subject:"Re\: \[xwiki\-users\] XWiki Docker in Prod"

Re: [xwiki-users] XWiki Docker in Prod

2017-05-19 Thread Vincent Massol

[[Note: The XWiki project is switching away from this mailing list and moving 
to a forum: https://discourse.xwiki.org. This list will be made readonly in a 
few days. Please post on the forum from now on. Thanks.]]

-
Hi Lester,

> On 19 May 2017, at 18:48, Lester Marc Dizon (ITX) <lmdi...@itx-ge.com> wrote:
> 
> Hi Vincent,
> 
> I'm trying to replicate the xwiki and mysql-xwiki containers to another web 
> server (for a web server cluster) but it doesn't work . The database data 
> doesn't persist on the image when I docker commit. I do the following:
> 
> On test server:
> sudo docker commit 7c7a4a700519 mysql-xwiki_itx
> sudo docker save mysql-xwiki_itx > /vagrant/mysql-xwiki_itx.tar
> 
> On test server2:
> docker load < /vagrant/mysql-xwiki_itx.tar
> docker run --net=xwiki-nw --name mysql-xwiki -v /my/own/mysql:/var/lib/mysql 
> -e MYSQL_ROOT_PASSWORD=xwiki -e MYSQL_USER=xwiki -e MYSQL_PASSWORD=xwiki -e 
> MYSQL_DATABASE=xwiki -d mysql-xwiki_itx:latest --character-set-server=utf8 
> --collation-server=utf8_bin --explicit-defaults-for-timestamp=1
> 
> "xwiki" database doesn't persist. Would you know why and to make it persist 
> on the commit? Sorry for this seems to be trivial question..

I’ve never used docker commit/load so I’d need to learn those to help on that.

But I don’t understand how this could work since on the 1st server you have 2 
local volumes (one for the xwiki permanent dir and one for mysql). How would 
these local volumes find their way onto the 2nd server?

Thanks
-Vincent

PS: Please use the users mailing list or even better please switch to the new 
XWiki forum on http://forum.xwiki.org (see 
http://dev.xwiki.org/xwiki/bin/view/Community/Discuss).

> Thanks,
> Lester
> 
> 
> -Original Message-
> From: users [mailto:users-boun...@xwiki.org] On Behalf Of Vincent Massol
> Sent: vendredi 12 mai 2017 17:16
> To: XWiki Users <users@xwiki.org>
> Subject: Re: [xwiki-users] XWiki Docker in Prod
> 
> cool thanks for reporting back!
> 
> Have a nice weekend too. 
> 
> And let me know if you have ideas on how to improve the docker image.
> 
> Thanks
> -Vincent
> 
>> On 12 May 2017, at 17:11, Lester Marc Dizon (ITX) <lmdi...@itx-ge.com> wrote:
>> 
>> Hi guys,
>> 
>> Thanks alot for all the help. I have logs and ldap running!
>> 
>> @Thomas Mortagne, for ldap I had this config missing (I actually thought 
>> that sAMAccountName should be replaced by the user to authenticate with the 
>> windows AD) :
>> xwiki.authentication.ldap.UID_attr=sAMAccountName
>> 
>> Thanks and have a nice weekend!
>> 
>> Lester
>> 
>> -Original Message-
>> From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas 
>> Mortagne
>> Sent: jeudi 11 mai 2017 19:05
>> To: XWiki Users <users@xwiki.org>
>> Subject: Re: [xwiki-users] XWiki Docker in Prod
>> 
>> You have various examples
>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/UseCases/.
>> 
>> On Thu, May 11, 2017 at 7:03 PM, Thomas Mortagne <thomas.morta...@xwiki.com> 
>> wrote:
>>> XWiki tried to find an entry in the LDAP server with the field "cn"
>>> having the value "lmdizon-itx". Either this uid does not exist or you 
>>> need to set a different field using the property 
>>> xwiki.authentication.ldap.UID_attr (cn is the default).
>>> 
>>> On Thu, May 11, 2017 at 6:20 PM, Lester Marc Dizon (ITX) 
>>> <lmdi...@itx-ge.com> wrote:
>>>> @Thomas Froehlich thanks it works and I see LDAP debug logs! @Vincent 
>>>> Massol , with Thomas way, I find the LDAP logs in 
>>>> "/var/lib/tomcat8/logs/xwiki.log" .
>>>> 
>>>> I added the following configuration in xwiki.cfg but it still doesn't work:
>>>> xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthS
>>>> e
>>>> rviceImpl
>>>> xwiki.authentication.ldap.trylocal=1
>>>> xwiki.authentication.ldap=1
>>>> xwiki.authentication.ldap.server=10.50.0.26
>>>> xwiki.authentication.ldap.port=389
>>>> xwiki.authentication.ldap.base_DN=OU=Standards,OU=Accounts,OU=_ITX,D
>>>> C =itx,DC=local xwiki.authentication.ldap.bind_DN=CN=Lester Marc 
>>>> Dizon (ITX),OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local
>>>> xwiki.authentication.ldap.bind_pass=mypassword
>>>> 
>>>> I have the following errors:
>>>> 81954 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] TRACE 
>>>> o.x.c.ldap.XWikiLDAPAuthServ

Re: [xwiki-users] XWiki Docker in Prod

2017-05-12 Thread Vincent Massol

cool thanks for reporting back!

Have a nice weekend too. 

And let me know if you have ideas on how to improve the docker image.

Thanks
-Vincent

> On 12 May 2017, at 17:11, Lester Marc Dizon (ITX) <lmdi...@itx-ge.com> wrote:
> 
> Hi guys, 
> 
> Thanks alot for all the help. I have logs and ldap running!
> 
> @Thomas Mortagne, for ldap I had this config missing (I actually thought that 
> sAMAccountName should be replaced by the user to authenticate with the 
> windows AD) :
> xwiki.authentication.ldap.UID_attr=sAMAccountName
> 
> Thanks and have a nice weekend!
> 
> Lester
> 
> -Original Message-
> From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas Mortagne
> Sent: jeudi 11 mai 2017 19:05
> To: XWiki Users <users@xwiki.org>
> Subject: Re: [xwiki-users] XWiki Docker in Prod
> 
> You have various examples
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/UseCases/.
> 
> On Thu, May 11, 2017 at 7:03 PM, Thomas Mortagne <thomas.morta...@xwiki.com> 
> wrote:
>> XWiki tried to find an entry in the LDAP server with the field "cn"
>> having the value "lmdizon-itx". Either this uid does not exist or you 
>> need to set a different field using the property 
>> xwiki.authentication.ldap.UID_attr (cn is the default).
>> 
>> On Thu, May 11, 2017 at 6:20 PM, Lester Marc Dizon (ITX) 
>> <lmdi...@itx-ge.com> wrote:
>>> @Thomas Froehlich thanks it works and I see LDAP debug logs! @Vincent 
>>> Massol , with Thomas way, I find the LDAP logs in 
>>> "/var/lib/tomcat8/logs/xwiki.log" .
>>> 
>>> I added the following configuration in xwiki.cfg but it still doesn't work:
>>> xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthSe
>>> rviceImpl
>>> xwiki.authentication.ldap.trylocal=1
>>> xwiki.authentication.ldap=1
>>> xwiki.authentication.ldap.server=10.50.0.26
>>> xwiki.authentication.ldap.port=389
>>> xwiki.authentication.ldap.base_DN=OU=Standards,OU=Accounts,OU=_ITX,DC
>>> =itx,DC=local xwiki.authentication.ldap.bind_DN=CN=Lester Marc Dizon 
>>> (ITX),OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local
>>> xwiki.authentication.ldap.bind_pass=mypassword
>>> 
>>> I have the following errors:
>>> 81954 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] TRACE 
>>> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
>>> 81955 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.c.ldap.XWikiLDAPAuthServiceImpl - The provided user is null. We don't 
>>> try to authenticate, it probably means the user is in non logged mode.
>>> 81955 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] TRACE 
>>> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
>>> 81956 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.contrib.ldap.XWikiLDAPConfig - remoteUserParser: null
>>> 82020 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.contrib.ldap.XWikiLDAPConfig - ldap_group_classes: [groupofnames, 
>>> posixgroup, apple-group, groupofuniquenames, dynamicgroup, 
>>> groupwisedistributionlist, group, dynamicgroupaux]
>>> 82021 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.contrib.ldap.XWikiLDAPConfig - ldap_group_memberfields: 
>>> [uniquemember, memberuid, member]
>>> 82201 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.c.ldap.XWikiLDAPConnection - Connection to LDAP server 
>>> [10.50.0.26:389]
>>> 82217 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.c.ldap.XWikiLDAPConnection - Binding to LDAP server with 
>>> credentials login=[CN=Lester Marc Dizon 
>>> (ITX),OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local]
>>> 83172 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.xwiki.contrib.ldap.XWikiLDAPUtils - Searching for the user in LDAP: 
>>> user [lmdizon-itx] base 
>>> [OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local] query 
>>> [(cn=lmdizon-itx)] uid [cn]
>>> 83180 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.c.ldap.XWikiLDAPConnection - LDAP search: 
>>> baseDN=[OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local] 
>>> query=[(cn=lmdizon-itx)] attr=[null] ldapScope=[2]
>>> 83253 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>>> o.x.c.ldap.XWikiLDAPAu

Re: [xwiki-users] XWiki Docker in Prod

2017-05-12 Thread Lester Marc Dizon (ITX)

Hi guys, 

Thanks alot for all the help. I have logs and ldap running!

@Thomas Mortagne, for ldap I had this config missing (I actually thought that 
sAMAccountName should be replaced by the user to authenticate with the windows 
AD) :
xwiki.authentication.ldap.UID_attr=sAMAccountName

Thanks and have a nice weekend!

Lester

-Original Message-
From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas Mortagne
Sent: jeudi 11 mai 2017 19:05
To: XWiki Users <users@xwiki.org>
Subject: Re: [xwiki-users] XWiki Docker in Prod

You have various examples
http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/UseCases/.

On Thu, May 11, 2017 at 7:03 PM, Thomas Mortagne <thomas.morta...@xwiki.com> 
wrote:
> XWiki tried to find an entry in the LDAP server with the field "cn"
> having the value "lmdizon-itx". Either this uid does not exist or you 
> need to set a different field using the property 
> xwiki.authentication.ldap.UID_attr (cn is the default).
>
> On Thu, May 11, 2017 at 6:20 PM, Lester Marc Dizon (ITX) 
> <lmdi...@itx-ge.com> wrote:
>> @Thomas Froehlich thanks it works and I see LDAP debug logs! @Vincent Massol 
>> , with Thomas way, I find the LDAP logs in "/var/lib/tomcat8/logs/xwiki.log" 
>> .
>>
>> I added the following configuration in xwiki.cfg but it still doesn't work:
>> xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthSe
>> rviceImpl
>> xwiki.authentication.ldap.trylocal=1
>> xwiki.authentication.ldap=1
>> xwiki.authentication.ldap.server=10.50.0.26
>> xwiki.authentication.ldap.port=389
>> xwiki.authentication.ldap.base_DN=OU=Standards,OU=Accounts,OU=_ITX,DC
>> =itx,DC=local xwiki.authentication.ldap.bind_DN=CN=Lester Marc Dizon 
>> (ITX),OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local
>> xwiki.authentication.ldap.bind_pass=mypassword
>>
>> I have the following errors:
>> 81954 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] TRACE 
>> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
>> 81955 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.c.ldap.XWikiLDAPAuthServiceImpl - The provided user is null. We don't 
>> try to authenticate, it probably means the user is in non logged mode.
>> 81955 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] TRACE 
>> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
>> 81956 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.contrib.ldap.XWikiLDAPConfig - remoteUserParser: null
>> 82020 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.contrib.ldap.XWikiLDAPConfig - ldap_group_classes: [groupofnames, 
>> posixgroup, apple-group, groupofuniquenames, dynamicgroup, 
>> groupwisedistributionlist, group, dynamicgroupaux]
>> 82021 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.contrib.ldap.XWikiLDAPConfig - ldap_group_memberfields: 
>> [uniquemember, memberuid, member]
>> 82201 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.c.ldap.XWikiLDAPConnection - Connection to LDAP server 
>> [10.50.0.26:389]
>> 82217 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.c.ldap.XWikiLDAPConnection - Binding to LDAP server with 
>> credentials login=[CN=Lester Marc Dizon 
>> (ITX),OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local]
>> 83172 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.xwiki.contrib.ldap.XWikiLDAPUtils - Searching for the user in LDAP: 
>> user [lmdizon-itx] base 
>> [OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local] query 
>> [(cn=lmdizon-itx)] uid [cn]
>> 83180 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.c.ldap.XWikiLDAPConnection - LDAP search: 
>> baseDN=[OU=Standards,OU=Accounts,OU=_ITX,DC=itx,DC=local] 
>> query=[(cn=lmdizon-itx)] attr=[null] ldapScope=[2]
>> 83253 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
>> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Local LDAP authentication failed.
>> com.xpn.xwiki.XWikiException: Error number 8001 in 8: Can't find LDAP user 
>> DN for input [lmdizon-itx]
>> at 
>> org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl.ldapAuthenticateInContext(XWikiLDAPAuthServiceImpl.java:608)
>> at 
>> org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl.ldapAuthenticate(XWikiLDAPAuthServiceImpl.java:334)
>> at 
>> org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl.authenticate(XWikiLDAPAuthServiceImpl.java:268)
>> at 
>> com.xpn.xwiki.user.impl.xwiki.MyFormAuthenticator.authenticate(My

