cas.services.RegexRegisteredService",
  "id": 3,
  "serviceId": "http(s)?:\\/\\/relo.local(:\\d{4,5})?(\\/.*)?$",
  "name": "relo.local",
  "evaluationOrder": 10,
  "accessStrategy": {
    "@class": "org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy",
    "enabled": true,
    "ssoEnabled": true
  },
  "attributeReleasePolicy": {
    "@class": "org.apereo.cas.services.ReturnAllAttributeReleasePolicy"
  }
}

在MongoDB中，我创建了一个名为accounts的集合，在其中创建了一些虚拟用户记录，如下所示：

/* 1 */
{
    "_id" : ObjectId("5c24f234e51c56a02af5873f"),
    "username" : "casuser",
    "password" : "casuser",
    "firstname" : "wohn",
    "lastname" : "smith",
    "mail" : "casuser@test.com"
}

/* 2 */
{
    "_id" : ObjectId("5c24f24de51c56a02af58757"),
    "username" : "wasuser",
    "password" : "wasuser",
    "firstname" : "wohn",
    "lastname" : "smith",
    "mail" : "wasuser@test.com"
}

对于票务注册表，我不需要创建任何集合。当我尝试登录时，CAS负责创建票证注册表集合并在其中插入一条记录。

Drupal正在使用cas模块，该模块使用phpCAS库与CAS服务器连接。

Drupal版本：7.34
phpCAS版本：1.3.0
CAS版本：6.1.0-RC1-SNAPSHOT

CAS提供其自己的登录屏幕。完成所有这些配置后，我便可以使用casuser和wasuser帐户登录CAS服务器。

我的 cas.properties 文件：

# Required CAS settings
cas.server.name=https://localhost:8443
cas.server.prefix=${cas.server.name}/cas

# Log4j config file location
logging.config: file:/etc/cas/config/log4j2.xml
# Control log levels via properties
logging.level.org.apereo.cas=DEBUG

# Restrict admin endpoints (like /status) to localhost
# cas.adminPagesSecurity.ip=127\.0\.0\.1

# Authenticate if any handler succeeds
cas.authn.policy.any.tryAll=false

# Disable authentication with a static list of credentials
# If below line is commented then you can use default
# username/password:casuser/Mellon
cas.authn.accept.users=ram::ram,shyam::shyam

# Ticket Grant Cookie (TGC) encryption key
cas.tgc.crypto.encryption.key=<my key>
# Ticket Grant Cookie (TGC) Signing key
cas.tgc.crypto.signing.key=<my key>

# Webflow encryption key
cas.webflow.crypto.encryption.key=<my key>
# Webflow signing key
cas.webflow.crypto.signing.key=<my key>

# Embedded Tomcat settings
server.servlet.context-path=/cas
server.port=8443
server.ssl.keyStore=file:/etc/cas/thekeystore
server.ssl.keyStorePassword=changeit
server.ssl.keyPassword=changeit

# JSON Service Registry
cas.serviceRegistry.json.location=file:/etc/cas/config/services-staging

# MongoDb Ticket registry
cas.ticket.registry.mongo.host=localhost
cas.ticket.registry.mongo.port=27017
cas.ticket.registry.mongo.userId=casDbAdmin
cas.ticket.registry.mongo.password=admin
cas.ticket.registry.mongo.databaseName=casdb
cas.ticket.registry.mongo.authenticationDatabaseName=casdb


# MongoDb Authentication
cas.authn.mongo.host=localhost
cas.authn.mongo.port=27017
cas.authn.mongo.userId=casDbAdmin
cas.authn.mongo.password=admin
cas.authn.mongo.databaseName=casdb
cas.authn.mongo.authenticationDatabaseName=casdb
cas.authn.mongo.usernameAttribute=username
cas.authn.mongo.attributes=
cas.authn.mongo.passwordAttribute=password
cas.authn.mongo.collection=accounts

# Authentication Policy
cas.authn.policy.requiredHandlerAuthenticationPolicyEnabled=true

# Default attributes.
cas.authn.attributeRepository.defaultAttributesToRelease=firstname,lastname,mail

# Spring Webflow
cas.webflow.autoconfigure=true
cas.webflow.alwaysPauseRedirect=false
cas.webflow.refresh=true
cas.webflow.redirectSameState=false

cas.webflow.session.lockTimeout=30
cas.webflow.session.compress=false
cas.webflow.session.maxConversations=5
cas.webflow.session.storage=true

我已将Drupal配置为使用本地CAS服务器进行身份验证。当我尝试访问Drupal时，它会将我重定向到CAS登录屏幕。在将凭据放入登录表单并提交后，它失败了，并向我显示以下错误，我无法弄清。我的JAVA不太好。 CAS已嵌入Spring Webflow。我认为该错误与Webflow有关。在身份验证过程中，CAS具有一种称为“原理解析”和“属性解析”的属性，它决定使用哪个身份验证处理程序以及响应中附加多少个属性。

错误：

2019-01-24 14:35:32,348 INFO [org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit trail record BEGIN
=============================================================
WHO: casuser
WHAT: TGT-5-*****b6YD2V8OBQ4X-jet
ACTION: TICKET_GRANTING_TICKET_CREATED
APPLICATION: CAS
WHEN: Thu Jan 24 14:35:32 IST 2019
CLIENT IP ADDRESS: 0:0:0:0:0:0:0:1
SERVER IP ADDRESS: 0:0:0:0:0:0:0:1
=============================================================

>
2019-01-24 14:35:32,353 ERROR [org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/cas].[dispatcherServlet]] - <Servlet.service() for servlet [dispatcherServlet] in context with path [/cas] threw exception [Request processing failed; nested exception is org.springframework.webflow.execution.ActionExecutionException: Exception thrown executing org.apereo.cas.web.flow.GenerateServiceTicketAction@147375b3 in state 'generateServiceTicket' of flow 'login' -- action execution attributes were 'map[[empty]]'] with root cause>
java.lang.NullPointerException: null

完整错误堆栈跟踪： https://pastebin.com/vEvcvFte

感谢您的帮助。我已经为这个错误苦苦挣扎了好几天，但我无法弄清楚这个问题。请帮忙。

Answer 1

您可能需要考虑强制更新SNAPSHOT。尽管您的日志未显示提交ID，但您可能正在运行带有已修复的错误的旧版本。如果检查项目的自述文件，将找到有关如何通过Gradle更新快照版本的说明。

Drupal导致CAS身份验证失败，但独立运行

1 个答案: