You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cxf.apache.org by Alin <al...@ttu.edu> on 2018/06/01 15:40:29 UTC

Re: wsfed apereo cas 5

Any other thoughts?

I have spent many hours on this project with not much to show for it. I can
try any other tests or suggestions, even if they are a long shot. 

Thank you again for your time and advice.



--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Colm O hEigeartaigh <co...@apache.org>.
It looks like the signature trust validation is not working correctly. The
error about "org/apache/xml/security/resource/xmlsecurity" is related to
the fact that some part of the application is initializing the Apache
Santuario (XML Security) Init class before WSS4J does it. When this is
done, the Santuario error message resource bundle is used instead of the
WSS4J one.

See this recent JIRA for an explanation:

https://issues.apache.org/jira/browse/WSS-631

The error should disappear if you can WSSConfig.init() before Apache
Santuario is initialized.

Colm.

On Fri, Jul 13, 2018 at 4:38 PM, Alin <al...@ttu.edu> wrote:

> I am not sure what the Merlin class is looking for in
>
> "org/apache/xml/security/resource/xmlsecurity
>
>
>
> These are the keystores that I have configured:
> cas.authn.wsfedIdP.sts.signingKeystoreFile=/etc/cas/config/ststrust.jks
> cas.authn.wsfedIdP.sts.signingKeystorePassword=storepass
> cas.authn.wsfedIdP.sts.encryptionKeystoreFile=/etc/
> cas/config/stsencrypt.jks
> cas.authn.wsfedIdP.sts.encryptionKeystorePassword=storepass
>
> # cas.authn.wsfedIdP.sts.subjectNameIdFormat=unspecified
> cas.authn.wsfedIdP.sts.encryptTokens=false
>
> cas.authn.wsfedIdP.sts.realm.keystoreFile=/etc/cas/config/stscasrealm.jks
> cas.authn.wsfedIdP.sts.realm.keystorePassword=storepass
> cas.authn.wsfedIdP.sts.realm.keystoreAlias=realmcas
> cas.authn.wsfedIdP.sts.realm.keyPassword=cas123456
>
>
>
>
> --
> Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
I am not sure what the Merlin class is looking for in

"org/apache/xml/security/resource/xmlsecurity



These are the keystores that I have configured:
cas.authn.wsfedIdP.sts.signingKeystoreFile=/etc/cas/config/ststrust.jks
cas.authn.wsfedIdP.sts.signingKeystorePassword=storepass
cas.authn.wsfedIdP.sts.encryptionKeystoreFile=/etc/cas/config/stsencrypt.jks
cas.authn.wsfedIdP.sts.encryptionKeystorePassword=storepass

# cas.authn.wsfedIdP.sts.subjectNameIdFormat=unspecified
cas.authn.wsfedIdP.sts.encryptTokens=false

cas.authn.wsfedIdP.sts.realm.keystoreFile=/etc/cas/config/stscasrealm.jks
cas.authn.wsfedIdP.sts.realm.keystorePassword=storepass
cas.authn.wsfedIdP.sts.realm.keystoreAlias=realmcas
cas.authn.wsfedIdP.sts.realm.keyPassword=cas123456




--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
Colm, great advice.

It turns out I was making a stupid configuration mistake: 
I had etc/cas/config instead of /etc/cas/config.


I am now getting a new warning:

WARN [org.apache.cxf.sts.token.validator.SAMLTokenValidator] - <>
org.apache.wss4j.common.ext.WSSecurityException: No message with ID
"certpath" found in resource bundle
"org/apache/xml/security/resource/xmlsecurity". Original Exception was a
java.security.cert.CertPathValidatorException and message signature check
failed
        at
org.apache.wss4j.common.crypto.Merlin.verifyTrust(Merlin.java:933)
~[wss4j-ws-security-common-2.1.7.jar:2.1.7]
...
Caused by: java.security.cert.CertPathValidatorException: signature check
failed
        at
sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
~[?:1.8.0_144]
        at
sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:223)
~[?:1.8.0_144]
        at
sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:140)
~[?:1.8.0_144]




--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Colm O hEigeartaigh <co...@apache.org>.
Do you have access to how the STS is configured? As you can see here, we
use "org.apache.ws.security.components.crypto.Merlin" as the crypto
provider in our STS tests and it works fine:

https://github.com/apache/cxf/blob/master/services/sts/systests/basic/src/test/resources/stsKeystore.properties

Colm.

On Thu, Jul 5, 2018 at 11:54 PM, Alin <al...@ttu.edu> wrote:

> This is the code that throws the error
> <Cannot issue token: Cannot create Crypto class
> org.apache.ws.security.components.crypto.Merlin>
> org.apache.cxf.ws.security.sts.provider.STSException: Cannot create Crypto
> class org.apache.ws.security.components.crypto.Merlin
>
> <http://cxf.547215.n5.nabble.com/file/t341715/casserver51.png>
>
>
>
> --
> Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
This is the code that throws the error
<Cannot issue token: Cannot create Crypto class
org.apache.ws.security.components.crypto.Merlin>
org.apache.cxf.ws.security.sts.provider.STSException: Cannot create Crypto
class org.apache.ws.security.components.crypto.Merlin

<http://cxf.547215.n5.nabble.com/file/t341715/casserver51.png> 



--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
In the stacktrace above, please notice there is a WARNING (which may not be
that important) and an ERROR:

WARN [org.apache.cxf.transport.https.SSLUtils] - <Default key managers
cannot be initialized: Password must not be null>
java.security.UnrecoverableKeyException: Password must not be null

and


ERROR [org.apache.cxf.sts.operation.TokenIssueOperation] - <Cannot issue
token: Cannot create Crypto class
org.apache.ws.security.components.crypto.Merlin>
org.apache.cxf.ws.security.sts.provider.STSException: Cannot create Crypto
class org.apache.ws.security.components.crypto.Merlin




--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
Thank you again for your answers.

I tried to open a pull request in the apereo cas project but that did not go
anywhere( I do not have a full solution and nobody was willing to help with
advice).

So I went back to an older version of cas (5.1 - it is here that the wsfed
functionality was first implemented and tested).

This is the error stack here. Your suggestions and observations are most
appreciated.




t:unknown
WHAT:
id=4220814836368526661,name=RegexRegisteredService,description=WS-Federation
Authentication
Request,serviceId=/ws/idp/federationcallback.+,usernameAttributeProvider=org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider@d,theme=<null>,evaluationOrder=0,logoutType=BACK_CHANNEL,attributeReleasePolicy=org.apereo.cas.services.ReturnAllowedAttributeReleasePolicy@30bdc4fe[attributeFilter=<null>,principalAttributesRepository=org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository@2f6fc12e[],authorizedToReleaseCredentialPassword=false,authorizedToReleaseProxyGrantingTicket=false,excludeDefaultAttributes=false,principalIdAttribute=<null>,allowedAttributes=[]],accessStrategy=org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy@77968029[enabled=true,ssoEnabled=true,requireAllAttributes=true,requiredAttributes={},unauthorizedRedirectUrl=<null>,caseInsensitive=false,rejectedAttributes={}],publicKey=<null>,proxyPolicy=org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy@68c8e17d,logo=<null>,logoutUrl=<null>,requiredHandlers=[],properties={},multifactorPolicy=org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy@67bbb821[multifactorAuthenticationProviders=[],failureMode=CLOSED,principalAttributeNameTrigger=<null>,principalAttributeValueToMatch=<null>,bypassEnabled=false],informationUrl=<null>,privacyUrl=<null>,<null>
ACTION: SAVE_SERVICE_SUCCESS
APPLICATION: CAS
WHEN: Thu Jul 05 16:50:09 CDT 2018
CLIENT IP ADDRESS: 127.0.0.1
SERVER IP ADDRESS: 127.0.0.1
=============================================================

>
2018-07-05 16:50:09,174 INFO
[org.apereo.cas.services.DefaultServicesManager] - <Loaded [4] service(s)
from [InMemoryServiceRegistry].>
2018-07-05 16:50:09,382 INFO
[org.apereo.cas.web.flow.InitialFlowSetupAction] - <Setting path for cookies
for warn cookie generator to: [/cas/] >
2018-07-05 16:50:09,396 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: audit:unknown
WHAT: [event=success,timestamp=Thu Jul 05 16:50:09 CDT
2018,source=RankedAuthenticationProviderWebflowEventResolver]
ACTION: AUTHENTICATION_EVENT_TRIGGERED
APPLICATION: CAS
WHEN: Thu Jul 05 16:50:09 CDT 2018
CLIENT IP ADDRESS: 127.0.0.1
SERVER IP ADDRESS: 127.0.0.1
=============================================================

>
2018-07-05 16:50:13,097 INFO
[org.apereo.cas.authentication.AbstractAuthenticationManager] -
<Authenticated principal [casuser] with attributes [{}] via credentials
[[casuser]].>
2018-07-05 16:50:13,203 WARN [org.apache.cxf.transport.https.SSLUtils] -
<Default key managers cannot be initialized: Password must not be null>
java.security.UnrecoverableKeyException: Password must not be null
        at
sun.security.provider.JavaKeyStore.engineGetKey(JavaKeyStore.java:132)
~[?:1.8.0_144]
        at
sun.security.provider.JavaKeyStore$JKS.engineGetKey(JavaKeyStore.java:56)
~[?:1.8.0_144]
        at
sun.security.provider.KeyStoreDelegator.engineGetKey(KeyStoreDelegator.java:96)
~[?:1.8.0_144]
        at
sun.security.provider.JavaKeyStore$DualFormatJKS.engineGetKey(JavaKeyStore.java:70)
~[?:1.8.0_144]
        at java.security.KeyStore.getKey(KeyStore.java:1023) ~[?:1.8.0_144]
        at
sun.security.ssl.SunX509KeyManagerImpl.<init>(SunX509KeyManagerImpl.java:133)
~[?:1.8.0_144]
        at
sun.security.ssl.KeyManagerFactoryImpl$SunX509.engineInit(KeyManagerFactoryImpl.java:70)
~[?:1.8.0_144]
        at javax.net.ssl.KeyManagerFactory.init(KeyManagerFactory.java:256)
~[?:1.8.0_144]
        at
org.apache.cxf.configuration.jsse.SSLUtils.loadDefaultKeyManagers(SSLUtils.java:176)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.configuration.jsse.SSLUtils.getDefaultKeyStoreManagers(SSLUtils.java:149)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.https.SSLUtils.getSSLContext(SSLUtils.java:78)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.https.HttpsURLConnectionFactory.decorateWithTLS(HttpsURLConnectionFactory.java:153)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.https.HttpsURLConnectionFactory.createConnection(HttpsURLConnectionFactory.java:104)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.http.URLConnectionHTTPConduit.createConnection(URLConnectionHTTPConduit.java:113)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.http.URLConnectionHTTPConduit.setupConnection(URLConnectionHTTPConduit.java:117)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.http.HTTPConduit.prepare(HTTPConduit.java:497)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.TransportURIResolver.resolve(TransportURIResolver.java:127)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.wsdl11.CatalogWSDLLocator.getBaseInputSource(CatalogWSDLLocator.java:74)
~[cxf-rt-wsdl-3.1.7.jar:3.1.7]
        at
org.apache.cxf.wsdl11.AbstractWrapperWSDLLocator.getBaseInputSource(AbstractWrapperWSDLLocator.java:57)
~[cxf-rt-wsdl-3.1.7.jar:3.1.7]
        at
org.apache.cxf.wsdl11.WSDLManagerImpl.loadDefinition(WSDLManagerImpl.java:209)
~[cxf-rt-wsdl-3.1.7.jar:3.1.7]
        at
org.apache.cxf.wsdl11.WSDLManagerImpl.getDefinition(WSDLManagerImpl.java:163)
~[cxf-rt-wsdl-3.1.7.jar:3.1.7]
        at
org.apache.cxf.wsdl11.WSDLServiceFactory.<init>(WSDLServiceFactory.java:85)
~[cxf-rt-wsdl-3.1.7.jar:3.1.7]
        at
org.apache.cxf.ws.security.trust.AbstractSTSClient.createClient(AbstractSTSClient.java:654)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.apache.cxf.ws.security.trust.AbstractSTSClient.issue(AbstractSTSClient.java:736)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.apache.cxf.ws.security.trust.STSClient.requestSecurityToken(STSClient.java:61)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.apache.cxf.ws.security.trust.STSClient.requestSecurityToken(STSClient.java:55)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.apache.cxf.ws.security.trust.STSClient.requestSecurityToken(STSClient.java:51)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.apereo.cas.authentication.SecurityTokenServiceAuthenticationMetaDataPopulator.invokeSecurityTokenServiceForToken(SecurityTokenServiceAuthenticationMetaDataPopulator.java:57)
~[cas-server-support-ws-sts-5.1.9.jar:5.1.9]
        at
org.apereo.cas.authentication.SecurityTokenServiceAuthenticationMetaDataPopulator.populateAttributes(SecurityTokenServiceAuthenticationMetaDataPopulator.java:85)
~[cas-server-support-ws-sts-5.1.9.jar:5.1.9]
        at
org.apereo.cas.authentication.SecurityTokenServiceAuthenticationMetaDataPopulator$$FastClassBySpringCGLIB$$96719d1c.invoke(<generated>)
~[cas-server-support-ws-sts-5.1.9.jar:5.1.9]
        at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.cloud.context.config.StandardBeanLifecycleDecorator$2.invoke(StandardBeanLifecycleDecorator.java:85)
~[spring-cloud-context-1.2.0.RELEASE.jar:1.2.0.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apereo.cas.authentication.SecurityTokenServiceAuthenticationMetaDataPopulator$$EnhancerBySpringCGLIB$$2c5eb8dc.populateAttributes(<generated>)
~[cas-server-support-ws-sts-5.1.9.jar:5.1.9]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at com.sun.proxy.$Proxy123.populateAttributes(Unknown Source) ~[?:?]
        at
org.apereo.cas.authentication.AbstractAuthenticationManager.lambda$null$0(AbstractAuthenticationManager.java:89)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
java.util.stream.ForEachOps$ForEachOp$OfRef.accept(ForEachOps.java:184)
~[?:1.8.0_144]
        at
java.util.stream.ReferencePipeline$2$1.accept(ReferencePipeline.java:175)
~[?:1.8.0_144]
        at
java.util.HashMap$KeySpliterator.forEachRemaining(HashMap.java:1548)
~[?:1.8.0_144]
        at
java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:481)
~[?:1.8.0_144]
        at
java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:471)
~[?:1.8.0_144]
        at
java.util.stream.ForEachOps$ForEachOp.evaluateSequential(ForEachOps.java:151)
~[?:1.8.0_144]
        at
java.util.stream.ForEachOps$ForEachOp$OfRef.evaluateSequential(ForEachOps.java:174)
~[?:1.8.0_144]
        at
java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234)
~[?:1.8.0_144]
        at
java.util.stream.ReferencePipeline.forEach(ReferencePipeline.java:418)
~[?:1.8.0_144]
        at
org.apereo.cas.authentication.AbstractAuthenticationManager.lambda$populateAuthenticationMetadataAttributes$1(AbstractAuthenticationManager.java:89)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at java.util.ArrayList.forEach(ArrayList.java:1249) ~[?:1.8.0_144]
        at
org.apereo.cas.authentication.AbstractAuthenticationManager.populateAuthenticationMetadataAttributes(AbstractAuthenticationManager.java:88)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
org.apereo.cas.authentication.AbstractAuthenticationManager.authenticate(AbstractAuthenticationManager.java:149)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
org.apereo.cas.authentication.AbstractAuthenticationManager$$FastClassBySpringCGLIB$$12a86894.invoke(<generated>)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apereo.inspektr.audit.AuditTrailManagementAspect.handleAuditTrail(AuditTrailManagementAspect.java:134)
~[inspektr-audit-1.7.GA.jar:1.7.GA]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:627)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:616)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJAroundAdvice.java:70)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:168)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:92)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
com.ryantenney.metrics.spring.MeteredMethodInterceptor.invoke(MeteredMethodInterceptor.java:45)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.MeteredMethodInterceptor.invoke(MeteredMethodInterceptor.java:32)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.AbstractMetricMethodInterceptor.invoke(AbstractMetricMethodInterceptor.java:59)
~[metrics-spring-3.1.3.jar:?]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
com.ryantenney.metrics.spring.TimedMethodInterceptor.invoke(TimedMethodInterceptor.java:48)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.TimedMethodInterceptor.invoke(TimedMethodInterceptor.java:34)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.AbstractMetricMethodInterceptor.invoke(AbstractMetricMethodInterceptor.java:59)
~[metrics-spring-3.1.3.jar:?]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
com.ryantenney.metrics.spring.CountedMethodInterceptor.invoke(CountedMethodInterceptor.java:46)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.CountedMethodInterceptor.invoke(CountedMethodInterceptor.java:32)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.AbstractMetricMethodInterceptor.invoke(AbstractMetricMethodInterceptor.java:59)
~[metrics-spring-3.1.3.jar:?]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
com.ryantenney.metrics.spring.MeteredMethodInterceptor.invoke(MeteredMethodInterceptor.java:45)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.MeteredMethodInterceptor.invoke(MeteredMethodInterceptor.java:32)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.AbstractMetricMethodInterceptor.invoke(AbstractMetricMethodInterceptor.java:59)
~[metrics-spring-3.1.3.jar:?]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
com.ryantenney.metrics.spring.TimedMethodInterceptor.invoke(TimedMethodInterceptor.java:48)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.TimedMethodInterceptor.invoke(TimedMethodInterceptor.java:34)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.AbstractMetricMethodInterceptor.invoke(AbstractMetricMethodInterceptor.java:59)
~[metrics-spring-3.1.3.jar:?]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
com.ryantenney.metrics.spring.CountedMethodInterceptor.invoke(CountedMethodInterceptor.java:46)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.CountedMethodInterceptor.invoke(CountedMethodInterceptor.java:32)
~[metrics-spring-3.1.3.jar:?]
        at
com.ryantenney.metrics.spring.AbstractMetricMethodInterceptor.invoke(AbstractMetricMethodInterceptor.java:59)
~[metrics-spring-3.1.3.jar:?]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apereo.cas.authentication.PolicyBasedAuthenticationManager$$EnhancerBySpringCGLIB$$56d773e0.authenticate(<generated>)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
org.apereo.cas.authentication.DefaultAuthenticationTransactionManager.handle(DefaultAuthenticationTransactionManager.java:34)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
org.apereo.cas.authentication.DefaultAuthenticationSystemSupport.handleAuthenticationTransaction(DefaultAuthenticationSystemSupport.java:55)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