Re: [xwiki-users] XWiki Docker in Prod

2017-05-11 Thread Thomas Mortagne

i/XWikiLogin] DEBUG 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Trying authentication against XWiki DB
> 83283 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - LDAP authentication failed for user 
> [lmdizon-itx]
> 83284 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - XWikiUser: null
>
>
> It seems that I connect to the LDAP server but it doesn't find the user.. 
> When I go to the login page I already have errors for some reason:
> 907353 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] TRACE 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
> 907354 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - The provided user is null. We don't try 
> to authenticate, it probably means the user is in non logged mode.
> 907354 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] TRACE 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - Starting LDAP authentication
> 907354 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - The provided user is null. We don't try 
> to authenticate, it probably means the user is in non logged mode.
> 907354 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
> o.x.c.ldap.XWikiLDAPAuthServiceImpl - XWikiUser: null
>
> Any ideas what config I'm missing/wrong?
>
> Thanks,
> Lester
>
> -Original Message-
> From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas Froehlich
> Sent: jeudi 11 mai 2017 08:25
> To: XWiki Users <users@xwiki.org>
> Subject: Re: [xwiki-users] XWiki Docker in Prod
>
> Hi Lester,
>
> you should configure the XWIKI logging. Then you can find ldap logging 
> information in the XWIKI log file. I did the following steps:
>
> a) Set up the XWIKI logging configuration in WEB-INF\classes\logback.xml by 
> adding a  RollingFileAppender
>
>class="ch.qos.logback.core.rolling.RollingFileAppender">
> /var/lib/tomcat8/logs/xwiki.log
> 
> 
> xwiki.%d{-MM-dd}.log
> 
> 30
> 
> 
> %-4relative [%thread] %-5level %logger{35} - %msg%n
> 
>   
>
> b) Extend the root level logging:
>
>   
> 
> 
>   
>
> c) Activation of the ldap logging (debugging) in WEB-INF\classes\logback.xml
>
>   
>   
>
>
> With kind regards
> Thomas



-- 
Thomas Mortagne

Re: [xwiki-users] XWiki Docker in Prod

2017-05-11 Thread Lester Marc Dizon (ITX)

 don't try 
to authenticate, it probably means the user is in non logged mode.
907354 [http://localhost:8080/bin/loginsubmit/XWiki/XWikiLogin] DEBUG 
o.x.c.ldap.XWikiLDAPAuthServiceImpl - XWikiUser: null

Any ideas what config I'm missing/wrong?

Thanks,
Lester

-Original Message-
From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas Froehlich
Sent: jeudi 11 mai 2017 08:25
To: XWiki Users <users@xwiki.org>
Subject: Re: [xwiki-users] XWiki Docker in Prod

Hi Lester,

you should configure the XWIKI logging. Then you can find ldap logging 
information in the XWIKI log file. I did the following steps:

a) Set up the XWIKI logging configuration in WEB-INF\classes\logback.xml by 
adding a  RollingFileAppender

  
/var/lib/tomcat8/logs/xwiki.log


xwiki.%d{-MM-dd}.log

30


%-4relative [%thread] %-5level %logger{35} - %msg%n

  

b) Extend the root level logging:

  


  

c) Activation of the ldap logging (debugging) in WEB-INF\classes\logback.xml

  
  


With kind regards
Thomas

Re: [xwiki-users] XWiki Docker in Prod

2017-05-11 Thread Vincent Massol

Hi,

> On 10 May 2017, at 18:44, Lester Marc Dizon (ITX) <lmdi...@itx-ge.com> wrote:
> 
> Works better with xwiki.authentication.ldap.trylocal=1, thanks . However I 
> don't see any LDAP debug logs. I have the following logs in 
> /usr/local/tomcat/logs/*:
> - catalina.2017-05-10.log

^^ I guess it’s this one then.

Seems this Tomcat is configured to use log4j: 
https://tomcat.apache.org/tomcat-6.0-doc/logging.html#Using_Log4j

# Define all the appenders
log4j.appender.CATALINA=org.apache.log4j.DailyRollingFileAppender
log4j.appender.CATALINA.File=${catalina.base}/logs/catalina.
log4j.appender.CATALINA.Append=true
log4j.appender.CATALINA.Encoding=UTF-8
# Roll-over the log once per day
log4j.appender.CATALINA.DatePattern='.'-MM-dd'.log'
log4j.appender.CATALINA.layout = org.apache.log4j.PatternLayout
log4j.appender.CATALINA.layout.ConversionPattern = %d [%t] %-5p %c- %m%n

