Skip to Content.
Sympa Menu

grouper-users - [grouper-users] Duo provisioning NoClassDefFoundError issue

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] Duo provisioning NoClassDefFoundError issue


Chronological Thread 
  • From: Darren Boss <>
  • To: Grouper Users <>
  • Subject: [grouper-users] Duo provisioning NoClassDefFoundError issue
  • Date: Tue, 11 May 2021 09:17:42 -0400

I'm running the grouper:2.5.50 image under Kubernetes.

We still are not using Grouper in production but testing out some
places where we might use it in the future. We are also evaluating Duo
and Privacy Idea MFA platforms so I thought I'd try out provisioning
with Duo.

After working through some minor issues like creating the stems I'm
stuck at this error message in the logs:
java.lang.NoClassDefFoundError: Could not initialize class
com.duosecurity.client.Http

What should I check about my setup. I also found I had to set
grouperDuo.adminSyncEnabled = false and configure a stem for it or
additional errors were showing up in the logs.

I've added the following lines to grouper-loader.properties:
grouperDuo.adminIntegrationKey = <redacted>
grouperDuo.adminSecretKey = ${java.lang.System.getenv().get('DUO_SECRET_KEY')}
grouperDuo.adminDomainName = <redacted>
grouperDuo.adminSyncEnabled = false
# put groups in here which go to duo, the name in duo will be the extension
here
grouperDuo.folder.name.withDuoGroups = cc:test:duo
grouperDuo.folder.name.withDuoAdmins = cc:test:duoadmins
# put the comma separated list of sources to send to duo
grouperDuo.sourcesForSubjects = personLdap
# either have id for subject id or an attribute for the duo username
(e.g. netId)
grouperDuo.subjectAttributeForDuoUsername = uid
# is grouper the true system of record, delete duo groups which dont
exist in grouper
grouperDuo.deleteGroupsInDuoWhichArentInGrouper = false
# configure the duo change log consumer
changeLog.consumer.duo.class =
edu.internet2.middleware.grouperDuo.GrouperDuoChangeLogConsumer
#the quartz cron is a cron-like string. it defaults to every minute
on the minute (since the temp to change log job runs
#at 10 seconds to each minute). it defaults to this: 0 * * * * ?
#though it will stagger each one by 2 seconds
#
http://www.quartz-scheduler.org/documentation/quartz-1.x/tutorials/crontrigger
changeLog.consumer.duo.quartzCron =
# Schedule full refresh
otherJob.duo.class = edu.internet2.middleware.grouperDuo.GrouperDuoFullRefresh
otherJob.duo.quartzCron = 0 0 5 * * ?
--
Darren Boss
Senior Programmer/Analyst
Programmeur-analyste principal



  • [grouper-users] Duo provisioning NoClassDefFoundError issue, Darren Boss, 05/11/2021

Archive powered by MHonArc 2.6.24.

Top of Page