org.apereo.cas.authentication.DefaultAuthenticationSystemSupport.handleInitialAuthenticationTransaction(DefaultAuthenticationSystemSupport.java:41)
~[cas-server-core-authentication-5.1.9.jar:5.1.9]
        at
org.apereo.cas.web.flow.resolver.impl.InitialAuthenticationAttemptWebflowEventResolver.resolveInternal(InitialAuthenticationAttemptWebflowEventResolver.java:70)
~[cas-server-core-webflow-5.1.9.jar:5.1.9]
        at
org.apereo.cas.web.flow.resolver.impl.AbstractCasWebflowEventResolver.resolve(AbstractCasWebflowEventResolver.java:489)
~[cas-server-core-webflow-5.1.9.jar:5.1.9]
        at
org.apereo.cas.web.flow.resolver.impl.AbstractCasWebflowEventResolver.resolveSingle(AbstractCasWebflowEventResolver.java:494)
~[cas-server-core-webflow-5.1.9.jar:5.1.9]
        at
org.apereo.cas.web.flow.resolver.impl.AbstractCasWebflowEventResolver$$FastClassBySpringCGLIB$$657b493c.invoke(<generated>)
~[cas-server-core-webflow-5.1.9.jar:5.1.9]
        at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.cloud.context.config.StandardBeanLifecycleDecorator$2.invoke(StandardBeanLifecycleDecorator.java:85)
~[spring-cloud-context-1.2.0.RELEASE.jar:1.2.0.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apereo.cas.web.flow.resolver.impl.InitialAuthenticationAttemptWebflowEventResolver$$EnhancerBySpringCGLIB$$1c04fbc.resolveSingle(<generated>)
~[cas-server-core-webflow-5.1.9.jar:5.1.9]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at com.sun.proxy.$Proxy215.resolveSingle(Unknown Source) ~[?:?]
        at
org.apereo.cas.web.flow.AbstractAuthenticationAction.doExecute(AbstractAuthenticationAction.java:59)
~[cas-server-core-webflow-5.1.9.jar:5.1.9]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:741)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.cloud.context.config.StandardBeanLifecycleDecorator$2.invoke(StandardBeanLifecycleDecorator.java:85)
~[spring-cloud-context-1.2.0.RELEASE.jar:1.2.0.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apereo.cas.web.flow.InitialAuthenticationAction$$EnhancerBySpringCGLIB$$b9a6d37.doExecute(<generated>)
~[cas-server-core-webflow-5.1.9.jar:5.1.9]
        at
org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at com.sun.proxy.$Proxy170.execute(Unknown Source) ~[?:?]
        at
org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.action.EvaluateAction.doExecute(EvaluateAction.java:77)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.execution.AnnotatedAction.execute(AnnotatedAction.java:145)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.execution.ActionExecutor.execute(ActionExecutor.java:51)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.ActionState.doEnter(ActionState.java:101)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at org.springframework.webflow.engine.State.enter(State.java:194)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.Transition.execute(Transition.java:228)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.impl.FlowExecutionImpl.execute(FlowExecutionImpl.java:395)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.impl.RequestControlContextImpl.execute(RequestControlContextImpl.java:214)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.TransitionableState.handleEvent(TransitionableState.java:116)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.Flow.handleEvent(Flow.java:547)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.impl.FlowExecutionImpl.handleEvent(FlowExecutionImpl.java:390)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.impl.RequestControlContextImpl.handleEvent(RequestControlContextImpl.java:210)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.ViewState.handleEvent(ViewState.java:231)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.ViewState.resume(ViewState.java:195)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at org.springframework.webflow.engine.Flow.resume(Flow.java:537)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.engine.impl.FlowExecutionImpl.resume(FlowExecutionImpl.java:259)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.executor.FlowExecutorImpl.resumeExecution(FlowExecutorImpl.java:169)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.webflow.executor.FlowExecutorImpl$$FastClassBySpringCGLIB$$661d80a9.invoke(<generated>)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.cloud.context.config.StandardBeanLifecycleDecorator$2.invoke(StandardBeanLifecycleDecorator.java:85)
~[spring-cloud-context-1.2.0.RELEASE.jar:1.2.0.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.webflow.executor.FlowExecutorImpl$$EnhancerBySpringCGLIB$$d8f7c6b4.resumeExecution(<generated>)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at com.sun.proxy.$Proxy165.resumeExecution(Unknown Source) ~[?:?]
        at
org.springframework.webflow.mvc.servlet.FlowHandlerAdapter.handle(FlowHandlerAdapter.java:253)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
        at
org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:967)
~[spring-webmvc-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:901)
~[spring-webmvc-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:970)