Thanks
-Vincent


> - host-manager.2017-05-10.log
> - localhost.2017-05-10.log
> - localhost_access_log.2017-05-10.txt
> - manager.2017-05-10.log
> 
> http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging states that 
> Tomcat on unix will capture stdout and add logs to the 
> tomcat/logs/catalina.out file. However made a find on "catalina.out" but 
> nothing. Any clues where to find those LDAP logs?
> 
> Thanks,
> Lester
> 
> -Original Message-
> From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas Mortagne
> Sent: mercredi 10 mai 2017 17:38
> To: XWiki Users <users@xwiki.org>
> Subject: Re: [xwiki-users] XWiki Docker in Prod
> 
> On Wed, May 10, 2017 at 5:25 PM, Lester Marc Dizon (ITX) <lmdi...@itx-ge.com> 
> wrote:
>> Thank you for your responses. I'm new to this community and happy to see you 
>> guys are very responsive.
>> 
>> @Thomas,  I have followed your wiki pages. The moment I add 
>> "xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl"
>>  in xwiki.cfg ,  I can't login anymore even with the local admin account. I 
>> get a 401 http status code in 
>> "/usr/local/tomcat/logs/localhost_access_log.2017-05-10.txt".
> 
> This is because by default the LDAP authenticator does not fallback on 
> standard XWiki auth. See xwiki.authentication.ldap.trylocal property in the 
> documentation.
> 
>> Can you tell me where and which logfile I should check when I've added 
>>  in 
>> "WEB-INF/classes/logback.xml"?
> 
> Whatever is the application server log file in the docker image.
> Vincent should know better.
> 
>> 
>> @Vincent, running with Docker seems to work very well except for my issues 
>> with LDAP. Also, I can ping the LDAP Server inside the XWiki container. I 
>> really need to check a logfile to know where it is failing but I don't know 
>> where to find it.
>> 
>> Thanks,
>> Lester
>>

Re: [xwiki-users] XWiki Docker in Prod

2017-05-11 Thread Thomas Froehlich

Hi Lester,

you should configure the XWIKI logging. Then you can find ldap logging 
information in the XWIKI log file. I did the following steps:

a) Set up the XWIKI logging configuration in WEB-INF\classes\logback.xml by 
adding a  RollingFileAppender

  
/var/lib/tomcat8/logs/xwiki.log


xwiki.%d{-MM-dd}.log

30


%-4relative [%thread] %-5level %logger{35} - %msg%n

  

b) Extend the root level logging:

  


  

c) Activation of the ldap logging (debugging) in WEB-INF\classes\logback.xml

  
  


With kind regards
Thomas


-Ursprüngliche Nachricht-
Von: users [mailto:users-boun...@xwiki.org] Im Auftrag von Lester Marc Dizon 
(ITX)
Gesendet: Mittwoch, 10. Mai 2017 18:45
An: XWiki Users <users@xwiki.org>
Betreff: Re: [xwiki-users] XWiki Docker in Prod

Works better with xwiki.authentication.ldap.trylocal=1, thanks . However I 
don't see any LDAP debug logs. I have the following logs in 
/usr/local/tomcat/logs/*:
- catalina.2017-05-10.log
- host-manager.2017-05-10.log
- localhost.2017-05-10.log
- localhost_access_log.2017-05-10.txt
- manager.2017-05-10.log

http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging states that Tomcat 
on unix will capture stdout and add logs to the tomcat/logs/catalina.out file. 
However made a find on "catalina.out" but nothing. Any clues where to find 
those LDAP logs?

Thanks,
Lester

-Original Message-
From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas Mortagne
Sent: mercredi 10 mai 2017 17:38
To: XWiki Users <users@xwiki.org>
Subject: Re: [xwiki-users] XWiki Docker in Prod

On Wed, May 10, 2017 at 5:25 PM, Lester Marc Dizon (ITX) <lmdi...@itx-ge.com> 
wrote:
> Thank you for your responses. I'm new to this community and happy to see you 
> guys are very responsive.
>
> @Thomas,  I have followed your wiki pages. The moment I add 
> "xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl"
>  in xwiki.cfg ,  I can't login anymore even with the local admin account. I 
> get a 401 http status code in 
> "/usr/local/tomcat/logs/localhost_access_log.2017-05-10.txt".

This is because by default the LDAP authenticator does not fallback on standard 
XWiki auth. See xwiki.authentication.ldap.trylocal property in the 
documentation.

> Can you tell me where and which logfile I should check when I've added 
>  in 
> "WEB-INF/classes/logback.xml"?

Whatever is the application server log file in the docker image.
Vincent should know better.

>
> @Vincent, running with Docker seems to work very well except for my issues 
> with LDAP. Also, I can ping the LDAP Server inside the XWiki container. I 
> really need to check a logfile to know where it is failing but I don't know 
> where to find it.
>
> Thanks,
> Lester
>

Re: [xwiki-users] XWiki Docker in Prod

2017-05-10 Thread Lester Marc Dizon (ITX)

Works better with xwiki.authentication.ldap.trylocal=1, thanks . However I 
don't see any LDAP debug logs. I have the following logs in 
/usr/local/tomcat/logs/*:
- catalina.2017-05-10.log
- host-manager.2017-05-10.log
- localhost.2017-05-10.log
- localhost_access_log.2017-05-10.txt
- manager.2017-05-10.log

http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Logging states that Tomcat 
on unix will capture stdout and add logs to the tomcat/logs/catalina.out file. 
However made a find on "catalina.out" but nothing. Any clues where to find 
those LDAP logs?

