Debug logs error

dev support
1

Recently upgraded to the latest version of Lucee on our Windows server.

The debug log viewer is throwing the following error:
Lucee 5.3.5.92 Error (org.owasp.esapi.errors.ConfigurationException)
Message java.lang.ClassNotFoundException: org.opensaml.ESAPISecurityConfig not found by org.lucee.esapi [83] SecurityConfiguration class (org.opensaml.ESAPISecurityConfig) must be in class path.
Stacktrace The Error Occurred in
/admin/debugging.logs.detail.cfm: line 65
called from /admin/debugging.logs.cfm: line 151
called from /admin/web.cfm: line 467

ESAPI owasp extension version: 2.1.0.18

OS: Windows 2016 Datacenter
Java Version: 1.8.0_251-b08
Tomcat Version: 9.0.26
Lucee Version: 5.3.5.92

2

@dman1, Yes, the issue confirmed with the ESAPI extension version 2.1.0.18. But, very first time only it was happened. Could you please check with the latest version of the extension?

3

For new users who still aren’t very familiar with Lucee and to add a little bit more information to @cfmitrah 's post:

To update the extension log into Lucees Server Admin, click on
Extension => Applications and you’ll see the installed extensions. Click on the installed OWASP ESAPI Extension (it should have a “update me” banner if a newer version is available). There you’ll be able to upgrade and downgrade the extension.

4

good tip, the latest version is a SNAPSHOT, you need to click that in red with the (2) to see the latest

image
image858Ă—380 16.5 KB

1 Like
5

Updated ESAPI to 2.2.0.0-SNAPSHOT and the issue is still occuring

image

image
image1610Ă—533 10.1 KB

6

@dman1, Could you please restart the server and check again and report here back.

7

Ive just build a new Lucee server from scratch on Win 2019 DC.
Configured system, settings and my application is running fine.
Update ESAPI to 2.2.0-SNAPSHOT, reboot server
Same error is occuring.