~[spring-webmvc-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:872)
~[spring-webmvc-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
~[javax.servlet-api-3.1.0.jar:3.1.0]
        at
org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:846)
~[spring-webmvc-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
~[javax.servlet-api-3.1.0.jar:3.1.0]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
~[tomcat-embed-websocket-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.web.support.AuthenticationCredentialsLocalBinderClearingFilter.doFilter(AuthenticationCredentialsLocalBinderClearingFilter.java:28)
~[cas-server-core-web-5.1.9.jar:5.1.9]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.security.RequestParameterPolicyEnforcementFilter.doFilter(RequestParameterPolicyEnforcementFilter.java:261)
~[cas-server-security-filter-2.0.6.jar:2.0.6]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.security.ResponseHeadersEnforcementFilter.doFilter(ResponseHeadersEnforcementFilter.java:238)
~[cas-server-security-filter-2.0.6.jar:2.0.6]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.boot.actuate.trace.WebRequestTraceFilter.doFilterInternal(WebRequestTraceFilter.java:110)
~[spring-boot-actuator-1.5.3.RELEASE.jar:1.5.3.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.HttpPutFormContentFilter.doFilterInternal(HttpPutFormContentFilter.java:109)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:81)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.logging.web.ThreadContextMDCServletFilter.doFilter(ThreadContextMDCServletFilter.java:90)
~[cas-server-core-logging-5.1.9.jar:5.1.9]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.boot.actuate.autoconfigure.MetricsFilter.doFilterInternal(MetricsFilter.java:106)
~[spring-boot-actuator-1.5.3.RELEASE.jar:1.5.3.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:197)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:64)
~[inspektr-common-1.7.GA.jar:1.7.GA]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:677)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
[?:1.8.0_144]
        at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
[?:1.8.0_144]
        at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_144]
2018-07-05 16:50:14,748 ERROR
[org.apache.cxf.sts.operation.TokenIssueOperation] - <Cannot issue token:
Cannot create Crypto class org.apache.ws.security.components.crypto.Merlin>
org.apache.cxf.ws.security.sts.provider.STSException: Cannot create Crypto
class org.apache.ws.security.components.crypto.Merlin
        at
org.apache.cxf.sts.StaticSTSProperties.configureProperties(StaticSTSProperties.java:84)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.sts.StaticSTSProperties$$FastClassBySpringCGLIB$$9b69bda8.invoke(<generated>)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.cloud.context.config.StandardBeanLifecycleDecorator$2.invoke(StandardBeanLifecycleDecorator.java:85)
~[spring-cloud-context-1.2.0.RELEASE.jar:1.2.0.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.cxf.sts.StaticSTSProperties$$EnhancerBySpringCGLIB$$8f6a5c15.configureProperties(<generated>)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at com.sun.proxy.$Proxy177.configureProperties(Unknown Source)
~[?:?]
        at
org.apache.cxf.sts.operation.AbstractOperation.parseRequest(AbstractOperation.java:189)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.sts.operation.TokenIssueOperation.issueSingle(TokenIssueOperation.java:114)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.sts.operation.TokenIssueOperation.issue(TokenIssueOperation.java:85)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.sts.operation.TokenIssueOperation$$FastClassBySpringCGLIB$$36089b11.invoke(<generated>)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.cloud.context.config.StandardBeanLifecycleDecorator$2.invoke(StandardBeanLifecycleDecorator.java:85)
~[spring-cloud-context-1.2.0.RELEASE.jar:1.2.0.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.cxf.sts.operation.TokenIssueOperation$$EnhancerBySpringCGLIB$$7a498c1d.issue(<generated>)
~[cxf-services-sts-core-3.1.7.jar:3.1.7]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at com.sun.proxy.$Proxy172.issue(Unknown Source) ~[?:?]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.apache.cxf.ws.security.sts.provider.SecurityTokenServiceProvider.invoke(SecurityTokenServiceProvider.java:244)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.apache.cxf.ws.security.sts.provider.SecurityTokenServiceProvider.invoke(SecurityTokenServiceProvider.java:70)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.apache.cxf.ws.security.sts.provider.SecurityTokenServiceProvider$$FastClassBySpringCGLIB$$2fcfb0df.invoke(<generated>)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.cloud.context.config.StandardBeanLifecycleDecorator$2.invoke(StandardBeanLifecycleDecorator.java:85)
~[spring-cloud-context-1.2.0.RELEASE.jar:1.2.0.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.cxf.ws.security.sts.provider.SecurityTokenServiceProvider$$EnhancerBySpringCGLIB$$265076bb.invoke(<generated>)
~[cxf-rt-ws-security-3.1.7.jar:3.1.7]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:333)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:213)