Thanks,
Lester

-Original Message-
From: users [mailto:users-boun...@xwiki.org] On Behalf Of Thomas Mortagne
Sent: mercredi 10 mai 2017 17:38
To: XWiki Users <users@xwiki.org>
Subject: Re: [xwiki-users] XWiki Docker in Prod

On Wed, May 10, 2017 at 5:25 PM, Lester Marc Dizon (ITX) <lmdi...@itx-ge.com> 
wrote:
> Thank you for your responses. I'm new to this community and happy to see you 
> guys are very responsive.
>
> @Thomas,  I have followed your wiki pages. The moment I add 
> "xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl"
>  in xwiki.cfg ,  I can't login anymore even with the local admin account. I 
> get a 401 http status code in 
> "/usr/local/tomcat/logs/localhost_access_log.2017-05-10.txt".

This is because by default the LDAP authenticator does not fallback on standard 
XWiki auth. See xwiki.authentication.ldap.trylocal property in the 
documentation.

> Can you tell me where and which logfile I should check when I've added 
>  in 
> "WEB-INF/classes/logback.xml"?

Whatever is the application server log file in the docker image.
Vincent should know better.

>
> @Vincent, running with Docker seems to work very well except for my issues 
> with LDAP. Also, I can ping the LDAP Server inside the XWiki container. I 
> really need to check a logfile to know where it is failing but I don't know 
> where to find it.
>
> Thanks,
> Lester
>

Re: [xwiki-users] XWiki Docker in Prod

2017-05-10 Thread Vincent Massol


> On 10 May 2017, at 17:37, Thomas Mortagne <thomas.morta...@xwiki.com> wrote:
> 
> On Wed, May 10, 2017 at 5:25 PM, Lester Marc Dizon (ITX)
> <lmdi...@itx-ge.com> wrote:
>> Thank you for your responses. I'm new to this community and happy to see you 
>> guys are very responsive.
>> 
>> @Thomas,  I have followed your wiki pages. The moment I add 
>> "xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl"
>>  in xwiki.cfg ,  I can't login anymore even with the local admin account. I 
>> get a 401 http status code in 
>> "/usr/local/tomcat/logs/localhost_access_log.2017-05-10.txt".
> 
> This is because by default the LDAP authenticator does not fallback on
> standard XWiki auth. See xwiki.authentication.ldap.trylocal property
> in the documentation.
> 
>> Can you tell me where and which logfile I should check when I've added 
>>  in 
>> "WEB-INF/classes/logback.xml"?
> 
> Whatever is the application server log file in the docker image.
> Vincent should know better.

The image is using Tomcat so the default location where tomcat puts its log 
file (can’t check right now).

Thanks
-Vincent

> 
>> 
>> @Vincent, running with Docker seems to work very well except for my issues 
>> with LDAP. Also, I can ping the LDAP Server inside the XWiki container. I 
>> really need to check a logfile to know where it is failing but I don't know 
>> where to find it.
>> 
>> Thanks,
>> Lester
>> 
>> -Original Message-
>> From: users [mailto:users-boun...@xwiki.org] On Behalf Of Vincent Massol
>> Sent: mercredi 10 mai 2017 16:54
>> To: XWiki Users <users@xwiki.org>
>> Subject: Re: [xwiki-users] XWiki Docker in Prod
>> 
>> 
>>> On 10 May 2017, at 16:27, Thomas Mortagne <thomas.morta...@xwiki.com> wrote:
>>> 
>>> I don't know much about Docker but I can maybe help with the LDAP 
>>> authenticator.
>>> 
>>> After you installed the extension you will also need to modify the
>>> property xwiki.authentication.authclass in file xwiki.cfg in the
>>> application server as indicated on
>>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HGenericLDAPconfiguration.
>>> I have no idea if the Docker package let you modify this file
>> 
>> Yes it does, but it could be simpler, see  
>> https://jira.xwiki.org/browse/XDOCKER-20
>> 
>> Thanks
>> -Vincent
>> 
>>> but if
>>> you managed to do that then a good thing to do usually to understand
>>> what's wrong with your LDAP setup is enabled debug log (see
>>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HEnableLDAPdebuglog).
>>> 
>>> On Wed, May 10, 2017 at 4:13 PM, Lester Marc Dizon (ITX)
>>> <lmdi...@itx-ge.com> wrote:
>>>> Hi,
>>>> 
>>>> We are currently testing XWiki. I have a test environment for XWiki 
>>>> running in Docker. I would like to know if it's ok to run it as is in Prod 
>>>> (intranet)?
>>>> 
>>>> Also, I'm trying to connect it to LDAP with no success (tried with 
>>>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/ 
>>>> and http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Application/ 
>>>> ). Is it because I'm running it in Docker? Is there a log where I can 
>>>> check what's wrong?
>>>> 
>>>> Any help is appreciated.
>>>> 
>>>> Thanks,
>>>> Lester
>>> 
>>> 
>>> 
>>> --
>>> Thomas Mortagne
>> 
> 
> 
> 
> -- 
> Thomas Mortagne

Re: [xwiki-users] XWiki Docker in Prod

2017-05-10 Thread Thomas Mortagne

On Wed, May 10, 2017 at 5:25 PM, Lester Marc Dizon (ITX)
<lmdi...@itx-ge.com> wrote:
> Thank you for your responses. I'm new to this community and happy to see you 
> guys are very responsive.
>
> @Thomas,  I have followed your wiki pages. The moment I add 
> "xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl"
>  in xwiki.cfg ,  I can't login anymore even with the local admin account. I 
> get a 401 http status code in 
> "/usr/local/tomcat/logs/localhost_access_log.2017-05-10.txt".

