"CAS Authentication Wanted!" Laravel 5.5 - authentication

I am using subfission/cas "dev-master" branch with Laravel 5.5, PHP 7.0.27 with phpCAS 1.3.5. I have two servers (test and prod) with identical Laravel installations. However, when I go to log in via CAS, one server redirects to the appropriate login screen, while another gives me a white screen with:
CAS Authentication wanted!
You should already have been redirected to the CAS server. Click here
to continue. phpCAS 1.3.5 using server https://example.com/cas/
(CAS 2.0)
Clicking on "click here" sends me where I need to go, but I'm very confused as to how this error occurs or even what it means. There doesn't seem to be much documentation on this

I just had the same problem. Worked fine on local dev, but failed when I went to production. I downgraded to ~2.0.9 and it fixed the issue. (I'm using Laravel 5.4)

Related

HTTPS generates back-end issues

One of my old website is running TYPO3 v4.5.
I bought a SSL certificate and my sys admin installed it on the server.
the front-end is running well on https
tha back-end login form runs weird : one time my login/password are ok, but sometimes it doesn't allow me to enter the back-end.
It is totally random and in Firebug, I have no clue in the console or in the network tab to help me. Same behavior for Chrome, FF or IE.
I tried a lot of parameters :
[BE]LockSSL = 1
[SYS][reverseProxyIP] with " ... "
[SYS][reverseProxySSL] with " * "
[SYS][cookieSecure] = 1
I event tried a lot of different combinations, with no success.
Please notice that I also get a TYPO3 6.2 website and those parameters work perfectly on it. I guess that I am missing somthing for v4.5 ?
Check the BE cookieDomain configuration!

Trying to run Apache Apex's Yahoo Finance example on YARN

I've downloaded Apache Apex 3.5.0 along with Malhar 3.5.0.
I've successfully started the apex client and submitted the Yahoo Finance demo example to our YARN cluster (running CDH 5.10). The cluster is running and configured properly (many Spark and MR jobs are running on it).
I see the application I submitted as RUNNING in YARN as well as in the Apex cli. However when I try to connect to the Application Master I get a 404.
org.apache.hadoop.yarn.webapp.WebAppException: /: controller for default not found
I also tried directly to connect to the appMasterTrackingUrl reported by get-app-info command, and I get the same error.
I tried a couple of apex examples, and I always get the same error.
Any idea why?
It is somewhat expected. Add "/ws/v2/stram/info" to the URL path
When you connect to the App Master you need to provide the complete URL for a REST API to invoke. There is nothing to show/return for "/" so what you are seeing is expected. What are you trying to do connecting to the App Master?

sonatype nexus does not fully log in

I just upgraded from nexus 1.8.0.1 to 2.8.0-05 and now I cannot fully log in anymore. When I try to login nothing happens. There is still the "Log In" button on the top right and the menu on the left does not show anything (except what was there when not being logged in). So, the login has no effect.
I also tried to log in with invalid account info and it gives me the login error ("incorrect username, pass..."), so the login data is checked. I tried it with the admin and with a user login - no difference. The actual content is still there (all repos with artifacts) and are shown in a browser.
How can I log in?
Details:
I upgraded from nexus 1.8.0.1 to 2.7.2-03 (file: "nexus-2.7.2-bundle.tar") and then to 2.8.0-05 (file: "nexus-2.8.0-05-bundle.tar") on my CentOS 5.10 according to the upgrade notes and some instructions I found (except for the step with plexus as there was no such file). For nexus 2.7 I got an InvalidMagicMimeEntryException but according to NEXUS-6102 this was fixed in 2.8 and therefore I went on with upgrading to 2.8 and it does not happen anymore - I'm not sure, if this has caused the problem.
This is a bit of a shot in the dark... but I do know of an issue that could cause this. If you have an SSL enabled reverse proxy (like nginx or Apache+mod_proxy) in front of Nexus you need to make sure it is setting the X-Forwarded-Proto header. If you're using apache you can do this with:
RequestHeader set X-Forwarded-Proto "https"
If this isn't the problem I'm going to need some diagnostic information. If you can submit your nexus.log file to https://support.sonatype.com I'll take a look at it.

