Trying to do and upgrade and CAS is popping up an error but is allowing the user access.
Asked by Billy_Jones:

Trying to do and upgrade and getting the CAS error. Just wanting to see if anyone else has been getting that error. And if so what have you do to get it fixed.


Answers:
author: Nic Brough -Adaptavist-
body: We might have, but without the error message, there's no way to know if we have.

comments: author: Billy_Jones
body: Cause

javax.servlet.ServletException: Filter execution threw an exception  
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:200)

caused by: java.lang.IllegalAccessError: tried to access method com.atlassian.confluence.event.events.security.SecurityEvent.\<init\>(Ljava/lang/Object;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V from class org.jasig.cas.client.integration.atlassian.Confluence35CasAuthenticator  
at org.jasig.cas.client.integration.atlassian.Confluence35CasAuthenticator.getUser(Confluence35CasAuthenticator.java:73)


author: Rafa? Nowakowski
body: I have the same error message.

[@Billy_Jones](/t5/user/viewprofilepage/user-id/3395880) did you manage to resolve the problem?


author: Peter Yeung
body: I also have the same issue error message as above. My instance of Confluence seems to work fine after just refreshing from the error page.

However, it shows up again when logging in every time.

What version of the jar files are you using?

[@Billy_Jones](/t5/user/viewprofilepage/user-id/3395880) were you able to resolve the issue?


author: Peter Yeung
body: [@Billy_Jones](/t5/user/viewprofilepage/user-id/3395880) [@Rafa? Nowakowski](/t5/user/viewprofilepage/user-id/1595976)

I am not no longer getting that error now after I updated my jar files and a slight modification to my seraph-config.xml

I mostly followed the guide here: <https://www.surekhatech.com/blog/cas-integration-with-confluence>

However I had to update the jars which you can get from maven

1. <https://mvnrepository.com/artifact/org.jasig.cas.client/cas-client-core>
2. <https://mvnrepository.com/artifact/org.jasig.cas.client/cas-client-integration-atlassian>

Currently I am using 3.6.2 and 3.5.1 respectively on Confluence 7.4.8

for the seraph-config.xml, I followed the instructions here: [https://github.com/apereo/java-cas-client#modify-the-seraph-configxml](https://github.com/apereo/java-cas-client#modify-the-seraph-configxml?)

```
<!-- CAS:START - Java Client Confluence Authenticator --><authenticator class="org.jasig.cas.client.integration.atlassian.ConfluenceCasAuthenticator"/><!-- CAS:END -->
```

Hope this help!


author: Boris T
body: [@Peter Yeung](/t5/user/viewprofilepage/user-id/4124838) and I found that after we enabled CAS using ConfluenceCasAuthenticator instead of Confluence35CasAuthenticator

1) logins with local account (i.e. non CAS) still work and that is good and

2) local (i.e. non-CAS) admin account is not able to access any pages under /admin/\* (error below)

```
java.lang.ClassCastException: com.atlassian.confluence.security.seraph.ConfluenceUserPrincipal cannot be cast to com.atlassian.user.User at com.atlassian.confluence.security.ConfluenceGroupCache.getGroups(ConfluenceGroupCache.java:28) at com.atlassian.confluence.security.ConfluenceRoleMapper.seraphHasRole(ConfluenceRoleMapper.java:46) at com.atlassian.confluence.security.ConfluenceRoleMapper.hasRole(ConfluenceRoleMapper.java:41) at com.atlassian.seraph.filter.SecurityFilter.doFilter(SecurityFilter.java:186) at com.atlassian.confluence.web.filter.ConfluenceSecurityFilter.applyFilter(ConfluenceSecurityFilter.java:40)
```

Any ideas, suggestions what we can do to re-enable access to /admin/\* for local (i.e. non CAS) admin users when using ConfluenceCasAuthenticator?