This is because by default the LDAP authenticator does not fallback on
standard XWiki auth. See xwiki.authentication.ldap.trylocal property
in the documentation.

> Can you tell me where and which logfile I should check when I've added 
>  in 
> "WEB-INF/classes/logback.xml"?

Whatever is the application server log file in the docker image.
Vincent should know better.

>
> @Vincent, running with Docker seems to work very well except for my issues 
> with LDAP. Also, I can ping the LDAP Server inside the XWiki container. I 
> really need to check a logfile to know where it is failing but I don't know 
> where to find it.
>
> Thanks,
> Lester
>
> -Original Message-
> From: users [mailto:users-boun...@xwiki.org] On Behalf Of Vincent Massol
> Sent: mercredi 10 mai 2017 16:54
> To: XWiki Users <users@xwiki.org>
> Subject: Re: [xwiki-users] XWiki Docker in Prod
>
>
>> On 10 May 2017, at 16:27, Thomas Mortagne <thomas.morta...@xwiki.com> wrote:
>>
>> I don't know much about Docker but I can maybe help with the LDAP 
>> authenticator.
>>
>> After you installed the extension you will also need to modify the
>> property xwiki.authentication.authclass in file xwiki.cfg in the
>> application server as indicated on
>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HGenericLDAPconfiguration.
>> I have no idea if the Docker package let you modify this file
>
> Yes it does, but it could be simpler, see  
> https://jira.xwiki.org/browse/XDOCKER-20
>
> Thanks
> -Vincent
>
>> but if
>> you managed to do that then a good thing to do usually to understand
>> what's wrong with your LDAP setup is enabled debug log (see
>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HEnableLDAPdebuglog).
>>
>> On Wed, May 10, 2017 at 4:13 PM, Lester Marc Dizon (ITX)
>> <lmdi...@itx-ge.com> wrote:
>>> Hi,
>>>
>>> We are currently testing XWiki. I have a test environment for XWiki running 
>>> in Docker. I would like to know if it's ok to run it as is in Prod 
>>> (intranet)?
>>>
>>> Also, I'm trying to connect it to LDAP with no success (tried with 
>>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/ 
>>> and http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Application/ 
>>> ). Is it because I'm running it in Docker? Is there a log where I can check 
>>> what's wrong?
>>>
>>> Any help is appreciated.
>>>
>>> Thanks,
>>> Lester
>>
>>
>>
>> --
>> Thomas Mortagne
>



-- 
Thomas Mortagne

Re: [xwiki-users] XWiki Docker in Prod

2017-05-10 Thread Lester Marc Dizon (ITX)

Thank you for your responses. I'm new to this community and happy to see you 
guys are very responsive.

@Thomas,  I have followed your wiki pages. The moment I add 
"xwiki.authentication.authclass=org.xwiki.contrib.ldap.XWikiLDAPAuthServiceImpl"
 in xwiki.cfg ,  I can't login anymore even with the local admin account. I get 
a 401 http status code in 
"/usr/local/tomcat/logs/localhost_access_log.2017-05-10.txt".  Can you tell me 
where and which logfile I should check when I've added  in "WEB-INF/classes/logback.xml"?

@Vincent, running with Docker seems to work very well except for my issues with 
LDAP. Also, I can ping the LDAP Server inside the XWiki container. I really 
need to check a logfile to know where it is failing but I don't know where to 
find it.

Thanks,
Lester

-Original Message-
From: users [mailto:users-boun...@xwiki.org] On Behalf Of Vincent Massol
Sent: mercredi 10 mai 2017 16:54
To: XWiki Users <users@xwiki.org>
Subject: Re: [xwiki-users] XWiki Docker in Prod

> On 10 May 2017, at 16:27, Thomas Mortagne <thomas.morta...@xwiki.com> wrote:
> 
> I don't know much about Docker but I can maybe help with the LDAP 
> authenticator.
> 
> After you installed the extension you will also need to modify the 
> property xwiki.authentication.authclass in file xwiki.cfg in the 
> application server as indicated on 
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HGenericLDAPconfiguration.
> I have no idea if the Docker package let you modify this file

Yes it does, but it could be simpler, see  
https://jira.xwiki.org/browse/XDOCKER-20