Symfony 2.0.6 FOS UserBundle remains in login page

I have two dev environments: one using free MAMP and the other installed MySQL and configured PHP in MacOS Lion.
In the MAMP environment everything is working, however, in the other one it is not. What happens is that when I try to login the browser stays in the same page.
The PHPSESSID is received.
The path set in php.ini entry "session.save_path" is writable (since it rights when I try to login). And "session.auto_start" is set to "0" (I tried it to set to "1" but then I get an error stating that a session is already started and the start_session() function was ignored)
Any idea what must be causing this? I can post my configurations and code if you think it would help...
I Accidentally updated symfony to version 2.0.12 and the FOS UserBundle to latest version. Because of this, the login form needed the parameter "_csrf_token"

ColdFusion SSL authentication failure

I have a simple cfhttp request (a login) going out to an SSL server:
<cfhttp url="https://www2.[domain].com/api/user/login" method="POST" port="443" >
<cfhttpparam type="formfield" name="username" value="[username]" >
<cfhttpparam type="formfield" name="password" value="[password]" >
</cfhttp>
The request fails before it begins, and the ColdFusion server says:
I/O Exception: peer not authenticated
Both development environments work smashingly. They receive the login session and then hand that to the collector process which successfully taps the remote web service for data.
After I spent a day trying to get the correct certificate into the ColdFusion stores, I had the bright idea to actually compare them to the working development environments. I looked at them (keytool -list), and they are identical.
Now that the obvious is absolved the questions I'm left with are twofold:
Is there some other certificate repository I need to check, or alternately, is there a place where I can get ColdFusion to tell me what certificate repository it needs to find the certificate IN (on the off chance it can and has been altered) or if that is even possible.
Identify and correct else could be causing this.
Are the development and production environments the same? Are they all, for example, ColdFusion 9 Standard or ColdFusion 8 Enterprise?
In my experience, this error is usually caused by one of two things:
The administrator failed to install the certificate into the cacarts repository, or they installed it into the wrong one.
ColdFusion Enterprise and ColdFusion Developer edition (for ColdFusion 8 and ColdFusion 9 both, I believe) have an issue with the built-in BSafe CryptoJ library that is installed and certain types of certificates (I have not yet been able to determine a pattern) that causes this error. There are some workarounds if this is the case.
First, I would explore the possibility that you are importing into the wrong certificate repository. It can be hard to tell which repository is being used. In your CF Admin under "Setting Summary" you should be able to find the location of the JRE that is being used. It is listed under "Java Home". Take that directory and add lib/security to the end of it and that should be the location of the cacaerts file that is being used. I say should because I have seen at least one weird situation where it was not.
I HAD the same problem and I tried everything and can't fix it. Strange is that everything worked fine then suddenly stopped working. It might be a Java update on the server causing the problem or a change of the certificate from the website the CFHTTP is trying to access.
Anyway, here is a link I setup for a "demo" of this problem:
http://www.viaromania.eu/https.cfm
As you can see, I am trying to access a HTTPS service using CFHTTP tag. And it is not working. I deleted the certificate from C:\ColdFusion9\runtime\jre\lib\security\cacerts, generated a new one from the website URL, imported back, installed "certman" under CFID/admministrator, checked the certificate, it's there... and it's listed in my test page.
If you scroll to the bottom of my test page, you'll see a similar CFHTTP to https://www.google.com and this works fine, even if there is no certificate installed on the server.
It is important to mention that the request is working just perfect on my development machine, and here I also don't have any certificate installed...
AND THIS HOW I FIXED IT
1. Updated ColdFusion 9.0.2 with this - https://helpx.adobe.com/coldfusion/kb/cumulative-hotfix-1-coldfusion-902.html
2. Installed Java JDK 1.7.0_79 from here http://www.oracle.com/technetwork/java/javase/downloads/jdk7-downloads-1880260.html
3. Changed the Java Home in ColdFusion Administrator / Server Settings → Java and JVM from "C:\ColdFusion9\runtime\lib\jre" to "C:\Program Files\Java\jdk1.7.0_79\jre"
That's it. I don't know if it uses any certificate or not. They were installed in the "C:\ColdFusion9\runtime\lib\jre\lib\security\cacerts" and not moved from there or anything.