~[spring-aop-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at com.sun.proxy.$Proxy171.invoke(Unknown Source) ~[?:?]
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.8.0_144]
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
~[?:1.8.0_144]
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.8.0_144]
        at java.lang.reflect.Method.invoke(Method.java:498) ~[?:1.8.0_144]
        at
org.apache.cxf.service.invoker.AbstractInvoker.performInvocation(AbstractInvoker.java:180)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.jaxws.JAXWSMethodInvoker.performInvocation(JAXWSMethodInvoker.java:66)
~[cxf-rt-frontend-jaxws-3.1.7.jar:3.1.7]
        at
org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:96)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.jaxws.AbstractJAXWSMethodInvoker.invoke(AbstractJAXWSMethodInvoker.java:232)
~[cxf-rt-frontend-jaxws-3.1.7.jar:3.1.7]
        at
org.apache.cxf.jaxws.JAXWSMethodInvoker.invoke(JAXWSMethodInvoker.java:85)
~[cxf-rt-frontend-jaxws-3.1.7.jar:3.1.7]
        at
org.apache.cxf.service.invoker.AbstractInvoker.invoke(AbstractInvoker.java:74)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.interceptor.ServiceInvokerInterceptor$1.run(ServiceInvokerInterceptor.java:59)
~[cxf-core-3.1.7.jar:3.1.7]
        at
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
~[?:1.8.0_144]
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
~[?:1.8.0_144]
        at
org.apache.cxf.interceptor.ServiceInvokerInterceptor$2.run(ServiceInvokerInterceptor.java:126)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.workqueue.SynchronousExecutor.execute(SynchronousExecutor.java:37)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.interceptor.ServiceInvokerInterceptor.handleMessage(ServiceInvokerInterceptor.java:131)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)
~[cxf-core-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:254)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:180)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:299)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:218)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
~[javax.servlet-api-3.1.0.jar:3.1.0]
        at
org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:274)
~[cxf-rt-transports-http-3.1.7.jar:3.1.7]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
~[tomcat-embed-websocket-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.web.support.AuthenticationCredentialsLocalBinderClearingFilter.doFilter(AuthenticationCredentialsLocalBinderClearingFilter.java:28)
~[cas-server-core-web-5.1.9.jar:5.1.9]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.security.RequestParameterPolicyEnforcementFilter.doFilter(RequestParameterPolicyEnforcementFilter.java:261)
~[cas-server-security-filter-2.0.6.jar:2.0.6]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.security.ResponseHeadersEnforcementFilter.doFilter(ResponseHeadersEnforcementFilter.java:238)
~[cas-server-security-filter-2.0.6.jar:2.0.6]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.boot.actuate.trace.WebRequestTraceFilter.doFilterInternal(WebRequestTraceFilter.java:110)
~[spring-boot-actuator-1.5.3.RELEASE.jar:1.5.3.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.HttpPutFormContentFilter.doFilterInternal(HttpPutFormContentFilter.java:109)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:81)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.cas.logging.web.ThreadContextMDCServletFilter.doFilter(ThreadContextMDCServletFilter.java:90)
~[cas-server-core-logging-5.1.9.jar:5.1.9]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.boot.actuate.autoconfigure.MetricsFilter.doFilterInternal(MetricsFilter.java:106)
~[spring-boot-actuator-1.5.3.RELEASE.jar:1.5.3.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:197)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
~[spring-web-4.3.16.RELEASE.jar:4.3.16.RELEASE]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apereo.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:64)
~[inspektr-common-1.7.GA.jar:1.7.GA]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:496)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:81)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:650)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:677)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:803)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
[?:1.8.0_144]
        at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
[?:1.8.0_144]
        at
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
~[tomcat-embed-core-8.5.29.jar:8.5.29]
        at java.lang.Thread.run(Thread.java:748) [?:1.8.0_144]
2018-07-05 16:50:14,771 INFO
[org.apereo.inspektr.audit.support.Slf4jLoggingAuditTrailManager] - <Audit
trail record BEGIN
=============================================================
WHO: casuser
WHAT: Supplied credentials: [casuser]
ACTION: AUTHENTICATION_FAILED
APPLICATION: CAS
WHEN: Thu Jul 05 16:50:14 CDT 2018
CLIENT IP ADDRESS: 127.0.0.1
SERVER IP ADDRESS: 127.0.0.1
===============================