Thanks
-Vincent

> but if
> you managed to do that then a good thing to do usually to understand 
> what's wrong with your LDAP setup is enabled debug log (see 
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HEnableLDAPdebuglog).
> 
> On Wed, May 10, 2017 at 4:13 PM, Lester Marc Dizon (ITX) 
> <lmdi...@itx-ge.com> wrote:
>> Hi,
>> 
>> We are currently testing XWiki. I have a test environment for XWiki running 
>> in Docker. I would like to know if it's ok to run it as is in Prod 
>> (intranet)?
>> 
>> Also, I'm trying to connect it to LDAP with no success (tried with 
>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/ and 
>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Application/ ). Is 
>> it because I'm running it in Docker? Is there a log where I can check what's 
>> wrong?
>> 
>> Any help is appreciated.
>> 
>> Thanks,
>> Lester
> 
> 
> 
> --
> Thomas Mortagne

Re: [xwiki-users] XWiki Docker in Prod

2017-05-10 Thread Vincent Massol


> On 10 May 2017, at 16:27, Thomas Mortagne  wrote:
> 
> I don't know much about Docker but I can maybe help with the LDAP 
> authenticator.
> 
> After you installed the extension you will also need to modify the
> property xwiki.authentication.authclass in file xwiki.cfg in the
> application server as indicated on
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HGenericLDAPconfiguration.
> I have no idea if the Docker package let you modify this file

Yes it does, but it could be simpler, see  
https://jira.xwiki.org/browse/XDOCKER-20

Thanks
-Vincent

> but if
> you managed to do that then a good thing to do usually to understand
> what's wrong with your LDAP setup is enabled debug log (see
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HEnableLDAPdebuglog).
> 
> On Wed, May 10, 2017 at 4:13 PM, Lester Marc Dizon (ITX)
>  wrote:
>> Hi,
>> 
>> We are currently testing XWiki. I have a test environment for XWiki running 
>> in Docker. I would like to know if it's ok to run it as is in Prod 
>> (intranet)?
>> 
>> Also, I'm trying to connect it to LDAP with no success (tried with 
>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/ and 
>> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Application/ ). Is 
>> it because I'm running it in Docker? Is there a log where I can check what's 
>> wrong?
>> 
>> Any help is appreciated.
>> 
>> Thanks,
>> Lester
> 
> 
> 
> -- 
> Thomas Mortagne

Re: [xwiki-users] XWiki Docker in Prod

2017-05-10 Thread Vincent Massol

Hi,

> On 10 May 2017, at 16:13, Lester Marc Dizon (ITX)  wrote:
> 
> Hi,
> 
> We are currently testing XWiki. I have a test environment for XWiki running 
> in Docker. I would like to know if it's ok to run it as is in Prod (intranet)?

That’s the intent but these images are pretty new (I added them a few months 
ago) and I haven’t received any feedback so far from people using them in 
production or not.

I’m also happy to work with you to make them production-ready if you see 
something missing.

> Also, I'm trying to connect it to LDAP with no success (tried with 
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/ and 
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Application/ ). Is 
> it because I'm running it in Docker? Is there a log where I can check what's 
> wrong?

Yes it could be related to Docker since it runs inside its own network (See 
https://docs.docker.com/engine/userguide/networking/ for more details). I don’t 
have much experience with this though but it’s easy to check by doing a “docker 
exec” on your running container and try to ping your LDAP server IP.

Thanks
-Vincent

> Any help is appreciated.
> 
> Thanks,
> Lester

Re: [xwiki-users] XWiki Docker in Prod

2017-05-10 Thread Thomas Mortagne

I don't know much about Docker but I can maybe help with the LDAP authenticator.

After you installed the extension you will also need to modify the
property xwiki.authentication.authclass in file xwiki.cfg in the
application server as indicated on
http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HGenericLDAPconfiguration.
I have no idea if the Docker package let you modify this file but if
you managed to do that then a good thing to do usually to understand
what's wrong with your LDAP setup is enabled debug log (see
http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/#HEnableLDAPdebuglog).

On Wed, May 10, 2017 at 4:13 PM, Lester Marc Dizon (ITX)
 wrote:
> Hi,
>
> We are currently testing XWiki. I have a test environment for XWiki running 
> in Docker. I would like to know if it's ok to run it as is in Prod (intranet)?
>
> Also, I'm trying to connect it to LDAP with no success (tried with 
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Authenticator/ and 
> http://extensions.xwiki.org/xwiki/bin/view/Extension/LDAP/Application/ ). Is 
> it because I'm running it in Docker? Is there a log where I can check what's 
> wrong?
>
> Any help is appreciated.
>
> Thanks,
> Lester

-- 
Thomas Mortagne

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

Re: [xwiki-users] XWiki Docker in Prod

14 matches

Site Navigation

Mail list logo

Footer information