--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Colm O hEigeartaigh <co...@apache.org>.
The only thing I can think of suggesting is to look at the classpath to see
if there are some incompatible jars there?

Colm.

On Thu, Jun 7, 2018 at 12:19 AM, Alin <al...@ttu.edu> wrote:

> It does seem to me ( I could be just looking at the wrong thing) that the
> classloaders for
>
> StaxSource and Source are different.
>
> I used getClasssloader in the attached debug image and they look different.
>
> <http://cxf.547215.n5.nabble.com/file/t341715/classloaders.png>
>
>
>
> --
> Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
It does seem to me ( I could be just looking at the wrong thing) that the
classloaders for 

StaxSource and Source are different.

I used getClasssloader in the attached debug image and they look different.

<http://cxf.547215.n5.nabble.com/file/t341715/classloaders.png> 



--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
Furthermore, if I call m.invoke(serviceObject, paramArray);  directly in the
debugger, I get ClassCastException.

So basically, ClassCastException is being thrown although StaxSource is a
subclass of Source.

Could it be a Classloader problem, that Source and StaxSource were loaded by
two different class loaders?



--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Alin <al...@ttu.edu>.
Hi Colm, thank you for your input.

After more debugging, it seems more and more like this is a java reflection
problem and the call to the sts is not being performed successfully.

Would you please check the attached image? It comes down to
org.apache.cxf.service.invoker.AbstractInvoker.performInvocation

on line 179 (cxf-core-3.2.4):

m.invoke(serviceObject, paramArray);

Indeed,
- m is SecurityTokenServiceProvider.invoke(javax.xml.transform.Source)
- serviceObject is SecurityTokenServiceProvider
- paramArray contains org.apache.cxf.staxutils.StaxSource

Any idea why this call would cause a reflection error?

<http://cxf.547215.n5.nabble.com/file/t341715/reflection.png> 




--
Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html

Re: wsfed apereo cas 5

Posted by Colm O hEigeartaigh <co...@apache.org>.
Well it's more of an issue for the project which hosts the STS, as that's
where the bug is coming from. The only thing I can think of to suggest is
to capture what the failing message coming from the STS looks like, in case
it is a valid message and CXF is just not processing it correctly.

Colm.

On Fri, Jun 1, 2018 at 4:40 PM, Alin <al...@ttu.edu> wrote:

> Any other thoughts?
>
> I have spent many hours on this project with not much to show for it. I can
> try any other tests or suggestions, even if they are a long shot.
>
> Thank you again for your time and advice.
>
>
>
> --
> Sent from: http://cxf.547215.n5.nabble.com/cxf-user-f547216.html
>



-- 
Colm O hEigeartaigh

Talend Community Coder
http://coders.talend.com